BIG-IP vWire Configuration

Hi Romain - thanks for the article. Can we use this set up to use advance WAF for TLS traffic? If we have BIGIP in layer2 mode without any selfIP defined, but would like to use WAF for application traffic passing through it? 

How we can define virtual servers and how F5 can decrypt the traffic without being acting as reverse proxy? 

Any guide or pointer to the solution will be appreciable.