Every backend handling its own HTTPS certificate is hard to manage and wastes CPU. TLS termination decrypts traffic at the load balancer or proxy, so certificates live in one place and the proxy can read HTTP to route it. It is the usual setup for a public website behind a load balancer or ingress. If traffic inside the network must stay encrypted, use re-encryption or L4 passthrough instead.