# Terminating TLS connections


[Yandex Application Load Balancer](../../index.md) offers you [L7 load balancers](../../concepts/application-load-balancer.md) can _terminate_ TLS connections: send certificates to clients, decrypt inbound traffic to send to the backends, and encrypt [backend](../../concepts/backend-group.md) responses prior to forwarding them to clients. In this tutorial, you will learn how to configure a load balancer to terminate TLS connections using a [certificate](../../../certificate-manager/concepts/index.md) from [Yandex Certificate Manager](../../../certificate-manager/index.md) and redirect HTTP requests to HTTPS.

The tutorial features the `my-site.com` domain as an example. It will be mapped to the IP address of the L7 load balancer using [DNS records](../../../dns/concepts/resource-record.md) in [Yandex Cloud DNS](../../../dns/index.md).

You can create an infrastructure for terminating TLS connections using one of these tools:

* [Management console](console.md): Create your infrastructure step by step from the Yandex Cloud management console.
* [Terraform](terraform.md): Streamline creating and managing your resources using the _Infrastructure as Code_ (IaC) approach. Download a Terraform configuration example from the GitHub repository and then deploy your infrastructure using the [Terraform Yandex Cloud provider](../../../terraform/index.md).