multiple routing tables (4.1)
pflog, pfsync clonable devices (4.1)
keep state (stateful filtering) default mode (4.1)
relayd (nee hoststated (4.2)) layer 7 load balancing, ssl termination, url filtering (4.3)
pflow(4) netflow export (4.5)
state-defaults settable (4.5)