• Always work at Layer 7 (application layer)
• Designed to work with web servers. Can read HTTP/HTTPS requests, serve SSL certs, pass a cookie to HTTP requesters, etc.