force BIG-IP to immediately reflect config changes

You are correct; as with most object settings, iRule changes will not apply to existing connections, only new ones. The only way around this is to drop all those existing connections which is hardly ideally but I think this behaviour makes sense and is the best approach despite that drawback.