A VLAN has the following objects configured: Self-IP 10.10.10.100 with port lockdown set to Allow default Virtual server 10.10.10.100:443 with UDP profile enabled Virtual server 10.10.10.0/24 port for

The request https://10.10.10.100 targets the self-IP address on port 443 (HTTPS). Since the virtual server 10.10.10.100:443 is configured with a UDP profile, it will not process TCP traffic. Therefore, the self-IP address's port lockdown setting of Allow Default will allow the TCP 443 connection to the BIG-IP management plane, causing the self-IP to process the request.

A virtual server with 10.10.10.0/24 as its destination is a network-based forwarding virtual server and would not specifically match a host address like 10.10.10.100 on port 443.

Global destination NAT forwarding applies to specific IP addresses and ports, but virtual servers take precedence for matching traffic, and this is less specific without a port.

The virtual server 10.10.10.100:443 is configured with a UDP profile, meaning it will only process UDP traffic, not the TCP-based HTTPS traffic from a browser.