Architecture
SSL/TLS can be terminated on the upstream servers which includes load balancers or even CDN. The AWS elastic load balancer provides support for terminating TLS at the ELB level.
If we offload the termination to them, it becomes easy to manage in case of any changes and as well as let ELB do all the heavy work related to the TLS handshakes.
In the following diagram, we can see that the client's request first hits the nginx reverse proxy. This is where the SSL is terminated. nginx then forwards the request to the application server and the reply it gets back is forwarded back to the client.
In this situation, we have our nginx reverse proxy server taking care of the TLS termination. This work can be handed over to a cloud service ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access