# IP adresses, TLS versions & cipher suites

## IP addresses

All outbound traffic from Pagero will originate from one of these two IP addresses:

- `91.238.51.2`
- `91.238.51.51`

If you´re unable to open for/whitelist both, we can inform you which exact one is applicable in your specific case once the setup has been completed.

!!!success
**NOTE:** Our platform is open for all inbound traffic (i.e. traffic to Pagero). In other words, we do not have open for/whitelist any external IPs.
!!!

---

## Transport Layer Security (TLS)

TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery.

The primary goal of TLS is to provide a secure channel between two communicating peers; the only requirement from the underlying transport is a reliable, in-order data stream.

### Supported TLS versions

- TLS v1.2 ([RFC5246](https://datatracker.ietf.org/doc/html/rfc5246))
- TLS v1.3 ([RFC8446](https://datatracker.ietf.org/doc/html/rfc8446))

!!! danger
**NOTE:** TLS v1.0 and TLS v1.1 (SSL encryption) were deprecated in 2020 and are **no longer supported**!

Please make sure to access our services using at least TLS v1.2.
!!!

---

### Supported HTTP ciphers suites

A cipher suite is a set of algorithms that help secure a network/HTTP connection.

The following cipher suites are supported by us:

- `ECDHE-ECDSA-AES128-GCM-SHA256`
- `ECDHE-RSA-AES128-GCM-SHA256`
- `ECDHE-ECDSA-AES256-GCM-SHA384`
- `ECDHE-RSA-AES256-GCM-SHA384`
- `ECDHE-ECDSA-CHACHA20-POLY1305`
- `ECDHE-RSA-CHACHA20-POLY1305`
- `DHE-RSA-AES128-GCM-SHA256`
- `DHE-RSA-AES256-GCM-SHA384`

More information on cipher suites can be found [on Wikipedia](https://en.m.wikipedia.org/wiki/Cipher_suite).