Min TLS1.2 的 Istio Ingress-Gateway 的默认密码套件

Default Cipher Suites for Istio Ingress-Gateway for Min TLS1.2

有没有办法检查 Ingress 网关使用的默认密码套件? 我的网关启用了 MTLS,最低 TLS 版本为 1.2。

是的,您可以通过 Mutual TLS authentication 文档找到它:

Istio configures TLSv1_2 as the minimum TLS version for both client and server with the following cipher suites:

  • CDHE-ECDSA-AES256-GCM-SHA384

  • ECDHE-RSA-AES256-GCM-SHA384

  • ECDHE-ECDSA-AES128-GCM-SHA256

  • ECDHE-RSA-AES128-GCM-SHA256

  • AES256-GCM-SHA384

  • AES128-GCM-SHA256