I have tested some more.
The settings for a webfront that is a member of a pool in BIGIP are these:
Enabled (All traffic allowed)
Disabled (Only persistent or active connections allowed)
Forced Offline (Only active connections allowed)
I am sure that once the webfront is out of the load balancer (completely) then everything that has to do with windows, sharepoint and sql will probably work just fine. You are depending on the load balancers ability to actually not send users to the web front that is about to be patched.
I had better success with "forced offline" than "disable" in BIGIP. I constantly refreshed the sharepoint site and the web front that was disabled stilled served me the front page. If I wanted to I could "hang on to" the webfront so to say.
I changed the logo on the start page according to this article to be able to see which front end I was hitting.
https://www.sharepointdiary.com/2014/09/how-to-find-which-sharepoint-server-is-serving-to-you.html
Perhaps this is not normal user behaviour to constantly refresh the page like that....
The only thing I am wondering now is if there is any scenario that users may find downtime?
If I open a word document, make changes to it for quite some time without saving. By the time I am about to save my changes, the web front end may have been disabled from the load balancer and I get an error?
Or if I open a infopath form or trying to create a new item in sharepoint with many forms to fill. When I hit save/send, might I get an error if the web front has been disabled during the time I am filling out the form?
Do you see what I am trying to get at? Can we "force offline" and sharepoint will handle stuff "in the background" with the scenarios I am describing?