[Yandex Cloud documentation](../../../../index.md) > [Security in Yandex Cloud](../../../index.md) > [Tutorials](../../index.md) > Data encryption and key management > Terminating TLS connections > Overview

# Terminating TLS connections


[Yandex Application Load Balancer](../../../../application-load-balancer/index.md) offers you [L7 load balancers](../../../../application-load-balancer/concepts/application-load-balancer.md) can _terminate_ TLS connections: send certificates to clients, decrypt inbound traffic to send to the backends, and encrypt [backend](../../../../application-load-balancer/concepts/backend-group.md) responses prior to forwarding them to clients. In this tutorial, you will learn how to configure a load balancer to terminate TLS connections using a [certificate](../../../../certificate-manager/concepts/index.md) from [Yandex Certificate Manager](../../../../certificate-manager/index.md) and redirect HTTP requests to HTTPS.

The tutorial features the `my-site.com` domain as an example. It will be mapped to the IP address of the L7 load balancer using [DNS records](../../../../dns/concepts/resource-record.md) in [Yandex Cloud DNS](../../../../dns/index.md).

You can create an infrastructure for terminating TLS connections using one of these tools:

* [Management console](console.md): Create your infrastructure step by step in the Yandex Cloud management console.
* [Terraform](terraform.md): Streamline creating and managing your resources with the _infrastructure as code_ (IaC) approach. Download a Terraform configuration example from GitHub and use the [Yandex Cloud Terraform provider](../../../../terraform/index.md) to deploy your infrastructure.