Just my two cents: right now HTTP/2 support in Go 1.6 does not include support for h2c (HTTP/2 over TCP) [1]. It only supports h2 (HTTP/2 over TLS). So basically SSL termination before the gorouter won't be possible (unless somebody implements h2c in gorouter).

[1] https://github.com/golang/go/issues/14141