TLS, mTLS & Caching
TLS Certificates
Manage TLS certificates in the dashboard sidebar under Secure Tunnels → TLS Certificates. Ngris auto-provisions certificates via ACME (Let's Encrypt). You can also upload custom certificates.
Auto-Managed
- Auto-provisioned via ACME for all custom domains
- Automatic renewal before expiration
- Wildcard certificates on Unlimited plans
Custom Certificates
Upload your own certificates (PEM format) with private key. Set any certificate as the default for a domain. Download certificate bundles from the dashboard.
Mutual TLS (mTLS)
Require client certificates for mutual TLS authentication. Configure in Secure Tunnels → mTLS or via the Terminate TLS traffic policy rule.
With mTLS, both client and server present certificates for bidirectional authentication. Verification strategies: require-and-verify (strict), require-any, or request (optional).
Cache Management
Manage cached responses for endpoints with caching enabled. Access from the dashboard under Endpoint Settings → Cache.
Cache Stats
View the current number of cached entries and cache configuration status for each endpoint.
Cache Purge
- Purge All — Clear the entire cache for an endpoint
- Purge by Path Pattern — Selectively purge cached responses matching a regex path pattern (max 500 characters). Example:
/api/v1/.*purges all cached responses under/api/v1/