Q: What kind of LB should I be using to put in front of fleet? Also terminating ssl at LB and using self signed cert between lb and instance ok?

Any LB that supports HTTP2 and websockets. Terminating TLS can happen at LB or Fleet server.