Gee, your question leaves a lot of scope, and I am unsure how to best respond.

I'm writing a series of lectures about devops for Play Framework applications. So far the SSL-specific material consists of thousands of words, two working projects and an exercise. Pound is only one moving part. I expect to release the lectures in an as-yet-unannounced Intermediate Play Framework course later this year on the web site.

One consideration to think about is how Pound interacts or shares responsibilities with firewall(s).
Another consideration might be how Pound coordinates with DNS for scheduled maintenance.

Have I been helpful or tangential?