> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/feature-flags/use-feature-flags/use-ff/relay-proxy/tls.md).

# Enable TLS

This topic contains information on how to enable TLS in the Proxy

There are two ways to configure the Relay Proxy to accept HTTPS requests:

* **External TLS (recommended)**

  The recommended way to connect to the Relay Proxy using TLS is to place a reverse proxy, such as nginx, in front of the Relay Proxy. Then all connected SDKs must make requests to the reverse proxy URL instead of hitting the Relay Proxy directly.

  ![TLS Setup](https://3868793495-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8hMqy7cgSxMJvSqtZuUT%2Fuploads%2Fgit-blob-0785e1b9c862fb455b4599719c630bb9e95f2f27%2FTLS.png?alt=media)

  A sample docker compose for this architecture is included in this [examples folder](https://github.com/harness/ff-proxy/tree/main/examples/tls_reverse_proxy) in GitHub.
* **Native TLS**

  You can configure the Relay Proxy to start with HTTPS enabled. This can be configured using the [TLS configuration options](/feature-flags/use-feature-flags/use-ff/relay-proxy/configuration.md#tls).

  This does not provide every fine-grained configuration option available to secure servers. If you require more control, the best option is to use a program made for this purpose, and use the **External TLS** option.

  ![TLS Setup](https://3868793495-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8hMqy7cgSxMJvSqtZuUT%2Fuploads%2Fgit-blob-484db174e117bd92e1558ab846e16c23b8d6d8db%2Fnative_tls.png?alt=media)

{% @harness-feedback/feedback %}