Changes for page R20 Docker - Single Lane

Last modified by Erik Bakker on 2026/06/29 09:44

From version 43.1
edited by Erik Bakker
on 2026/06/29 09:44
Change comment: There is no comment for this version
To version 7.1
edited by eMagiz
on 2022/10/06 08:28
Change comment: There is no comment for this version

Summary

Details

Page properties
Title
... ... @@ -1,1 +1,1 @@
1 -R20 Docker - Single Lane
1 +R5 Docker Single lane
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.ebakker
1 +XWiki.eMagiz
Content
... ... @@ -1,20 +1,17 @@
1 -{{info}}This environment template needs to be applied on all environments of all (your) models before August 29th, 2026{{/info}}
1 +Service affecting template; in order to update to this cloud template there is only a single step required.
2 2  
3 -**Non-Service affecting** final template to use the **R20** single lane release. This upgrade is non-service-affecting.
3 +**Overview**
4 +This update changes the Carwash (See https://docs.emagiz.com/bin/view/Main/eMagiz%20Academy/Fundamentals/fundamental-emagiz-cloud-inner-workings). Note that using this new version of the Carwash involves a DNS change, and thus relies on clients honoring TTLs of DNS records. This update also changes the IP adresses used in the infrastructure. For more details, please contact Expert Services. Furthermore, TLSv1.0 is disabled in this update. Verify legacy software can handle atleast TLSv1.1 before updating.
4 4  
5 -**Process**
6 -We upgrade in one step to use the new **R20** release of the cloud template. This step is non-service affecting.
6 +**Updates**
7 + * Changed ciphers and cipher suites
8 + * Disabled TLS V1.0 support and enable TLS V1.3 support
9 + * IP addresses available for the new car wash
10 + ** eu-central-1a: 35.158.46.28
11 + ** eu-central-1b: 3.74.190.88
7 7  
8 -**Overview**
9 -* Improve internal monitoring and alerting capabilities
10 -* Improve management of users and permissions
11 11  
12 -**Update Steps**
13 -* Use the final **R20** template (non-service affecting) (duration: 10 minutes)
14 -** None of the runtimes will be touched.
15 -** Authorization servers will perform a rolling update.
16 -* User actions after applying the final template:
17 -** Check if all runtimes are reachable by Deploy Architecture.
18 -** Check if all flows have been installed according to the active release.
19 -** Check if messages pass through the model by verifying a critical message flow in external systems.
14 +**Technical notes**
15 +• Supported Ciphers in OpenSSL Format: ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:DHE-RSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS@SECLEVEL=1
16 +• Supported TLS Versions: TLSv1.1, TLSv1.2 and TLSv1.3
20 20