Using a Server-side HTTP and HTTPS to Different App Server Pools

It may seem counter intuitive, but you would need to apply a server SSL profile to the VIP and disable serverSSL for all non-HTTPS requests.

when HTTP_REQUEST {
    switch -glob [string tolower [HTTP::uri]] {
        "/app1*" {
            SSL::disable serverside
            pool app1_pool
        }
        "/app2*" {
            SSL::disable serverside
            pool app2_pool
        }
        "/secure*" {
            pool secure_pool
        }
    }
}