Upcoming work 'anchor ... quick' Support for multiple routing tables Integration with ipsec Filtering on IPSec SA More demotion counter integration Clean up of existing code preparing for new features More protections agains memory exhaustion Convert pfctl to compiler { } notation for anchors better optimization better warnings More improvements to pfctl's ruleset optimizer Take all this with a grain of salt, some of these have been on this list for a long time.