anchor.diff:  <%= vars.route_services_config %>
   
   ## <a id='enabling-route-services-in-cloudfoundry'></a>Enabling Route Services in Cloud Foundry ##
  -To enable support for Route Services in a Cloud Foundry deployment, the operator must provide a passphrase used by GoRouter to generate a key, which in turn is used to encrypt a header sent with the forwarded request to the route service. When this header is present in the request forwarded from the route service, Gorouter forwards the request to the application. See <a href="#headers">Headers</a> below for details. The passphrase is configured in the cf-release manifest.
  +To enable support for Route Services in a Cloud Foundry deployment, the operator must provide a passphrase used by GoRouter to generate a key, which in turn is used to encrypt a header sent with the forwarded request to the route service. When this header is present in the request forwarded from the route service, Gorouter forwards the request to the application. See <a href="#headers">Headers</a> below for details. The passphrase is configured in the cf-release BOSH deployment manifest.
   
   ```
   properties:
  
positive.code: 
  <p class="note"><strong>Note</strong>: The <code>route_services_secret</code> property should be a strong passphrase. See the <a href="https://github.com/cloudfoundry/cf-release/blob/master/jobs/gorouter/spec">GoRouter spec</a> in cf-release for details.</p>
  
  Route Service instances should send requests to the value of x-cf-forwarded-url, obeying the scheme. The scheme is https by default; for environments that don't support TLS termination, this property can be set to false.
  
  ```
  properties:
  
negative.code:    route_services_recommend_https: true
  ```
  
  The CF router will only forward requests to Route Services over SSL. By default, certificates provided by Route Services must be signed by a trusted CA. If they are not, the CF router will reject the request. In development environments this concern may be unreasonable. To disable SSL cert validation, modify the following property in the cf-release BOSH deployment manifest:
  
  ```
  properties:
  