A lot of companies do not use end to end encryption, yet they have configurations similar to yours. BShea is correct, it will work, and a proxy is the route you want to go. Here is an example.
Tomcat has connectors, with the HTTP connector turned on by default.
Apache has the same concept, allowing for HTTP and HTTPS traffic, with HTTP enabled by default.