Hi ,
You can do it in both ways.If clients use SSL, the reverse proxy can terminate SSL connections or maintain SSL through to the Controller. You have to install Certificate on reverse proxy sever if you want to perform SSL termination at reverse proxy.
I hope this information helps you.
Please let me know if ypu have any issues.
Regards,
Prathamesh