Which TLS termination option terminates TLS at the router?

Which TLS termination option terminates TLS at the router?

• A. Passthrough
• B. Reencrypt
• C. Edge termination
• D. TLS offload

Answer: (C)

TLS termination at the router means the TLS handshake is completed by the router itself, which decrypts the client traffic and then forwards the request to the backend, usually as plain HTTP. This behavior is called edge termination: the edge (router) handles the TLS and the downstream service sees unencrypted traffic. Passthrough would keep TLS end-to-end to the backend, so the router does not terminate TLS. Reencrypt does terminate TLS at the router but then re-encrypts the connection to the backend, so TLS remains in use to the backend. TLS offload is another way to describe performing TLS work at the router, but the setup best described by terminating at the router is edge termination.

TLS termination at the router means the TLS handshake is completed by the router itself, which decrypts the client traffic and then forwards the request to the backend, usually as plain HTTP. This behavior is called edge termination: the edge (router) handles the TLS and the downstream service sees unencrypted traffic.

Passthrough would keep TLS end-to-end to the backend, so the router does not terminate TLS. Reencrypt does terminate TLS at the router but then re-encrypts the connection to the backend, so TLS remains in use to the backend. TLS offload is another way to describe performing TLS work at the router, but the setup best described by terminating at the router is edge termination.