anyone use SSL certs on Cloud connectors/DDC's with a key size of 4096 ? currently use 2048 but our CA guy wants me to use a key size of 4096. I cant find any official doc with guidance/recommendations relating to the key size of the certs issued to Delivery controllers/Cloud connectors. Obviously the bigger the key size the bigger performance impact which is my concern

I think Balint does 😉: balintoberrauch.com/2025/01/20/secure-xml-traffic-on-cloud-connector

Side Note: Certificates with a Key Size > 4096 are not supported on Netscaler! - I presume that is if you are load balancing the DDC's for XML via Netscaler @Balint Oberrauch

That's not really true. docs.netscaler.com/en-us/…/server-certificate-support-matrix-on-the-adc….

yeah when i read it on Balints website i did think it could be wrong as i have used 4096 keys on the netscaler before. I presume he meant when you load balance DDC's/XML on the netscaler it doesn't like certs with a 4096 key size 🤷

>4096 (6144,8192) ;) 4096 is what I've used in all setups.