configuration queue setup and classification in pf classification remains easy match out on egress to port 22 set queue foo if the queue foo exists on the outgoing interface, it'll get used if not, the packet will go to the default queue on that interface