# How do I get SSL/HTTPS working on LoadBalancer Deployment? **URL:** \ **Category:** AWX Project\ **Tags:** awx, aws\ **Created:** [April 11, 2021, 9:57pm UTC](https://forum.ansible.com/t/how-do-i-get-ssl-https-working-on-loadbalancer-deployment/34961 "2021-04-11T21:57:04Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Brandon\_Ellis](https://avatars.discourse-cdn.com/v4/letter/b/dec6dc/32.png) [@Brandon\_Ellis](https://forum.ansible.com/u/Brandon_Ellis)\ **Post date:** [April 11, 2021, 9:57pm UTC](https://forum.ansible.com/t/how-do-i-get-ssl-https-working-on-loadbalancer-deployment/34961/1 "2021-04-11T21:57:04Z")
What do I need to get SSL termination across all of AWX when deployed with an AWS LoadBalancer Ingress? I was under the assumption that I just need to toss in some annotations like this along with the ACM certificate ARN and everything would magically work ![ssl.png](https://us1.discourse-cdn.com/ansible/original/2X/e/e208017ea512f245c5cbf91a845e9f90d742adcd.png) But looking through the github issues, it sounds like there’s a bit more that needs to be done when configuring nginx? [SSL Termination at Load Balancer · Issue #150 · ansible/awx-operator · GitHub](https://github.com/ansible/awx-operator/issues/150) Either way, I don’t understand. What basic components do I need for this to work? ---
**Author:** ![Christopher\_Billett](https://avatars.discourse-cdn.com/v4/letter/c/edb3f5/32.png) [@Christopher\_Billett](https://forum.ansible.com/u/Christopher_Billett)\ **Post date:** [April 12, 2021, 8:50am UTC](https://forum.ansible.com/t/how-do-i-get-ssl-https-working-on-loadbalancer-deployment/34961/2 "2021-04-12T08:50:56Z")
At the moment you need to accept on 443 then hand off to AWX using 80 - so change your backend-protocol to http. This will still secure it with SSL ---
**Author:** ![Brandon\_Ellis](https://avatars.discourse-cdn.com/v4/letter/b/dec6dc/32.png) [@Brandon\_Ellis](https://forum.ansible.com/u/Brandon_Ellis)\ **Post date:** [April 13, 2021, 2:37pm UTC](https://forum.ansible.com/t/how-do-i-get-ssl-https-working-on-loadbalancer-deployment/34961/3 "2021-04-13T14:37:21Z")
If the traffic is being offloaded from the loadbalancer to node using http, does this open up any vulnerabilities? ---
**Author:** ![Christopher\_Billett](https://avatars.discourse-cdn.com/v4/letter/c/edb3f5/32.png) [@Christopher\_Billett](https://forum.ansible.com/u/Christopher_Billett)\ **Post date:** [April 13, 2021, 2:41pm UTC](https://forum.ansible.com/t/how-do-i-get-ssl-https-working-on-loadbalancer-deployment/34961/4 "2021-04-13T14:41:00Z")
SSL offloading increases performance, but LoadBalancer to Application data is not encrypted. This does not mean that traffic overall isn’t encrypted, you will still get Client to Load Balancer encryption. The only issue this bring is if someone is sniffing traffic directly on your internal network. ---
**Author:** ![Brandon\_Ellis](https://avatars.discourse-cdn.com/v4/letter/b/dec6dc/32.png) [@Brandon\_Ellis](https://forum.ansible.com/u/Brandon_Ellis)\ **Post date:** [April 13, 2021, 2:52pm UTC](https://forum.ansible.com/t/how-do-i-get-ssl-https-working-on-loadbalancer-deployment/34961/5 "2021-04-13T14:52:41Z")
Thanks. I’m actually running the entire deployment in a local network and was doing SSL just in case that very last scenario could happen (as silly as it might be). I guess I’ll need to wait for the LoadBalancer SSL support to get the true SSL communication, right? Or might there be other ways to make it happen? ---
**Author:** ![Brandon\_Ellis](https://avatars.discourse-cdn.com/v4/letter/b/dec6dc/32.png) [@Brandon\_Ellis](https://forum.ansible.com/u/Brandon_Ellis)\ **Post date:** [April 13, 2021, 2:54pm UTC](https://forum.ansible.com/t/how-do-i-get-ssl-https-working-on-loadbalancer-deployment/34961/6 "2021-04-13T14:54:32Z")
Do the other ingress types have a method of supporting SSL? I’ve just been using LoadBalancer since it’s the easiest for me to understand. ---
**Author:** ![Christopher\_Billett](https://avatars.discourse-cdn.com/v4/letter/c/edb3f5/32.png) [@Christopher\_Billett](https://forum.ansible.com/u/Christopher_Billett)\ **Post date:** [April 13, 2021, 3:42pm UTC](https://forum.ansible.com/t/how-do-i-get-ssl-https-working-on-loadbalancer-deployment/34961/7 "2021-04-13T15:42:30Z")
I believe they do yes. I wrote the LB function in to support my use case, but also do need to stop SSL offloading at some point in the future. I found I had issues if you then stick an LB in front manually forwarding onto the other methods. You wont have issues running with SSL offloading, its a common practise unless you need to meet certain security requirements such as PCI DSS