Anchors placeholder in the main ruleset, branching to a sub-ruleset similar purpose as netfilter chains or IPFilter head/group, but only one level (flat, no recursion) placeholder and sub-rulesets each have names sub-rulesets can be manipulated without reloading the main ruleset (from scripts, authpf) branching is conditional sub-rulesets can contain filter and translation rules