How can I determine if my load balancer supports SSL/TLS renegotiation?
How can I determine if my load balancer supports Secure Sockets Layer/Transport Layer Security (SSL/TLS) renegotiation?
"How can I determine if my load balancer supports Secure Sockets Layer/Transport Layer Security (SSL/TLS) renegotiation?ResolutionAlthough only the client can initiate a session resumption, either side can initiate session renegotiation. Support of SSL/TLS renegotiation varies by load balancer type:Classic Load Balancerssupport secure client-initiated renegotiations for incoming SSL/TLS client connections. Classic Load Balancers also support server-initiated renegotiation for the backend SSL/TLS connection. **Note:**If you need to disable client-initiated renegotiations for incoming SSL/TLS connections, you can migrate to an Application Load Balancer where these renegotiations aren't supported.Application Load Balancersdon't support SSL/TLS renegotiation for client or target connections.Network Load Balancersdon't support SSL/TLS renegotiation.All load balancers support session resumption. However, only Network Load Balancers support resuming an SSL session that was originally negotiated with a different IP associated with the same load balancer.Related InformationUpdate the SSL Negotiation Configuration of Your Classic Load BalancerFollow"