Queries - New to F5

For 1, do you mean to ask how to retrieve the parts of the config for a specific Virtual Server? If so:

tmsh list ltm virtual 

where is the name of the Virtual Server.

For 2, there are actually three ways to insert an X-Forwarded-For header:

1. via the http profile attached to a Virtual Server;
2. using a Local Traffic Policy (and actually, on versions before 11.4, it can also be done with an HTTP Class);
3. using an iRule.

Because of this, there is no easy answer to your question, and for an iRule, there is no way to be certain that an X-Forwarded-For is being inserted without having a human analyze the rule. The reason is, one could conceivably do something like this (though it is certainly unlikely):

set x Forwarded
HTTP::header insert "X-${x}-For"

But a quick check that is likely to be successful -- at least in order to check for this in an iRule -- is (from bash):

tmsh list ltm rule | grep -Ei "^ltm rule|insert X-Forwarded-For" | grep -B 1 "insert X-Forwarded-For"

If by 3, you mean TLS/SSL offloading, then you need to look for a client-side and/or server-side ssl profile in the Virtual Server. Here is an example of a Virtual Server with both:

tmsh list ltm virtual show-tls-offload

ltm virtual show-tls-offload {
    destination 203.0.113.1:http
    ip-protocol tcp
    mask 255.255.255.255
    profiles {
        clientssl {
            context clientside
        }
        http { }
        serverssl {
            context serverside
        }
        tcp { }
    }
    source 0.0.0.0/0
    vs-index 59
}

Notice the serverssl (perform TLS between BIG-IP and pool member) and clientssl (perform TLS between client and BIG-IP) profiles.