Need help with iRules and SSL

You can configure virtual server listening on port 443 and pool members listening on different port.

So create one virtual server listening on port 443 (this is the only port browsers won’t display in url)

On the virtual server, assign clientssl profile to decrypt client side connection, and server ssl profile to encrypt server side connection

Then, with a LTM POLICY, assign different pool based on HTTP Host or use following article to forward connection to internal servers if you don’t want clientssl / server ssl profiles

https://devcentral.f5.com/articles/sni-routing-with-big-ip-31348?tag=Sni