Newer stuff ipsecctl -- IPSec for dummies like myself sasyncd -- IPSec failover rtlabels pf, bgpd and ospfd support route labels. pf can filter or tag traffic based on rtlabels. bgpd can tag routes based on route labels. ospfd can redistribute routes based on their label. carp demotion counter Demotion of a carp interface from userland. The counter can be increased in case an important part of the system fails (partial failure) a less degraded system becomes master independent of advskew supported by bgpd and used during boot (/etc/rc)