Skip to main content

Sauce Connect Proxy Specifications

If you're a security or network administrator, you may find it useful to review the Sauce Connect Proxy security specifications to better evaluate its security. If you use Sauce Connect Proxy as part of your CI/CD pipeline, you may find it useful to review timeout values to better configure CI/CD success/failure parameters.

What You'll Need

Security Specifications

Sauce Connect Proxy Tunnel connection TLS specifications

NameValueSC Versions
Supported TLS Versions1.2, 1.34.8.x, 4.9.x
Sauce Connect Proxy client OpenSSL Version1.1.1k4.8.x, 4.9.x
Sauce Connect Proxy client-supported ciphers

ECDHE-ECDSA-AES256-GCM-SHA384

ECDHE-RSA-AES256-GCM-SHA384

ECDHE-ECDSA-CHACHA20-POLY1305

ECDHE-RSA-CHACHA20-POLY1305

ECDHE-ECDSA-AES128-GCM-SHA256

ECDHE-RSA-AES128-GCM-SHA256

ECDHE-ECDSA-AES256-SHA384

ECDHE-RSA-AES256-SHA384

ECDHE-ECDSA-AES128-SHA256

ECDHE-RSA-AES128-SHA256

4.8.x, 4.9.x
Sauce Connect Proxy server-supported ciphers

ECDHE-ECDSA-AES256-GCM-SHA384

ECDHE-RSA-AES256-GCM-SHA384

ECDHE-ECDSA-CHACHA20-POLY1305

ECDHE-RSA-CHACHA20-POLY1305

ECDHE-ECDSA-AES128-GCM-SHA256

ECDHE-RSA-AES128-GCM-SHA256

Timeout Values

Start Timeouts

Sauce Connect download file contents

Timeouts Summary

NameValueNotes
"REST API GET /USER/tunnels/ID" timeout5 secondsSauce Connect Proxy "HTTP long polling" (each 5 seconds) requests to get the backend status.
"REST API POST /USER/tunnels/ID" timeout10 secondsSauce Connect Proxy "HTTP long polling" (each 30 seconds) requests to update the client status.
"Tunnel provisioning" timeout45 secondsTunnel provisioning may take anywhere from 3 to 45 seconds, depending on the load and the tunnel features.
"Initial tunnel connection" timeout15 secondsSauce Connect Proxy tunnel must be established within this timeout after the server is provisioned.
"Tunnel disconnected" timeout60 secondsSauce Connect Proxy client may disconnect from the server (after establishing the initial connection) for up to 60 seconds.
"Jobs wait" timeout3 hoursOn receiving a "tunnel shutdown" request, Sauce Labs REST API would wait for, at most, 3 hours for jobs, using the tunnel, to finish. Jobs that require longer time to complete may fail after the tunnel is terminated.

Supported Browsers and Ports

The following commonly used browsers and ports are subject to change as new versions are released.

Microsoft Edge, Chrome 71+, and the Safari browser on OS X 10.10+ and mobile iOS 8+ proxy these common ports:

443, 888, 2000, 2001, 2020, 2109, 2222, 2310, 3000, 3001, 3010, 3030, 3210, 3333, 4000, 4001, 4201, 4040, 4321, 4502, 4503, 4567, 5000, 5001, 5002, 5050, 5555, 5432, 6000, 6001, 6060, 6666, 6543, 7000, 7070, 7774, 7777, 8000, 8001, 8003, 8031, 8080, 8081, 8443, 8765, 8777, 8888, 9000, 9001, 9031, 9080, 9081, 9090, 9191, 9876, 9877, 9999, 49221, 53106, 55001

note

On Android devices, ports 5555 and 8080 cannot be used with Sauce Connect Proxy.

Using .local domains

Using Bonjour / ZeroConf for hostnames on a local network does not work on Safari 15 and above.