Is SSL Termination Supported with Vultr Load Balancers?

Yes, Vultr Load Balancers support SSL termination. In this mode, the Load Balancer is responsible for negotiating TLS handshakes and decrypting inbound HTTPS traffic before it is forwarded to backend instances. Offloading this process reduces CPU overhead on application servers and centralizes certificate lifecycle management.

Vultr supports two mechanisms for SSL termination:

• SSL Certificate: Manually provide a private key, SSL certificate, and certificate chain. This method is suitable when you manage certificates through an external CA or require custom trust chains.
• Auto SSL: Specify a subdomain and select a Vultr-managed DNS domain to automatically provision and manage the certificate.

After configuration, the Load Balancer terminates SSL connections at the edge. By default, decrypted HTTP traffic is proxied to backend instances, but you can also configure end-to-end encryption by installing certificates on both the Load Balancer and the origin servers.

For implementation details, refer to the How to Apply an SSL Certificate to Vultr Load Balancer guide.