Terminate SSL on OHS, not on the load-balancer.

When we install IAM 11g using LCM, we are given the choice to use SSL for the load balancer. The Enterprise Deployment Guide section 3.4.3 mentions that SSL offloading can be done on the load-balancer. Very well.

Is it possible not to offload SSL on the load-balancer, but rather end the connexions on the OHS. The load-balancer would be configured to redirect requests based on ssl protocol parameters like ssl session id. Obviously, that would require some additionnal steps after LCM configuration is done. We are thinking of separating host names with ports.

Is there any best practices about this ? Is there a list of what application should be accessible from each load-balanced hostname ?