RPC load balancing among multiple tiers using iRules, pools and forwarding

BIG-IP can send a reset to an established connection using the reject command. BIG-IP can also silently remove a connection so that subsequent traffic will likely be reset (see the drop command). However, there is no way to not answer a TCP connection aside from a packet filter or deleting the vip. There is a very good reason for this. Relatively speaking, rule processing is fairly expensive. Processing a rule on evey SYN would make BIG-IP extremely susceptible to a SYN flood DoS attack. That would be bad.