Henning replied on misc@ to the thread from a while back: https://marc.info/?l=openbsd-misc&m=142547006316926&w=2 His suggestion is definitely worth testing... although I don't know how relevant it's going to be on relays without significant traffic. Maybe pf isn't slow, but Henning certainly is! g