Load Balancer and CDN Considerations

Load balancers and CDNs add complexity to TLS handshakes. Ensure SSL termination points have correct certificates installed. CloudFlare, AWS ELB, and other services require specific configurations:

# AWS ALB SSL Policy
aws elbv2 modify-listener \
  --listener-arn arn:aws:elasticloadbalancing:... \
  --ssl-policy ELBSecurityPolicy-TLS-1-2-2017-01

Configure origin servers to accept connections from CDN edge servers, often requiring specific cipher suites or client certificate authentication.