diff --git a/src/vnsw/agent/oper/loadbalancer_haproxy.cc b/src/vnsw/agent/oper/loadbalancer_haproxy.cc
index ea202d00193..7e74ab29fae 100644
--- a/src/vnsw/agent/oper/loadbalancer_haproxy.cc
+++ b/src/vnsw/agent/oper/loadbalancer_haproxy.cc
@@ -61,6 +61,12 @@ void LoadbalancerHaproxy::GenerateGlobal(
     *out << string(4, ' ') << "daemon" << endl;
     *out << string(4, ' ') << "user nobody" << endl;
     *out << string(4, ' ') << "group nogroup" << endl;
+    *out << string(4, ' ') << "tune.ssl.default-dh-param 2048" << endl;
+    *out << string(4, ' ') << "ssl-default-bind-ciphers " <<
+                              "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:" <<
+                              "DH+AES256:ECDH+AES128:DH+AES:" <<
+                              "ECDH+3DES:DH+3DES:RSA+AESGCM:" <<
+                              "RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS" << endl;
     *out << endl;
 }