In the following setup fabio is configured to listen on the public ip(s) where it can optionally terminate SSL traffic for one or more domains - one ip per domain.

To scale fabio you can deploy it together with the frontend services which provides high-availability and distributes the network bandwidth.