However, to do that SSL termination needs to happen on the openshift router

I'm interested in knowing more about this. Why is that the case Stephen Coady? Is there some documentation around that? Or perhaps some reference architecture from OSD that we can look at? Jesse Sarnovsky, would you know of any links/resources that could help us out in this regard?