Announcing TLS 1.3 support on OCI flexible load balancers

Transport layer security (TLS) is the encryption standard that protects internet communications. It's the 's' in "HTTPS." TLS version 1.3 is the latest release and is the industry standard. Oracle Cloud Infrastructure (OCI) flexible load balancers now support TLS 1.3 on listeners and backend sets.

OCI flexible load balancers are often the entry point to your application. Typically, they also offload frontend communication encryption processing from your application, which makes them a vital component in the security of your application. Supporting TLS 1.3 helps ensure the security posture of your applications by explicitly dropping older, insecure encryption algorithms and only using algorithms that have no known vulnerabilities and support perfect forward secrecy. TLS 1.3 also increases performance by reducing the latency because only one round trip is required for new clients and no round trips for clients with preshared keys.

Enable TLS 1.3 on an OCI flexible load balancer

You can enable TLS 1.3 on your flexible load balancer with the following steps. For more complete details, view the documentation.

1. In the Console, navigate to Networking, and click Load Balancer.

2. Select the load balancer where you want to enable TLS 1.3.

3. Under the Resources section, select the listener you want and click Edit.

4. In the Edit Listener window, click Show Advanced Options and select 1.3 from the TLS version menu. You must use a TLS 1.3 compatible cipher suite. You can to use the default TLS1.3 compatible cipher suite (oci-default-http2-tls12-13-ssl-cipher-suite-v1) or create a custom TLS1.3 compatible cipher suite. When you're finished editing your listener, click Save changes.

5. You can repeat the same process for your SSL enabled backend sets to ensure that TLS 1.3 is used between your load balancer and its backends. Navigate to backend sets and click Edit on your wanted backend.

6. In the edit backend set menu, click Show Advanced Options and select 1.3 from the TLS versions. When you're finished editing your listener, click Save changes.

Next steps

OCI flexible load balancers with TLS 1.3 now enable you to help secure your application with the latest and most performant version of TLS. To learn more about OCI flexible load balancers, view the OCI Flexible Load Balancer page. For details on how OCI can enable you to secure your cloud workloads, view the Oracle Cloud Infrastructure Cloud Security Services documentation.

Public link

Please use the above public link if you want to share this noodl on another website.