Clone pool the right solution for cloned load-balanced traffic to the cloud?

We have a cloud (remote) network pool of servers we'd like to get https request traffic cloned to for testing that we currently have going through a Virtual Server (VIP) to a default "internal" subnet pool, where, within that VIP, there are rules configured under a policy that forward the non-default traffic to that address to a series of other pools using various non-https ports (there is a possibility of moving the hosts to that cloud). What is the best approach to setting this up? If I understand clone pool usage correctly, clone pools use layer 2, which would mean the clone pool would need to be on a "local" subnet as well (perhaps tunneling would be necessary if remote?) and anything remote would add an additional layer to the https encryption/decryption portion. I've read about "npath" so I'm not sure how that might fit into this, or an iRule even, but if some combination of these features could be used, I would appreciate some guidance to get started.