Switch between default pool and another virtual server, per request

You can do this for packets without "True-Client-IP": CDN -> public_vs -> application_pool

instead of doing this: CDN -> public_vs -> application_vs -> application_pool

You can use an iRule attached to public_vs that will send traffic without "True-Client-IP" to the application_pool. Use OneConnect with 255.255.255.255 netmask in order to preserve the client IP at the server level.

when HTTP_REQUEST {
if { [HTTP::header exists "True-Client-IP"] } {
pool proxy_pool
} else {
pool application_pool
}
}