Port Redirection

I really don't get the irule use in your case as F5 does port translation without irules as the F5 VS can listen to port 8822 or 22 and the pool members ip address and port is configured in the pool config so F5 does a change to the destination port and ip address by default.

If the servers use public ip addreesses then maybe it will be better to use a forwarding virtual server that will make F5 act like a router and the AFM policy can still be applied to the virtual server or globally.

https://support.f5.com/csp/article/K7595

https://support.f5.com/csp/article/K10354610