Skip to content
nsin docs
EN فا

TLS versions, cipher suites and session resumption

GET
/analytics/tls
 
curl --request GET \
  --url 'https://api.nsin.ir/analytics/tls?domain=example.com&period=1h' \
  --header 'Authorization: Bearer <token>'

What your visitors negotiate with the edge. Every count here is restricted to TLS-terminated requests, so plain-HTTP traffic never enters the totals — a domain redirecting :80 to :443 does not read as though a slice of its visitors used no TLS at all.

pct in versions is a share of all TLS requests. pct in ciphers is a share of the returned suites only: the list is capped at the top 12, and the shares are normalised over that list so they still add up to 100%.

This is the visitor-to-edge leg only. The edge-to-origin handshake is not reported here.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Query Parameters

Section titled “Query Parameters ”
domain
required
string

The domain name (for example example.com). These endpoints take the domain as a query parameter rather than a path segment.

Example 
example.com
period
string
default: 24h
Allowed values: 1h 3h 6h 12h 24h 48h 7d 30d

Time window, ending now. Time series are bucketed by minute for 1h, by hour up to 48h, and by day for 7d and 30d. Buckets are cut on Asia/Tehran (UTC+03:30) boundaries and emitted as UTC instants, so an hourly bucket starts at :30 UTC. An unrecognised value falls back to 24h.

hostname
string

Narrow to one subdomain. Matches the exact host, any subdomain of it, or a bare label — so example.com matches api.example.com, and api matches api.example.com, but exam matches neither.

path
string

Narrow to a URL path prefix.

Responses

Section titled “ Responses ”

200

Section titled “200 ”

TLS mix for the period.

Media type application/json
object
summary
object
requests

TLS-terminated requests in the period.

integer
resumed

Requests whose TLS session was resumed rather than negotiated afresh.

integer
resumption_rate

resumed / requests, as a percentage; 0 when there were no TLS requests.

number
versions
Array<object>
object
version

Negotiated version, e.g. TLSv1.3.

string
requests
integer
pct

Percentage share of all TLS requests.

number
ciphers

Top 12 cipher suites, most used first.

Array<object>
object
cipher

Negotiated cipher suite, e.g. TLS_AES_128_GCM_SHA256.

string
requests
integer
pct

Percentage share of the returned suites, which sum to 100%.

number
Example generated
{
  "summary": {
    "requests": 1,
    "resumed": 1,
    "resumption_rate": 1
  },
  "versions": [
    {
      "version": "example",
      "requests": 1,
      "pct": 1
    }
  ],
  "ciphers": [
    {
      "cipher": "example",
      "requests": 1,
      "pct": 1
    }
  ]
}

400

Section titled “400 ”

The domain query parameter is missing.

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example missing 
{
  "error": "domain is required"
}

401

Section titled “401 ”

Missing, malformed, revoked or expired API key. (A valid key whose account has been deactivated gets 403 account is inactive instead.)

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example invalidKey 
{
  "error": "invalid API key"
}

402

Section titled “402 ”

The domain has no active plan at all, so no plan feature is available on it. Buy or renew a plan for the domain. (A plan that is active but does not include the feature answers 403 instead.)

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example noPlan 
{
  "error": "This domain does not have an active plan."
}

403

Section titled “403 ”

The domain’s plan does not include the feature this endpoint needs (monitoring for most sections, logs for raw and top-N request data).

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Example 
{
  "error": "read-only API key"
}

404

Section titled “404 ”

No such domain, or it is not visible to this account. Domains you cannot access are reported as not found rather than forbidden.

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Example 
{
  "error": "read-only API key"
}

429

Section titled “429 ”

The key exceeded its request budget (300 requests per minute by default).

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example limited 
{
  "error": "rate limit exceeded"
}

503

Section titled “503 ”

Either the analytics backend is temporarily unreachable (retry; no data is lost), or the answer is still being computed. The per-domain sections and the cached account-wide views (domains-overview, global-summary, global-summary/peak, requests-compare, bandwidth-overview, nodes-overview) wait at most about 25 seconds for their query; past that they answer 503 with pending: true and a Retry-After header, while the query keeps running and caches its result, so the retry is served from that cache instead of starting the same scan again. Identical concurrent requests share one computation.

Media type application/json
object
error
required

Human-readable description of what went wrong.

string
pending

true when the query is still running rather than failing. Retry after Retry-After seconds.

boolean
Examples
{
  "error": "analytics unavailable"
}

Headers

Section titled “Headers ”
Retry-After
integer
Example 
5

Seconds to wait before retrying. Sent only with pending.

504

Section titled “504 ”

The query ran out of time for this period. Retrying the same request runs the same query again, so ask for a shorter period (or narrow it with hostname/path) instead.

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example timedOut 
{
  "error": "summary timed out for this period; try a shorter one"
}