Yandex Cloud
Search
Contact UsGet started
  • Blog
  • Pricing
  • Documentation
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • ML & AI
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Customer Stories
    • Gateway to Russia
    • Cloud for Startups
    • Education and Science
  • Blog
  • Pricing
  • Documentation
Yandex project
© 2025 Yandex.Cloud LLC
Security in Yandex Cloud
  • Key security principles
  • Division of responsibility
  • Compliance
  • Security measures on the Yandex Cloud side
  • Security tools available to cloud service users
    • All tutorials
      • Which encryption method should I choose?
      • Encrypting data using the Yandex Cloud CLI and API
      • Encrypting data using the Yandex Cloud SDK
      • Encrypting data using the AWS Encryption SDK
      • Encrypting data using Google Tink
      • Managing Key Management Service keys with Terraform
      • Encrypting secrets in Terraform
      • Auto Unseal in Hashicorp Vault
      • Secure password transmission to an initialization script
        • Overview
        • Terminating TLS connections using the management console
        • Terminating TLS connections using Terraform
      • Secure storage of GitLab CI passwords as Yandex Lockbox secrets
      • Getting Yandex Lockbox secret value on the GitHub side
      • Getting Yandex Lockbox secret value on the GitLab side
  • User support policy during vulnerability scanning
  • Security bulletins
  • Public IP address ranges
  1. Tutorials
  2. Data encryption and key management
  3. Terminating TLS connections
  4. Overview

Terminating TLS connections

Written by
Yandex Cloud
Updated at March 31, 2025

Yandex Application Load Balancer L7 load balancers can terminate TLS connections: send certificates to clients, decrypt incoming traffic to send to the backends, and encrypt backend responses prior to forwarding them to clients. In this tutorial, you will learn how to configure a load balancer to terminate TLS connections using a certificate from Yandex Certificate Manager and to redirect HTTP requests to HTTPS.

The my-site.com domain name is used as an example. It will be mapped to the IP address of the L7 load balancer using DNS records in Yandex Cloud DNS.

You can create an infrastructure for terminating TLS connections using one of these tools:

  • Management console: Create your infrastructure step by step in the Yandex Cloud management console.
  • Terraform: Streamline creating and managing your resources with the infrastructure as code (IaC) approach. Download a Terraform configuration example from GitHub and use the Yandex Cloud Terraform provider to deploy your infrastructure.

Was the article helpful?

Previous
Secure password transmission to an initialization script
Next
Terminating TLS connections using the management console
Yandex project
© 2025 Yandex.Cloud LLC