Office 365 hybrid deployment

hi all,

im doing O 365 hybrid, and i have some question :

1- for the federation proxy servers do i need public IP address on it or i can use NAT.

2- for the certificate is it must to be fs.domain.com and cloud.domain.com or any names will work?

Thanks