LTM Policy Forward Traffic Based to Node based on URI

XFF header has to be added by something, in your case the BIG-IP i assume but when the request comes in the header isn't inserted yet.

you do have access to the actual public IP when the request enters here without any device in front of it changing it.

so give it a try on actually public IP, that should be possible via  TCP followed by address.