CockroachDB sets a TLS 1.2 minimum and uses locality for replica placement
engineeringcockroachdbtlsreplicationoperationsThe January beta requires TLS 1.2 in secure mode and makes replica placement sensitive to declared locality. Placement preferences and mandatory constraints have different failure behavior.