As part of increasing the security, stability, and performance of our services, PPL is migrating to a modernized API platform infrastructure. Please pay close attention to the following technical areas, which may require your cooperation to maintain service continuity.
1. Change in HTTP Header Format (Case-Sensitivity)
In compliance with the HTTP/2 standard, all HTTP header names will now be delivered in lowercase (e.g., content-type instead of Content-Type).
➡️Impact: Header values remains the same; only the format of their names is changing.
➡️Recommendation: Ensure your systems process header names as case-insensitive.
2. Update of Network IP Addresses (Firewall)
If your systems use IP allow-lists, it is necessary to add these new addresses to them:
| Environment | Domain Name | IP Address |
| Production | api.dhl.com | 34.159.222.28 |
| Sandbox | api-sandbox.dhl.com | 34.40.64.57 |
The URL address/hostname (https://api.dhl.com) will not change during the migration. Only the IP address where the service is hosted is changing.
3. Stricter Encryption Requirements (Ciphers)
The modernized platform supports only secure cipher suites (ECDHE and TLS 1.3). Older ciphers (including DHE type suites) will no longer be accepted.
Supported Cipher Suites:
➡️TLS 1.3: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384
➡️TLS 1.2: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
The following will NO LONGER be supported:
❌TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
❌TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
🧪What is the Sandbox and what is it for?
The Sandbox is a dedicated testing environment of PPL CZ s.r.o., used to safely verify your systems before deployment into live production.
➡️It allows you to test the integration of new features without affecting real data.
➡️You can validate connectivity, correct encryption, and header processing.
➡️It is the ideal place to debug all changes associated with this modernization before they affect your production.
📅Important Dates
➡️Sandbox (Testing Environment): We will prepare the Sandbox environment for this change first. We will inform you about the exact date of its switch-over in a following IT update.
➡️Production: The update will take place in two steps:
1️⃣First, we will migrate the configuration to the new API platform version; traffic will be directed from the current platform to the new one. This change is scheduled for the Release on April 18, 2026.
2️⃣Subsequently, we will update DNS records to direct traffic only to the new platform. This change will occur between May 1 and June 15, 2026. The specific date will be further specified. During this change, the above-mentioned technical adjustments will take effect.
🛠 Action Steps
➡️Review: Pass these technical specifications to your IT team to assess the impact.
➡️Testing: As soon as the Sandbox is available, test integration, connectivity, and authentication in the new environment.
➡️Update: Make necessary changes to firewall or application configurations before the migration window begins.
➡️Support: For assistance, contact our integration team: cisteam@ppl.cz.