Terminating TLS connections
Written by
Updated at May 29, 2025
Yandex Application Load Balancer offers you L7 load balancers that can terminate TLS connections: send certificates to clients, decrypt incoming traffic to send to the backends, and encrypt backend responses prior to forwarding them to clients. In this tutorial, you will learn how to configure a load balancer to terminate TLS connections using a certificate from Yandex Certificate Manager and to redirect HTTP requests to HTTPS.
In this example, we will use the my-site.com domain name and map it to the IP address of the L7 load balancer using DNS records in Yandex Cloud DNS.
You can create an infrastructure for terminating TLS connections using one of these tools:
- Management console: Create your infrastructure step by step in the Yandex Cloud management console.
- Terraform: Streamline creating and managing your resources with the infrastructure as code (IaC) approach. Download a Terraform configuration example from GitHub and use the Yandex Cloud Terraform provider to deploy your infrastructure.