Currently I'm using nginx as a reverse proxy over https and everything that is proxied is itself over https. SSL termination happens at Nginx and since the traffic is over https it get encrypted again before going on its way.
My first instinct was that my public facing servers must use a signed certificate and use SSL passthrough from nginx. Turns out nginx does not allow you to do that. So I started looking at haproxy since it can do SSL passthrough.
And after a lot of reading I started wondering if any of this really matters. I can use self signed certificated once inside my own network.
Is there a reason to use the same certificate on nginx / haproxy as on my servers? Is there any reason not to use self signed certificates for internal traffic?