pfSense

One Critical feature that most professional Routers have that PfSense does not is a "do this, but roll it back if you don't have confirmation in <specified> seconds." I belive the syntax for this in iOS is saveconfig, reboot <seconds> <make changes>. I belive this can currently be implemented in a UI command that backsup the current config and then marks it as a restore after the timeout. With ZFS incoming, this is easier as you can just restore a snapshot.

One potential pitfall I see is hardware changes. I am unsure how to handle that, but I expect that to be a rare instance that somebody isn't hands on to be able to reconfigure locally any issues for a hardware change.