Request flow
A managed hostname resolves to a Front node. HTTPS terminates at Nginx. Website requests stay on the Front while configured application paths are forwarded to an Origin.
Certificates
Managed Fronts use publicly trusted TLS certificates and automatic renewal hooks.
Health
Control checks Front TLS availability and Origin TCP reachability before reporting a node healthy.