allow traffic to VS based on the source IP fwded in the http get request

I'd suggest that you go and read the API documentation for the IP command family. The information you need to extract the client IP address for each connection is in there.

You will also likely need to look at the class command documentation to see how to make comparisons against a datagroup, to allow our disallow specific IP addresses or ranges.