anchor.diff:  
   ### <a id="cert_guidelines_lb"></a> Certificate Guidelines
   
  -You can use multiple certificates on the load balancer if the load balancer supports multiple VIPs or SNI. Otherwise, use a SAN certificate.
  +You can use multiple certificates on your load balancer if the load balancer supports multiple VIPs or SNI.
   
   ### <a id="http_header_lb"></a> About HTTP Header Forwarding
   
  
positive.code: 
  To enable this configuration, you must perform the following steps:
  
  1. Configure your load balancer to append the `X-Forwarded-For` and `X-Forwarded-Proto` headers to client requests.
      * If the load balancer cannot be configured to provide the `X-Forwarded-For` header, the Gorouter appends it in requests forwarded to applications and system components, set to the IP address of the load balancer.
      *  <strong>Important:</strong> Configure the load balancer to forward the `X-Forwarded-Proto` header. If you fail to configure this forwarding, requests to some applications and system components result in redirect loops, as some requests determined to be unencrypted are redirected to HTTPS.
  
  1. Add your certificate or certificates to your load balancer and configure its listening port. The procedures vary depending on your IaaS.
  
  
negative.code: 1. Configure your load balancer to pass through requests from the client to the Gorouter.
  1. Insert the certificate into your deployment manifest for the Gorouter:
      1. Use `bosh edit deployment` to open your release manifest for editing.
      1. Copy the contents of your certificate file into the `properties.router.ssl_cert` field and the contents of the private key file associated with your certificate into the `properties.router.ssl_key` field. Set `enable_ssl` to `true`.
  
          ```
          properties:
  