<p>After you turn on the full link encryption, services from external users to the ELB and from the ELB to the back-end ECS can be implemented, and HTTPS encryption is used throughout the process.</p> <p><span style="font-size:18px">Prerequisites</span></p> <p>Before turning on this function, you need a CA certificate to be deployed on the HTTPS listener of ELB, and you need to deploy a server certificate on the back-end ECS.</p> <p><span style="font-size:18px">Usage Limitation</span></p> <ul> <li>Only the HTTPS listener supports full link encryption.</li> <li>This function is provided in ECS Hong Kong region.</li> </ul> <p><span style="font-size:18px">Procedures</span></p> <p>1. Log in to the <a href="https://pinganyun.com/console/loadBalance/overview" target="_blank">ELB Console</a>.</p> <p>2. In the left navigation pane, click <strong>Instance Management</strong> to enter the <strong>Instance Management</strong> page.</p> <p>3. Click the instance name of the target ELB instance and enter the <strong>Instance Information</strong> page.</p> <p>4. Click the <strong>Listener</strong> tab.</p> <p>5. In the upper-right corner of the tab, click <strong>Create</strong> .</p> <p>6. In the<strong> <strong>Advanced Configuration</strong></strong> pane of the <strong>Create Listener</strong> page, turn on the <strong>Full Link Encryption</strong> function.</p> <p>7. Select the <strong>CA Certificate</strong>.</p> <p>8.On the <strong>Select CA Certificate</strong> page that opens, check the CA certificate and click <strong>Confirm</strong>.&nbsp;</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607142625-157b906b9f9b.png" style="height:21px; margin:1px; width:50px" /><strong>:</strong></p> <p>After this option is configured, the ELB will become the authenticated end of the back-end ECS service. You need to install an SSL certificate for the web service loaded by ECS. For example, if the nginx service is on the back-end ECS, the certificate needs to be configured with two parameters: ssl_certificate ssl_certificate_key. For more information, see Generate a CA certificate.</p>