Universal persistence in iRule and mirror persistence

You cannot currently mirror Secure Socket Layer (SSL) connections that are terminated by the BIG-IP system. If you enable connection mirroring for a virtual server that references a clientssl or serverssl profile, active connections being processed by the virtual server will be closed by the BIG-IP system when failover occurs. The BIG-IP system will send a TCP RST to the client when failover occurs, because the newly active BIG-IP system does not have the SSL connection in its connection table.