TLS version in DX O2

Products

• DX Application Performance Management
• DX Operational Intelligence
• DX Operational Observability

Issue/Introduction

Which version of TLS is in use for communication?

Environment

• DX O2 OnPremise 2*
• DX OI OnPremise 2*
• DX APM OnPremise 2*

Resolution

1) The agent communication with the Manager use Websiocket which is TLS 1.2

2) Manager Security communication is done at the nginx ingress level as it is the main entry point for our services (apm,axa,doi, jarvis) and TLS is specified at the ingress level

3) All inter-cluster communication is open as external access to the components doesn't exist but through an ingress. All pods internal communication is insecure/http and all agents and integrations for apm, axa, doi uses the secure ingress routes for access