You probably want a cloud LB at least for SSL termination, but Nginx can centralize and simplify your ingress management quite a bit.