Changes for page R18 Docker - Single Lane
Last modified by Erik Bakker on 2026/02/10 10:59
From version 38.1
edited by Erik Bakker
on 2026/02/10 10:59
on 2026/02/10 10:59
Change comment:
There is no comment for this version
To version 8.1
edited by eMagiz
on 2022/10/06 08:31
on 2022/10/06 08:31
Change comment:
There is no comment for this version
Summary
-
Page properties (3 modified, 0 added, 0 removed)
Details
- Page properties
-
- Title
-
... ... @@ -1,1 +1,1 @@ 1 -R 18Docker - SingleLane1 +R5 Docker - Single lane - Author
-
... ... @@ -1,1 +1,1 @@ 1 -XWiki.e bakker1 +XWiki.eMagiz - Content
-
... ... @@ -1,21 +1,17 @@ 1 - **Service affecting**finaltemplate to use the**R18** singlelanerelease.This upgrade isservice-affecting,asallinstanceshaveto be recreated.1 +Service affecting template; in order to update to this cloud template there is only a single step required. 2 2 3 -**Process** 4 -We upgrade in one step to use the new **R18** release of the cloud template. This step is service affecting. 5 - 6 6 **Overview** 7 -* Security improvements to the eMagiz infrastructure 8 -* Update Ubuntu version 9 -* Update Docker version 10 -* Update control agent version 11 -* Update Authorization Server (if applicable) 4 +This update changes the Carwash (See https://docs.emagiz.com/bin/view/Main/eMagiz%20Academy/Fundamentals/fundamental-emagiz-cloud-inner-workings). Note that using this new version of the Carwash involves a DNS change, and thus relies on clients honoring TTLs of DNS records. This update also changes the IP adresses used in the infrastructure. For more details, please contact Expert Services. Furthermore, TLSv1.0 is disabled in this update. Verify legacy software can handle atleast TLSv1.1 before updating. 12 12 13 -**Update Steps**14 - *Usethefinal **R18** template(serviceaffecting) (duration:15 minutes)15 - *Useractionsafterapplyingthefinaltemplate:16 - **Checkifallruntimesarereachableby Deploy Architecture.17 - **Checkifallflowshavebeeninstalled according to theactive release.18 - **Checkifmessagespassthrough themodel by verifying acritical message flow inexternalsystems.6 +**Updates** 7 + * Changed ciphers and cipher suites 8 + * Disabled TLS V1.0 support and enable TLS V1.3 support 9 + * IP addresses available for the new car wash 10 + ** eu-central-1a: 35.158.46.28 11 + ** eu-central-1b: 3.74.190.88 19 19 20 -**Remarks** 21 -In case your model running fully on-premise you need to upgrade your agents by upgrading to the next available template (R3). 13 + 14 +**Technical notes** 15 +• Supported Ciphers in OpenSSL Format: ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:DHE-RSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS@SECLEVEL=1 16 +• Supported TLS Versions: TLSv1.1, TLSv1.2 and TLSv1.3 17 +