Add an option to have the nodebalancer redirect http requests to https. It should allow you to configure the nodebalancer to listen on port 80 without any backend servers - you would add the backend servers for port 443 only. It would work both with and without ssl termination at the nodebalancer and would significantly simplify configuration for https-only sites. It's the equivalent of "redirect scheme https" in HAProxy.

That sounds pretty interesting. Forwarding 80 -> 443 would be a feasible thing however 443 -> 80 (not that people would do this) without SSL termination on the NodeBalancer couldn't happen.