anchor.diff:  
   The Gorouter supports HTTP/HTTPS requests only. For more information about features supported by the Gorouter, see [HTTP Routing](../concepts/http-routing.html).
   
  -<%= vars.haproxy_hsts_support%>
  +<%= vars.haproxy_hsts_support %>
   
   To secure non-HTTP traffic over TCP routing, terminate TLS at your load balancer or at the app. For more information, see [Enabling TCP Routing](enabling-tcp-routing.html).
   
  
positive.code:     <ul>
        <li>You want the optimum balance of performance and security, and</li>
        <li>You want to make minimum changes to your load balancer, or</li>
        <li>You are deploying CF to AWS. For information about AWS limitations, see <a href="#aws_elbs">TLS Cipher Suite Support by AWS ELBs</a>.</li> 
      </ul>
    </td>
    <td><b>Gorouter only</b>
  
negative.code: owner: Routing
  ---
  
  <% current_page.data.title = "Securing Traffic into " + vars.app_runtime_full %>
  
  This topic describes the options for securing HTTP traffic into your <%= vars.app_runtime_full %> (<%= vars.app_runtime_abbr %>) deployment with TLS certificates. You can configure the location where your deployment terminates TLS depending on your needs and certificate restrictions.
  
  <%=vars.ssl_config%>
  
  