Web Access configuration is set to "One or more RemoteApp sources:" and I have specified the RDS Farm name (which points to the VIP).
In order to get that to work, I had to create an additional Virtual Server to load balance traffic to port 135. (Which I found in an *old* version of the RDS deployment guide.)
If I disable that port 135 virtual server, I get this message when I try to add the farm as a RemoteApp source:
"RD Web Access was not able to access [RDS Farm name]. Verify that the RD Session Host server name was entered correctly, that the server is running and connected to the network, and then try again."
I can add my Connection Broker as the source, and it doesn't require port 135... but it's also not the way the Deployment Guide says to configure the Web Access server.