Terminating TLS connections

Yandex Application Load Balancer offers you L7 load balancers that can terminate TLS connections: send certificates to clients, decrypt incoming traffic to send to the backends, and encrypt backend responses prior to forwarding them to clients. In this tutorial, you will learn how to configure a load balancer to terminate TLS connections using a certificate from Yandex Certificate Manager and to redirect HTTP requests to HTTPS.

In this example, we will use the my-site.com domain name and map it to the IP address of the L7 load balancer using DNS records in Yandex Cloud DNS.

You can create an infrastructure for terminating TLS connections using one of these tools:

• Management console: Create your infrastructure one step at a time from the Yandex Cloud management console.
• Terraform: Streamline creating and managing your resources using the infrastructure as code (IaC) approach. Download the Terraform configuration example from the GitHub repository, and then deploy the infrastructure using the Yandex Cloud Terraform provider.