It's been over a year since I had to set this up, but I used HAProxy in a similar setup and still needed stunnel.

In the whole of my DevOps career, getting SSL working with web sockets was one of the most frustrating.

I second the success reports of HAProxy 1.5dev with SSL support. It's been stable for me over the last month, and more performant than using STunnel for SSL, which is what I'd been using for the last 1.5 years with Websockets. HAProxy is a remarkable, wicked fast, and very stable product.

HAProxy dev releases have had SSL support for the past 3-4 months.

http://blog.jeffzellner.com/work/2013/01/25/websockets--ssl-...

We are running 1.5 latest dev compiled with ssl here @basho. So far so good.

https://argv0.data.riakcs.net:8443/bailis_gosling.jpg