News for hackers. Stuff that matters.

A comment on TLS Termination for Network Load Balancers. Parent comment

Re:TLS Termination for Network Load Balancers by scarface74 on Thursday January 24, 2019 @04:23PM (#18993110)
But then what’s the purpose of terminating at the LB? The two advantages are that it takes the load off of your web server having to decrypt traffic and autorenwal of SSL certs. Once you have to manage your own certs and decrypt at your server, both of those advantages are removed.
[ Parent | on HN ]
Re:TLS Termination for Network Load Balancers by jontro on Thursday January 24, 2019 @04:29PM (#18993172)
Having the public facing certificate managed by acm and not worrying about deploying those on the instances is a win. I'm not sure how the certificate validation is done LB <-> instance, but if you can have a private CA and use that for intra-communication it would still keep everything encrypted properly
[ Parent | on HN ]
Re:TLS Termination for Network Load Balancers by dc_gregory on Thursday January 24, 2019 @04:29PM (#18993181)
Auto generated self signed certs on the servers
[ Parent | on HN ]