Managing TLS Certificates
Secure your traffic with Managed TLS via Let’s Encrypt or by uploading your own custom certificates. Ensure encrypted communication for your users with automated issuance and renewal.
TLS (Transport Layer Security) is a cryptographic protocol designed to provide secure communication over a computer network. It is used to secure the traffic for clients using your web site, ensuring that data transmitted between the client and server is encrypted and protected from eavesdropping or tampering.
Varnish CDN supports two methods for enabling TLS on your domains:
- Managed TLS: Varnish CDN can automatically manage TLS certificates for your domains using Let's Encrypt. This method is convenient as it handles certificate issuance, renewal, and configuration automatically.
- Custom TLS: You can also upload your own TLS certificates and private keys to Varnish CDN. This method gives you more control over the certificates used for your domains. But you will be in charge of managing the certificates, including renewal and updates.
Managed TLS
The easiest alternative is to use Managed TLS, where Varnish CDN takes care of obtaining and renewing TLS certificates for your domains automatically using Let's Encrypt. This ensures that your site remains secure without requiring manual intervention. Make sure to have your DNS records properly configured for the domain you wish to secure (ACME challenge record, see ACME Challenge for more information).
To enable Managed TLS for your domain, follow these steps:
- Navtigate to the Varnish CDN service configuration dashboard.
- Go to the "Domains" section.
- Select the domain you want to enable TLS for.
- Click "TLS Settings".
- Choose the "Lets Encrypt" option.
- Click "Update domain".
Custom TLS
If you prefer to use your own TLS certificates, you can upload them to Varnish CDN. This allows you to use certificates from any Certificate Authority (CA) of your choice. To upload custom TLS certificates, follow these steps:
- Obtain your TLS certificate and private key from your chosen Certificate Authority (CA).
- Log in to the Varnish CDN dashboard.
- Navigate to the "Settings" for your workspace.
- Go to the "TLS -> Certificates" section.
- Click "Upload Certificate".
- Provide a name for the certificate, and upload the certificate and private key files.
- Click "Upload Certificates".
- Once uploaded, navigate to the "Domains" section of your service.
- Select the domain you want to configure.
- Click "TLS Settings".
- Choose the "Self Managed" option and select the uploaded certificate from the dropdown menu.
- Click "Update domain".