SSL Authentication

One-way Authentication

Only backend servers will be authenticated by a client.

You need to add a server certificate to a load balancer to prove its identity to the client. No certificate is required for backend servers.

If only server authentication is required, you can configure one-way authentication.

Mutual Authentication

The clients and backend servers will authenticate each other.

You need to add a server certificate to a load balancer to prove its identity to the client, and add a CA certificate to authenticate clients. No certificate is required for backend servers.

If your service requires high security, you can select mutual authentication to enable clients and backend servers to authenticate each other.

Helpful Links

• Configuring One-way Authentication When Adding an HTTPS Listener
• Configuring Mutual Authentication When Adding an HTTPS Listener