> > pass in on $ext_if route-to { $webh1, $webh2 } round-robin proto
> > tcp \ from any to $virt_ip port http no state
> > pass out on $int_if from any to $virt_ip port http no state
>
> Wouldn't you need some kind of state here? Otherwise there's no
> guarantee of the packets for a given connection always being routed
> to the same physical server.
>
State is useless here as packets won't come back through this router.
Moreover, you're going to block some packets in some cases since you
only see half of the trafic.
If you want a sticky behavior you can change the pool type to
source-hash.