TLS termination

Q: How deeply does Learn Docker in a Month of Lunches, Second Edition cover TLS termination?

Walks through certificate generation, mounted files, proxy configuration, redirects, reloads, and verification, but not certificate-authority operations.

As explained in Learn Docker in a Month of Lunches, Second Edition

SSL termination is the process of ending an SSL or TLS connection at an intermediary such as a reverse proxy before forwarding the request internally.

TLS termination ends HTTPS at a reverse proxy instead of configuring certificates in every application component. The proxy stores the certificate and key, accepts encrypted client traffic, and forwards requests to internal services. This centralizes HTTPS configuration while allowing one domain to expose multiple containers. section 20.2

Nginx and Traefik in development

For a local image-gallery.local deployment, a self-signed certificate lets Nginx serve HTTPS and redirect HTTP requests. The browser warns because the certificate is not trusted. Traefik can provide the same HTTPS entry point through container labels and can generate certificates or obtain them from third-party providers; curl requires its insecure option for an untrusted certificate. section 20.2 section 20.4

How Learn Docker in a Month of Lunches, Second Edition covers it

Cover of Learn Docker in a Month of Lunches, Second Edition

liveBook manning.com

Read Learn Docker in a Month of Lunches, Second Edition on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Kubernetes for DevelopersTLS termination is the process of ending a TLS connection at an intermediary that handles encryption and certificate processing before forwarding the request.
liveBook manning.com

Kubernetes in Action, Second EditionTLS termination is the process of ending a TLS connection at an intermediary, such as a reverse proxy, so that subsequent traffic can be handled as plaintext or re-encrypted.
liveBook manning.com

Software Security for DevelopersTLS termination is the process of decrypting and handling a TLS connection at an endpoint before forwarding the resulting traffic.

Compare how 4 books explain TLS termination →

Related concepts

TLSuses · Transport Layer Security (TLS) is a cryptographic protocol that protects network communications through confidentiality, integrity, and authentication of communicating endpoints.
API gatewayused by · An API gateway is an intermediary that provides an entry point for client requests to backend APIs or services and routes or otherwise mediates those requests.
reverse proxyimplemented by · A reverse proxy is a server-side intermediary that receives client requests, forwards them to backend servers or services, and relays their responses to clients.
encryption in transitcontrasts with · Encryption in transit is the protection of data by encrypting it while it is transmitted between systems over a network.
passthroughalternative to · Passthrough is a gateway TLS mode that forwards encrypted TLS traffic without terminating the TLS session.
certificateuses · A digital certificate is a digitally signed credential that binds an identity to a public key and supports authentication or secure communication.

This explainer was generated by Manning's knowledge graph from the text of Learn Docker in a Month of Lunches, Second Edition. The section links point to the parts of the book it draws on.