Traefik

With Helmut4 v4.12 the internal reverse proxy has been upgraded to Traefik v3.x, which now only supports modern encryption standards (TLS 1.2 and TLS 1.3).

As a result, any load balancer or reverse proxy placed in front of a Helmut4 system must also support TLS 1.2 or newer. Older protocols such as TLS 1.0 and TLS 1.1 are no longer accepted and connections using them will be rejected.

For reference: TLS 1.0 (1999) and TLS 1.1 (2006) are considered obsolete and have been deprecated across the industry for several years due to security weaknesses. TLS 1.2 (2008) and TLS 1.3 (2018) are the current secure standards and are supported by all modern operating systems and browsers.

Last updated