HTTP profile: x-forwarded-proto

You'll want to do a stream in an iRule. The profile itself applies the stream expression to both directions of traffic, where you only want to affect response traffic. There's been a few of these conditions recently, so I'll refer you to this post for an example:

https://devcentral.f5.com/questions/need-help-with-irule-masking-the-url-please

I would also argue that in most cases option 1 is the easier and more universal action. Port 443 is the default for https, so users wouldn't have to remember to add the :8080 port to the address.