anchor.diff:  	* `YOUR-CERTIFICATE` is your TLS certificate. 
   	* `YOUR-PRIVATE-KEY` is the private key pair to your TLS certificate.
   
  -	During deploy, the routing plane integrates the certificates with any Istio routes. All routes created using the Istio routing plane then use TLS.
  +	During deployment, the routing plane integrates the certificates with any Istio routes. All routes created using the Istio routing plane then use TLS.
   
   1. Create and upload the Istio release with BOSH:
   
  
positive.code: 	```
  
  1. Deploy your cf-deployment with the Istio ops file:
  	```
  	bosh -e my-env -d cf deploy cf.yml -v deployment-vars.yml \
      -o deploy/cf-deployment-operations/add-istio.yml
  
negative.code: 
  ## <a id="deploy"></a> Configure Load Balancing 
  
  When you deploy a Cloud Foundry with service mesh, you must set up a new load balancer to
  communicate with the Istio routers.
  
  To configure load balancing, choose one of the following procedures
  that correspond to your use case:
  
  - [Configure with bbl](#config-bbl)
  
  - [Configure Manually](#config-manual)
  
  ### <a id="config-bbl"></a> Configure with bbl
  
  If you deployed CF on GCP using `bbl`, you can use a custom `bbl-config` to set up load balancers that point to the Istio routers. To re-run `bbl up` on your BOSH director, see [bbl-config](https://github.com/cloudfoundry/istio-release/tree/master/deploy/bbl-config) .
  
  ### <a id="config-manual"></a> Configure Manually
  
  To configure your load balancer, do the following. The exact procedure varies by IaaS. 
  
  1. Create a load balancer with a static IP.
  1. Configure the backends of the load balancer to be the `istio-router` VMs. You can retrieve the IPs of the router VMs by running `bosh vms`. 
  