vAPP has a built-in webserver/proxy that transparently load balances. The web proxy forwards requests on a round-robin basis to the cluster nodes and to running nodes for failover.
You can point your users to just one node for IP or IM, etc. It doesn't matter which one you point to--the proxy will do the load balancing and failover. Note you won't see any URL change in the browser, so the only way you know which node you've hit is to check the logs.
Q2: I am not aware of additional configurations. Await another community member to review.