SSL Serverside Not Being Disabled Correctly

The X-Forwarded-For header can be added with a tick box in a http profile.

If this is 11.4+ then you should use policies. No iRule needed.

If pre 11.4 then use HTTP classes for pool selection and add the following iRule. Ensure you have a catchall class at the end for the default pool.

when HTTP_CLASS_SELECTED {
  switch [HTTP::class] {
    "class_pool_bar" -
    "class_pool_default" { SSL::disable serverside }
  }
}