iRule for HTTPS

Are you offloading TLS on the BIG-IP? And are you trying to add the following headers toward the client?

Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0

If so, why are you trying to avoid the use of the http profile? This could be done without it, but it is much more complicated because you will have to manually process the data stream in the CLIENT_DATA event. In this case, you'll probably need to use the

STREAM

profile, a

STREAM

substitution rule to remove the three headers above, then another

STREAM

substitution to substitute them in where the first instance of \r\n\r\n is found. Among other things, this'll be slower than the

HTTP::

primitives for accomplishing the equivalent.