libevo
PF Firewall
The packet filter firewall native to OpenBSD. Clean syntax, strong security defaults, and proven reliability for protecting network perimeters.
PF (Packet Filter) is the firewall system built into OpenBSD. It is known for its clean, readable configuration syntax, strong defaults, and the security-first philosophy of the OpenBSD project. PF handles packet filtering, NAT, traffic shaping, and load balancing in a single, coherent framework.
Why PF
Most commercial firewalls are black boxes: proprietary software running on proprietary hardware with opaque rule processing. PF is the opposite: open source, well-documented, and running on an operating system that takes security more seriously than any other. You can read every line of code that processes your network traffic.
Clean configuration
PF’s configuration language is designed to be readable. Rules are expressed in a syntax that maps naturally to how network administrators think about traffic flow. This makes firewall policies easier to write, review, and audit, reducing the risk of misconfiguration.
Our expertise
We help companies evaluate PF and OpenBSD for their network perimeter security, advising on rule design, network architecture, and integration with the rest of your infrastructure.