Networking & Publishing

Configure networking for CARTO Self-Hosted

This section covers network configuration for your CARTO Self-Hosted deployment, including load balancing, proxy setup, domain configuration, and TLS options.

• Configure a forward proxy — route CARTO outbound traffic through an HTTP(S) forward proxy

• Custom Domains & TLS — configure your domain and attach TLS certificates

• TLS Offloading — terminate TLS at the load balancer layer

• End-to-End TLS — terminate TLS at the CARTO Router for encryption throughout the infrastructure

For production load balancing architectures and cloud provider recommendations, see Load balancing best practices in General Best Practices.