anchor.diff:  <%= partial '../console/router_app_tls_pcf' %> 
   <% end %>
   
  -### <a id="stale"></a>Prune Stale Routes
  +### <a id="without-tls"></a>Without TLS Enabled
   
   In this mode, the Gorouter's routing table lists a name, address, and port for each app instance, but it does not include GUIDs for the app instances.
   
  
positive.code: 
  Upstream, the Gorouter subscribes to the NATS updates to keep its route information current. But network partitions can cause the Gorouter's routing tables to fall out of sync.
  
  You can configure the Gorouter to direct traffic to app instances and preserve routing integrity in two modes, by validating app instances over TLS, or by pruning stale routes:
  
  <table border="1" id="gorouter-modes" class="nice">
    <tr><th>Gorouter mode:</th>
    	<th>How Gorouter sends traffic to Diego cells:</th>
    	<th>How Gorouter updates its routing table:</th>
    </tr><tr>
    	<td><a href="#app-valid-tls"><strong>Validate App Instances over TLS</strong></a></td>
    	<td>Secured, over TLS</td>
    	<td>Prunes routes with instance identity mismatch; see <a href="#when-tls-prune">Gorouter TLS pruning behavior</a></td>
    </tr><tr>
    	<td><a href="#stale"><strong>Prune Stale Routes</strong></a></td>
    	<td>Unsecured</td>
    	<td>Prunes routes that do not update for time-to-live (TTL), which defaults to 120 seconds.</td>
    </tr>
  
negative.code: 
  
  <table border="1" id="when-tls-prune" class="nice">
    <tr><th>Gorouter pruning behavior with TLS enabled</th>
    	<th>TLS handshake succeeds and app instance matches routing table</th>
    	<th>TLS handshake fails; app instance mismatch</th>
    </tr><tr>
    	<th>Time to Live (TTL) has expired</th>
    	<td>Do not prune the route</td>
    	<td>Prune the route and re-try with another instance of the app</td>
    </tr><tr>
    	<th>TTL has not expired</th>
    	<td>Do not prune the route</td>
    	<td>Do not prune the route, but mark container ineligible for requests for next 30 seconds and re-try with another instance of the app</td>
    </tr>
  </table>
  
  