What is SSL Termination?

SSL termination (or TLS termination) is the process of decrypting incoming encrypted traffic at the proxy or load balancer before forwarding it to backend servers in plaintext. This offloads the computationally expensive encryption and decryption work from backend servers to specialized edge infrastructure.

Decryption at the Edge, Plaintext Internally

The proxy or load balancer holds the SSL/TLS certificate and private key. When a client initiates an HTTPS connection, the TLS handshake occurs between the client and the termination point. The encrypted traffic is decrypted at this edge, allowing inspection, caching, and modification if needed. The decrypted request is then forwarded to the backend server over a private internal connection, either in plaintext or re-encrypted with a less expensive internal certificate. Response traffic follows the reverse path.

Within Hex Proxies infrastructure, SSL termination happens at the edge of the gateway layer. Your encrypted connection to gate.hexproxies.com:8080 is terminated at the edge, allowing the internal routing system to inspect headers for authentication and targeting parameters before forwarding your request to the appropriate backend proxy node.

Performance Benefits of Edge Termination

SSL termination optimizes proxy infrastructure performance by centralizing the CPU-intensive cryptographic operations. It also enables features like HTTP inspection, content caching, and request routing that require access to the decrypted traffic. Hex Proxies infrastructure uses hardware-accelerated SSL termination to minimize latency while maintaining enterprise-grade security at the edge.