This message was deleted.

We use albs with Kong ingress in our clusters, nlbs don't support as many ssl certs, we terminate the certs at the alb level

Thanks @Hugo Pinheiro for the response, may I ask why you not chose SSL termination at Kong but ALB?

ALB is almost certainly gonna be faster to process it than Kong will, and forwarding the traffic with headers is a well understood pattern

Can't remember why, I think we found it easier so that the certs could be managed by the aws cert thing, one of my coworkers set it up so my memory is hazy on the details 😂

Thank you @Nick Travis @Hugo Pinheiro for the reply