Security Policy

It specifies the security policy used by a listener interconnected with an ingress.

This parameter is only available for HTTPS listeners added to a dedicated load balancer.

For QUIC listeners, this parameter is not used.

If both security_policy_id and tls_ciphers_policy are specified, only security_policy_id will take effect.

The priority of cipher suites is ECC, RSA, and TLS1.3 (ECC and RSA are both supported).

Value Range

tls-1-0-inherit, tls-1-0, tls-1-1, tls-1-2, tls-1-2-strict, tls-1-2-fs, tls-1-0-with-1-3, tls-1-2-fs-with-1-3, or hybrid-policy-1-0

Default Value

tls-1-2

Modifiable

Yes

Scope

CCE standard and CCE Turbo clusters

Suggestions

If cipher suites are supported, use strong security policies.

The default security policy is tls-1-2. The client needs to support the security policy type.

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.