Rate limiting based on X-forwarded-For

Hello,

Currently  our external BIG-IP receive traffic from CloudFlare.

I would like to apply a rate limit on the IP provided by  X-FORWARDED-FOR header.

Aside from building an iRule, is there any bulit-in option inside of F5 modules to achieve this?

the use case is to rate limit for OTP submission and im scared that an iRule will have high load on the resources.

Thanks in advance.