VS Matching Algorithm

As you noted, the OOP matches on exact/longest match first for the destination. If traffic arrives for destination 10.10.10.10 on either ports 80, 443, or 8080, the traffic will be directed to the respective VS. Only if traffic arrives for a port other than 80, 443, or 8080 will the last VS you listed (10.10.10.10:*) be used.

See SOL14800 for more details. It goes further by including the 'Source' address (which was added in ver 11.3.0). The SOL contains some examples that may be helpful, but holler back if any other questions!