use SSL offloading config