As part of improving the security, stability and performance of our services, PPL is moving to a modernised API platform infrastructure. Please pay attention to the following technical areas, which may require your cooperation if services are to continue uninterrupted.
1. Change to the format of HTTP headers (case sensitivity)
In line with the HTTP/2 standard, all HTTP header names will now be delivered in lower case (e.g. content-type instead of Content-Type).
➡️Impact: The header values stay the same; only the format of their names changes.
➡️Recommendation: Make sure your systems treat header names as case-insensitive.
2. Updated network IP addresses (firewall)
If your systems use IP allow-lists, you need to add these new addresses to them:
EnvironmentDomain nameIP AddressProductionapi.dhl.com34.159.222.28Sandboxapi-sandbox.dhl.com34.40.64.57
The URL address/hostname https://api.dhl.com does not change during the migration. Only the IP address on which the service runs changes.
3. Stricter encryption requirements (ciphers)
The modernised platform supports secure cipher suites only (ECDHE and TLS 1.3). Older ciphers (including DHE-type suites) will no longer be accepted.
Supported cipher suites:
➡️TLS 1.3: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384
➡️TLS 1.2: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
The following cipher suites will no longer be supported:
❌TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
❌TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
🧪What is the Sandbox and what is it for?
The Sandbox is a dedicated test environment operated by PPL CZ s.r.o. that lets you verify your systems safely before going live.
➡️It lets you try out the integration of new features without affecting real data.
➡️You can validate connectivity, correct encryption and header processing there.
➡️It is the ideal place to iron out every change connected with this modernisation before it reaches your production environment.
📅Key dates
➡️Sandbox (test environment): The Sandbox environment will be the first to be prepared for this change. We will tell you the exact switchover date in good time in a following IT news item.
➡️Production: the change will take place in two steps
1️⃣First we will transfer the configuration to the new version of the API platform, so traffic will be routed from the current platform to the new one. We are planning this change for the release of 18 April 2026
2️⃣We will then update the DNS records so that traffic is routed to the new platform only. This change will take place between 1 May and 15 June. The exact date is yet to be confirmed. The changes described above will take effect with it.
🛠 Action steps
➡️Review: Pass these technical specifications to your IT team so that they can assess the impact.
➡️Testing: As soon as the Sandbox is available, test your integration, connectivity and authentication in the new environment.
➡️Updates: Make the necessary changes to your firewall or application configuration before the migration window opens.
➡️Support: If you need assistance, contact the integration team: cisteam@ppl.cz.
Thank you for helping us deliver a more modern and more secure API ecosystem.