We're excited to announce that TLS 1.3 support on Confluent Cloud Dedicated clusters and all other Confluent Cloud APIs is now available. TLS 1.3 is coming to all remaining Confluent Cloud cluster types on April 30, 2026 to enhance security for your data streaming infrastructure. There is no action required from you.
TLS 1.3 is currently available as an opt-in feature on Dedicated clusters and can be enabled per cluster by following the steps here. On April 30, 2026, TLS 1.3 will be enabled by default along with TLS 1.2 on newly created Dedicated clusters. You will have the ability to turn off TLS 1.3 or TLS 1.2 at any point after a Dedicated cluster has been provisioned by following the steps here.
On April 30, 2026, TLS 1.3 will be enabled by default across both new and existing clusters for all remaining autoscaling cluster types, including Enterprise, Freight, Standard, and Basic clusters. For these clusters, TLS 1.3 cannot be disabled.
TLS 1.2 remains an industry standard, and we'll continue supporting it on all clusters.
To learn more, check out the blog and documentation. If you have any questions about TLS 1.3 support, please reach out to our support team.