Dynamically select APM policy and AAA server based on client subnet and domain

That a quite complex subject. on the performance side, the only big configuration will be your datagroups and they are made for that so no big deal.

now you need to try and test in an irule if you can set the AAA ip address with a ACCESS::session mcset command somehow, a good example is assigning dynamically microsoft rdp server destination address, in this example you can replace the destination address by a session variable.

i'll try it.