Paul,
Gee, your question leaves a lot of scope, and I am unsure how to best
respond.
I'm writing a series of lectures about devops for Play Framework
applications. So far the SSL-specific material consists of thousands of
words, two working projects and an exercise. Pound is only one moving
part. I expect to release the lectures in an as-yet-unannounced
Intermediate Play Framework course later this year on the
scalacourses.com <http://scalacourses.com> web site.
One consideration to think about is how Pound interacts or shares
responsibilities with firewall(s).
Another consideration might be how Pound coordinates with DNS for
scheduled maintenance.
Have I been helpful or tangential?
Best,
Mike