> > pass in on $ext_if route-to { $webh1, $webh2 } round-robin proto

quoted text
> > tcp \ from any to $virt_ip port http no state

> > pass out on $int_if from any to $virt_ip port http no state

>

> Wouldn't you need some kind of state here?  Otherwise there's no

> guarantee of the packets for a given connection always being routed

> to the same physical server.

>

State is useless here as packets won't come back through this router.

Moreover, you're going to block some packets in some cases since you

only see half of the trafic.

If you want a sticky behavior you can change the pool type to

source-hash.