anchor.diff:  
   If you terminate SSL/TLS at your load balancer, then you must configure the load balancer to append the `X-Forwarded-For` and `X-Forwarded-Proto` HTTP headers to requests it sends to the Gorouter.
   
  -If you terminate SSL/TLS at your load balancer but it does not support HTTP, such that it cannot append HTTP headers, there is a workaround that is recommended **only if your load balancer does not accept unencrypted requests**. Configure your load balancer to send the client IP using the PROXY protocol, and enable PROXY in Gorouter. As the `X-Forwarded-Proto` header will not be present, configure Gorouter to force-set this header to 'HTTPS'. 
  +If you terminate SSL/TLS at your load balancer but it does not support HTTP, such that it cannot append HTTP headers, a workaround exists. We recommend you use this workaround **only if your load balancer does not accept unencrypted requests**. Configure your load balancer to send the client IP address using the PROXY protocol, and enable PROXY in Gorouter. As the `X-Forwarded-Proto` header will not be present, configure Gorouter to force-set this header to 'HTTPS'. 
   
   ### <a id="lb-and-router"></a> Procedure: Load Balancer and Gorouter
   
  
positive.code:     <ul>
        <li>You require TLS termination at a load balancer, and</li>
        <li>You want a higher level of security, and</li>
        <li>You do not mind a slightly less performant deployment</li>
    </td>
    <td>
     Load Balancer and Gorouter
  
negative.code: 
  ### <a id="cert_guidelines_gorouter"></a>Certificate Guidelines
  
  * The Gorouter currently supports configuring multiple HTTPS certificates using the `router.tls_pem` property.
  * Use a SAN certificate because <%=vars.product_short%> requires multiple wildcard domains.
  
  ### <a id="http_header_gorouter"></a>About HTTP Header Forwarding
  
  If you terminate TLS/SSL at the Gorouter only, your load balancer does not send HTTP headers.
  
  The Gorouter appends the `X-Forwarded-For` and `X-Forwarded-Proto` headers to requests forwarded to applications and platform system components. `X-Forwarded-For` is set to the IP address of the source. Depending on the behavior of your load balancer, this may be the IP address of your load balancer. For Gorouter to deliver the IP address of the client to applications, configure your load balancer to forward the IP address of the client or configure your load balancer to send the client IP address using the PROXY protocol. Gorouter will set `X-Forwarded-Proto` to the scheme of the client request.
  
  ### <a id="pass-through"></a>Procedure: Gorouter Only
  
  