future plans and ideas we can fail over IP addresses already, thanks to CARP we can have synchronized state tables on multiple machines, gives HA firewall clusters we can fail over IPsec SAs already, gives HA VPN terminator clusters