Any approach to encrypting HSL traffic such that no plain text is ever sniffable?

I quickly tested the setup described in this article and it works:

1. Create a L4 TCP Virtual Server with a none-floating address with a serverssl profile and the tls syslog server as Pool Member.
2. Create a Pool with above Virtual Server as Pool Member.
3. Use this Pool as the HSL-Pool or use the Virtual Server directly for syslog messages.

We now have a Virtual Server that listens for plain-text syslog messages and sends this messages encrypted to the tls syslog server. No plain-text packet leaves the f5.