One addional question regarding this topic:
Basically I tried to follow /faq/pf/pools.html.
In the example, there is a addional rule to keep
https-traffic on one single connection, which I understand as
skipping load-balancing for https completely.
The load-balancing itself is done with the 'round-robin' method.
So I ask myself why not
a) use the 'least-states' method to maybe balance more evenly?
b) use with 'sticky-address' to avoid the problems with https-traffic
and make use of both WAN-connections for https-traffic?
Both options ('route-to .... least-states sticky-address') seem to
work fine for me but maybe I miss something in the big picture?
Thanks
Thomas