X-Forwarded-For through proxy and F5

I'm still working on getting decrypted application data from ssldump, but I put the iRule in place on a test virtual server that only I use and it does add a second XFF IP, but it is the same IP as the one that is already there. So it used to say: X-Forwarded-For: 10.10.10.21 With the iRule, it says: X-Forwarded-For: 10.10.10.21, 10.10.10.21

When I get successfully decrypted application data, I'll report on what the X-Forwarded-For header says there.