relayd(8)


Load balancer and application layer gateway
Supports multiple protocols: TCP/IP, UDP, DNS, HTTP, SSL.
Additionally supports TCP, HTTP or ICMP health checks.

Different subsystems
redirect: L3 using anchors to create rdr-to / route-to rules and tables.
relay: L7 using sockets and divert-to in PF.
router: dynamically alter routing table configurations.

Supports some of the mentioned interfaces:
anchors, divert-to, divert-reply / bindany, rdr-to, socket splicing
Will not support bpf or divert-packet (it is not an IPS)