Application TLS Client-to-router and router-to-server TLS. Hop-by-hop TLS, not end-to-end TLS. An alternative to purely application-level end-to-end TLS. Simplifies certificate management.