Sure, you just add an SSL listener to the Undertow instance. If you want to forward SSL information as a header you can do something like this: proxyHandler.addRequestHeader(Headers.SSL_CLIENT_CERT, "%{SSL_CLIENT_CERT}", DefaultServer.class.getClassLoader()); proxyHandler.addRequestHeader(Headers.SSL_CIPHER, "%{SSL_CIPHER}", DefaultServer.class.getClassLoader()); proxyHandler.addRequestHeader(Headers.SSL_SESSION_ID, "%{SSL_SESSION_ID}", DefaultServer.class.getClassLoader()); Which will make the SSL information available on the backend as a header. Stuart On Sun, Apr 23, 2017 at 9:51 PM, Zamir, Alon <alon.zamir(a)hpe.com&gt; wrote: