If you are establishing a TLS connection to a server, the server will need a certificate. It sounds like you’re trying to have two instances of a reverse proxy - one on the server, and one on the router. It may be my ignorance of the particulars, but my immediate thought is that you should select one point in the network to do reverse proxying.
The whole “China bad America good” concept has been put in a different light of late.
Does EU/North America fear truly China because of its expansionist policies, or simply because their skin is a different colour? It’s not like the USA is above tampering in foreign government and bugging electronics.
I say go for it, Canada. If only because it’ll push Tesla off the scoreboard without the tariffs. They can’t compete.
If it’s part of a system, I suppose that’s fine. A better alternative could be expanding the sidewalk and providing patio space for restaurants etc. But if the plan is “we paint white lines and put up parking meters and it will slow people down”, then f that. It’ll just cause accidents and reinforces the area as a driving destination.
Well yes, it is one hop, because you’ve got the router doing TLS termination. Inside your network you point to the server that has the TLS certs. Outside of the network you do port forwarding, or use a tunnel with cloudflare agents.
Why is the router involved at all? It’s all local traffic. The external traffic comes through the cloud flare tunnel, right? Maybe I’m not understanding the architecture you’ve got.