Virtual Server configuration

The VS would quite happily handle HTTP traffic on any other port without the iRule. Why potentially expose the HTTP parser unnecessarily to unwanted or unauthorised traffic? You also get the choice to drop or reject the traffic on a VS specific basis and not rely on the global Unmatched Packet behavior. Personally I'd rather use a packet filter to provide even better protection resource wise but they don't seem popular (perhaps AFM will change that).