anchor.diff:  1. Set the `router.disable_http: true` manifest property. Setting this property disables the HTTP listener, forcing all communication to Gorouter to be HTTPS. This assumes all route services will communicate over HTTPS with Gorouter. This causes requests from other clients made to port 80 to be rejected. You should confirm that clients of all applications make requests over TLS.
   
   1. Confirm that route services do not modify the value of the `X-Forwarded-Proto` header.
  +
  +<% end %>
  
positive.code: 
  <p class='note'><strong>Note</strong>: When a route service is mapped to a route, Gorouter sanitizes the <code>X-Forwarded-Proto</code> header once, even though requests pass through Gorouter more than once.</p>
  
  ### <a id='secure-route-services'></a>Recommendations for Securing Route Services ###
  
  To best secure communications through route services, Cloud Foundry operators should do the following: 
  
  
negative.code: 
  <%= vars.route_services %>
  
  ## <a name='introduction'></a>Introduction ##
  
  Cloud Foundry application developers may wish to apply transformation or 
  processing to requests before they reach an application. Common examples of use 
  