# Per backend cipher suites

**URL:** https://discourse.haproxy.org/t/per-backend-cipher-suites/6346
**Category:** Help!
**Created:** [March 11, 2021, 3:58pm UTC](https://discourse.haproxy.org/t/per-backend-cipher-suites/6346 "2021-03-11T15:58:16Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![BrendanDoyle](https://avatars.discourse-cdn.com/v4/letter/b/9de0a6/32.png) [@BrendanDoyle](https://discourse.haproxy.org/u/BrendanDoyle)
#### Post date: [March 11, 2021, 3:58pm UTC](https://discourse.haproxy.org/t/per-backend-cipher-suites/6346/1 "2021-03-11T15:58:16Z")

</div>

Hi, I think the answer to this is no, but don’t understand why this feature is not available, I’d like to configure a list of ciphers on a per backend basis i.e to be able to use ssl-default-server-ciphers in each backend section rather than having to use ciphers on each server line. I don’t want to use ssl-default-server-ciphers in the global section as each backend can have a different set of ciphers.

---

<div class="post-metadata">

### Author: ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)
#### Post date: [March 11, 2021, 8:47pm UTC](https://discourse.haproxy.org/t/per-backend-cipher-suites/6346/2 "2021-03-11T20:47:47Z")

</div>

That’s what [default-server](https://cbonte.github.io/haproxy-dconv/2.2/configuration.html#default-server%20%28Alphabetically%20sorted%20keywords%20reference%29) does.

---

<div class="post-metadata">

### Author: ![BrendanDoyle](https://avatars.discourse-cdn.com/v4/letter/b/9de0a6/32.png) [@BrendanDoyle](https://discourse.haproxy.org/u/BrendanDoyle)
#### Post date: [March 25, 2021, 11:56am UTC](https://discourse.haproxy.org/t/per-backend-cipher-suites/6346/3 "2021-03-25T11:56:43Z")

</div>

That’s great thanks, and that works for most things when using the data plane API but “ciphers” seems to be ignored. Works when hand editing the config file, just the data plane API seems to ignore:  
“default\_server”: {“ciphers”: “ECDHE-RSA-AES128-GCM-SHA256”}

---

<div class="post-metadata">

### Author: ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)
#### Post date: [March 25, 2021, 12:32pm UTC](https://discourse.haproxy.org/t/per-backend-cipher-suites/6346/4 "2021-03-25T12:32:39Z")

</div>

I suggest you report this to the data plane project:

> **[haproxytech/dataplaneapi](https://github.com/haproxytech/dataplaneapi)**
>
> HAProxy Data Plane API. Contribute to haproxytech/dataplaneapi development by creating an account on GitHub.

---

<div class="post-metadata">

### Author: ![BrendanDoyle](https://avatars.discourse-cdn.com/v4/letter/b/9de0a6/32.png) [@BrendanDoyle](https://discourse.haproxy.org/u/BrendanDoyle)
#### Post date: [March 25, 2021, 3:14pm UTC](https://discourse.haproxy.org/t/per-backend-cipher-suites/6346/5 "2021-03-25T15:14:15Z")

</div>

done that
