In correlation with the end of life (EOL) for MKE 3.7.x, maintenance of this documentation set was discontinued as of 2025-AUG-29. Click here for the latest MKE 3.x version documentation.

Secure services with TLS

MKE offers you two different methods for securing your services with Transport Layer Security (TLS): proxy-managed TLS and service-managed TLS.

Method	Description
Proxy-managed TLS	All traffic between users and the proxy is encrypted, but the traffic between the proxy and your Swarm service is not secure.
Service-managed TLS	The end-to-end traffic is encrypted and the proxy service allows TLS traffic to pass through unchanged.

• Proxy-managed TLS
• Service-managed TLS
• Deploy services with mTLS enabled