Always work at Layer 7 ( application layer ) Designed to work with web servers. Can read HTTP/HTTPS requests, serve SSL certs, pass a cookie to HTTP requesters, etc.