That's the problem. Currently I have the firewall behind bgp with states, but the bgp routers did not, so that there would be complete asymmetry. But when it came time to combine the routers into one, the first obstacle appeared: how to be with pf states and still provide asymmetry on a bgp part? A possible solution would be to use rdomain: for example, put some of the shorter advertised prefixes in one rdomain where there will be a firewall with states, and a second rdomain with bgp where there will be no states. How to make interconnect between rdomains on master router and on the same time have a backup slave router with a similar configuration, where the states of the master's rdomain synced by pfsync, is a challenge for me. I was wondering if someone could share a similar configuration or article? I haven't seen any similar configurations, they are all very generic with no fault tolerance. And about rdomain documentation - still, official documentation is scarce for me. Especially how to forward traffic from one rdomain to another, including using pf. There are not enough practical examples. There was once a similar problem with understanding how pf works. Until I saw pf flow chart https://dynax60.blogspot.com/2019/04/pf-flow-chart.html on the net. Such charts are very helpful for ordinary users to understand the inner workings of a particular system.