In this recipe, we did TCP passthrough for an HTTPS request and did TLS termination at the EC2 instance. TLS termination at the EC2 instance will consume more EC2 resources and will provide an extra load for the EC2 instance. We will also need to manage the certificate across all the EC2 instances. However, if we have a requirement for end-to-end encryption due to compliance or government policies, this is the preferred way. Otherwise, the preferred approach is to do SSL/TLS termination at the ELB level, as we saw in the Using an application load balancer with TLS termination at the ELB recipe of this chapter. For terminating SSL/TLS at the NLB, we need to set the protocol to TLS (Secure TCP) and select an ACM certificate.