Sauce Connect Proxy Specifications
If you're a security or network administrator, you may find it useful to review the Sauce Connect Proxy security specifications to better evaluate its security. If you use Sauce Connect Proxy as part of your CI/CD pipeline, you may find it useful to review timeout values to better configure CI/CD success/failure parameters.
What You'll Need
Security Specifications
Sauce Connect Proxy Tunnel connection TLS specifications
| Name | Value | SC Versions |
| Supported TLS Versions | 1.2, 1.3 | 4.8.x, 4.9.x |
| Sauce Connect Proxy client OpenSSL Version | 1.1.1k | 4.8.x, 4.9.x |
| Sauce Connect Proxy client-supported ciphers | ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA256 | 4.8.x, 4.9.x |
| Sauce Connect Proxy server-supported ciphers | ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-GCM-SHA256 |
Timeout Values
Start Timeouts
Timeouts Summary
| Name | Value | Notes |
| "REST API GET `/USER/tunnels/ID`" timeout | 5 seconds | Sauce Connect Proxy "HTTP long polling" (each 5 seconds) requests to get the backend status. |
| "REST API POST `/USER/tunnels/ID`" timeout | 10 seconds | Sauce Connect Proxy "HTTP long polling" (each 30 seconds) requests to update the client status. |
| "Tunnel provisioning" timeout | 45 seconds | Tunnel provisioning may take anywhere from 3 to 45 seconds, depending on the load and the tunnel features. |
| "Initial tunnel connection" timeout | 15 seconds | Sauce Connect Proxy tunnel must be established within this timeout after the server is provisioned. |
| "Tunnel disconnected" timeout | 60 seconds | Sauce Connect Proxy client may disconnect from the server (after establishing the initial connection) for up to 60 seconds. |
| "Jobs wait" timeout | 3 hours | On receiving a "tunnel shutdown" request, Sauce Labs REST API would wait for, at most, 3 hours for jobs, using the tunnel, to finish. Jobs that require longer time to complete may fail after the tunnel is terminated. |
Supported Browsers and Ports
The following commonly used browsers and ports are subject to change as new versions are released.
Microsoft Edge, Chrome 71+, and the Safari browser on OS X 10.10+ and mobile iOS 8+ proxy these common ports:
443, 888,
2000, 2001, 2020, 2109, 2222, 2310,
3000, 3001, 3010, 3030, 3210, 3333,
4000, 4001, 4201, 4040, 4321, 4502, 4503, 4567,
5000, 5001, 5002, 5050, 5555, 5432,
6000, 6001, 6060, 6666, 6543,
7000, 7070, 7774, 7777,
8000, 8001, 8003, 8031, 8080, 8081, 8443, 8765, 8777, 8888,
9000, 9001, 9031, 9080, 9081, 9090, 9191, 9876, 9877, 9999,
49221, 53106, 55001
On Android devices, ports 5555 and 8080 cannot be used with Sauce Connect Proxy.
.local domainsUsing Bonjour / ZeroConf for hostnames on a local network does not work on Safari 15 and above.