What is TLS termination in Ingress?

Ingress controllers commonly terminate TLS at the cluster edge and forward traffic to backend services. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.