:_mod-docs-content-type: ASSEMBLY
[id="securing-routes"]
= Securing routes
include::_attributes/common-attributes.adoc[]
:context: securing-routes

toc::[]

[role="_abstract"]
To secure application traffic, you can configure routes to serve custom certificates to clients by using edge, passthrough, or re-encrypt TLS termination, aand manage externally provided certificates. Additionally, you can enforce strict security protocols by securing a route with HTTP strict transport security (HSTS).

//Creating an edge route with a custom certificate
include::modules/nw-ingress-creating-an-edge-route-with-a-custom-certificate.adoc[leveloffset=+1]

//Creating a reencrypt route with a custom certificate
include::modules/nw-ingress-creating-a-reencrypt-route-with-a-custom-certificate.adoc[leveloffset=+1]

//Creating a passthrough route
include::modules/nw-ingress-creating-a-passthrough-route.adoc[leveloffset=+1]

//Creating a route with externally managed certificates
include::modules/nw-ingress-route-secret-load-external-cert.adoc[leveloffset=+1]

//HTTP Strict Transport Security
include::modules/nw-enabling-hsts.adoc[leveloffset=+1]

//Enabling HTTP strict transport security per-route
include::modules/nw-enabling-hsts-per-route.adoc[leveloffset=+2]

//Disabling HTTP strict transport security per-route
include::modules/nw-disabling-hsts.adoc[leveloffset=+2]

//Enforcing HTTP strict transport security per-domain
include::modules/nw-enforcing-hsts-per-domain.adoc[leveloffset=+2]