Websites and HTTPS
Configure the connection from Loclix to your website server.
Loclix uses separate connections for visitors and your origin. The public certificate secures the visitor connection. Your origin settings control how Loclix connects to your server.
Origin connections
| Mode | Connection to your origin |
|---|---|
| Strict | HTTPS with certificate and hostname verification |
| Flexible | Unencrypted HTTP |
Use Strict for an encrypted connection. Zero Trust requires verified HTTPS for every direct origin, including custom routes.
When the origin is an IP address, Loclix uses the website hostname for the Host header and certificate verification. Set a TLS name override only if the origin certificate uses a different name.
Origin certificates
- Open SSL / TLS for the website.
- Select Generate origin certificate.
- Select View certificate & key.
- Install the certificate and key on your server using the supplied configuration.
- Enable Trust the generated origin certificate under Origin TLS, then select Save changes.
Store the private key securely. Strict connections will fail until your server presents a certificate that matches the configured name and trust settings.
Public certificates
Use View setup to check certificate issuance and deployment. If issuance fails, review the displayed error before retrying. Retry public certificate respects any retry deadline set by the certificate authority.
Direct origin protection
Restrict access to your origin so visitors cannot bypass Loclix. Use a firewall or authenticated origin pulls, which require the connecting edge to present a client certificate.
For authenticated pulls, select Download origin-pull CA in SSL / TLS and install it on your origin. Then enable Authenticate edge connections to the origin and save. Configure the origin to require a client certificate signed by that CA.
For private applications, also verify access assertions before trusting a visitor's identity.
DNS connection
Point public hostnames to waf-ingress.loclix.network. Use DNS-only records. For a root domain, use your DNS provider's CNAME flattening or ALIAS support.
See website setup for the full connection procedure.