I've been looking around different setups for a server cluster supporting SSL and I would like to benchmark my idea with you.

Requirements:

• All servers in the cluster should be under the same full domain name. (http and https)
• Routing to subsystems is done on URI matching in HA proxy.
• All URIs have support for SSL support.

Wish:

• Centralizing routing rules

          ---<----http-----<--
          |                  |
  Inet -->HA--+---https--->NGInx_SSL_1..N
              |
              |
              +---http---> Apache_1..M
              |
              +---http---> NodeJS
  

Idea: Configure HA to route all SSL traffic (mode=tcp,algorithm=Source) to an NGInx cluster turning https traffic into http. Re-pass the http traffic from NGInx to the HA for normal load-balancing which performs load balancing based on HA config.

My question is simply: Is this the best way to to configure based on requirements above?