Legacy reach

Let a modern TLS 1.3-only client talk to an old TLS 1.2-only server.

client speaks TLS 1.3 only → TLS Lane → TLS 1.2-only server

When you need it: A hardened or modern client that dropped TLS 1.2 — Go services default to 1.3-only — needs to reach a legacy 1.2-only server it otherwise can't negotiate with.
How it works: TLS Lane detects a client that offered 1.3 but not 1.2 and runs 1.3 inbound, 1.2 outbound. The mirror image of Protocol uplift.
Good to know: Client TLS 1.3-only, server TLS 1.2-only.
TLS version: TLS 1.3 in → 1.2 out

Enable sudo tlslane splice