https//publicurl should be the A record in DNS. DNS should point to the load balancer (get the listener IP) and the load balancer should redirect to both the WFE IPs. In SharePoint central admin go to AAM and add public URL as your SharePoint site instead of default one.
SSL offloading at Load balancer is fine and load balancer will convert HTTPS into HTTP traffic and redirect to specific web app.

Don't have to bother for load balancing APP servers unless needed, SharePoint's internal application takes care of it.

Balajee Lambata BPL Consulting Ltd

https://publicurl should be the A record in DNS. DNS should point to the load balancer (get the listener IP) and the load balancer should redirect to both the WFE IPs. In SharePoint central admin go to AAM and add public URL as your SharePoint site instead of default one.
SSL offloading at Load balancer is fine and load balancer will convert HTTPS into HTTP traffic and redirect to specific web app.

Don't have to bother for load balancing APP servers unless needed, SharePoint's internal application takes care of it.