What @jsiebens wrote about TLS termination is correct to the best of my knowledge. Also, there isn’t currently an HTTP health-check API endpoint for Boundary workers (see previous thread on this – as far as I know all of what was said there is still valid) – a TCP health check is the correct way to check if they’re alive.