SSL/TLS

SNI ended the era of one IP address per HTTPS site. What replaced it needs judgement about multi-tenancy rather than TLS: which certificate answers a hostname you have never heard of, why forty customer domains should not share one certificate, and what you have quietly pooled by putting everyone on one address.

Where TLS ends determines what your load balancer can do. A decision guide to the three SSL modes — termination, passthrough, and re-encryption — and the feature, performance, and compliance trade-offs of each.