Multiple ssh login hosts?

I know I can use a DNS entry to load balance between two hosts, but I would like to define two hosts in the OOD config and have OOD load balance. The reason for this is I have 2FA enabled on the login nodes when they are being connected to from all other sources, except from the OOD server directly, and when I use the load balancer they are behind, it forces 2FA. I am using host based authentication from the OOD server but I can’t do it if the load balancer is in between, because then that becomes the source and forces 2FA. Hope that makes sense. When I define multiple hosts in the login section, it always uses the last one. Thanks for any help.

I installed keepalived on the login nodes to pass an IP between them. thus I can hit them ‘directly’ via this virtual IP and if one goes down, I can still hit the other one. this doesn’t distribute the load evenly but it is fault tolerant.