13.4 vnet-ified the net.pf tunables states_hashsize and source_nodes_hashsize https://cgit.freebsd.org/src/commit/sys/netpfil/pf/pf.c?h=releng/13.4&id=428b8c8202654bddbfe871eb412e272c23f86802 Unfortunately 13.4 is missing the commits that let vnet-ified tunables be settable from the loader.conf. First part is https://cgit.freebsd.org/src/commit/sys/kern/?id=110113bc086f and it was then extended in https://cgit.freebsd.org/src/commit/sys/kern/kern_sysctl.c?id=cf7974fd9e554552989237c3d6bc736d672ac7c6 This means that the net.pf tunables that were settable in 13.3 are now not settable in 13.4.
I think it is expected behavior ( right now ). Actually I have plan to rework `sysctl(9): Enable vnet sysctl variables to be loader tunable`, so it ( and related commits ) is not MFCed to stable branches ( including stable/14 ) yet. I will post the rework in one / two weeks so there's plenty time to test before release 13.5 .