Single VIP to support SSL & Non-SSL traffic.

You could put a "SSL::disable serverside" at the beginning of the HTTP_REQUEST event, then in the switch statement, use "SSL::enable serverside". Otherwise you would need to issue "SSL::disable serverside" on each match for those sites that need SSL offload.

Devcentral link on SSL iRule commands

See this discussion.

https://devcentral.f5.com/questions/using-a-server-side-http-and-https-to-different-app-server-pools

it looks like you need to set a server ssl profile on the virtual server, and then disable it for the connections that do not need it with SSL::disable serverside

SSL Offload is working fine. Its the SSL enable from F5 to the backend servers for "/mstrsbx" which is not working. Will the following work? "/mstrsbx" { SSL::enable serverside virtual vs_dmstap6_443 }

You need to do 2 things. First, you must assign a server SSL profile to the virtual server. Second, you can either disable the profile on all HTTP paths by adding in SSL::disable serverside OR as also suggested, you could disable it at the top of the HTTP_REQUEST section, and then enable it on the HTTPS path for /mstrsbx

I tried that, with 'serverssl' profile on the virtual but it broke the other apps. So, you are saying add the server profile on the virtual & disable it individually for non-ssl, is that correct? Thanks.

yes. that is correct. Like this

"/redex*" {
    virtual vs_dredex_8888
    pool dredex_8888_pool
    SSL::disable serverside
}         
"/plm*" {
    pool dplmap1_8080_pool
    SSL::disable serverside
}     
"/mstrsbx*" {
    virtual vs_dmstap6_443
}  

Tried the above. Still getting the following, I am using the default 'serverssl' profile. Bad Request

Your browser sent a request that this server could not understand. Reason: You're speaking plain HTTP to an SSL-enabled server port. Instead use the HTTPS scheme to access this URL, please.

ok, here is one I don't know, maybe someone else knows. Since the path we want end to end encryption has the 'virtual' statement in it, which virtual server should the serverside ssl profile be applied to?

If you want to play around, try setting the ssl server profile on vs_dmstap6_443 instead of the main virtual server.