Off-loading TLS Connections to Intermediate Servers

You can set up intermediate servers between your Horizon servers and Horizon Client devices to perform tasks such as load balancing and off-loading TLS connections. Horizon Client devices connect over HTTPS to the intermediate servers, which pass on the connections to the external-facing Connection Server instances.

To off-load TLS connections to an intermediate server, you must complete a few key tasks:

• Import the TLS certificate that is used by the intermediate server to your external-facing Horizon servers.
• Set the External URLs on your external-facing Horizon servers to match the URL that clients can use to connect to the intermediate server.
• Allow HTTP connections between the intermediate server and the Horizon servers.