OpenBSD PF

Plans and prices

Every plan, in full

On the record

Documentation limit

The PF FAQ is a general introduction and supplement to the manual pages, not a replacement for them.openbsd.org · read 11 Oct 2026

Filtering

Rules can pass or block packets based on criteria including network interface, address, port, and protocol.openbsd.org · read 11 Oct 2026

Intended users

The PF documentation is focused on users of the most current OpenBSD release.openbsd.org · read 11 Oct 2026

Management

PF can be enabled or disabled with pfctl, and its rules are read from pf.conf by default at boot.openbsd.org · read 11 Oct 2026

Network features

The guide covers NAT, traffic redirection, address pools, and load balancing.openbsd.org · read 11 Oct 2026

Outbound control

advancedman.openbsd.org · read 22 Sep 2026

Purpose

PF filters TCP/IP traffic and performs Network Address Translation.openbsd.org · read 11 Oct 2026

Redundancy

The guide documents firewall redundancy using CARP and pfsync.openbsd.org · read 11 Oct 2026

Rule direction

bothman.openbsd.org · read 22 Sep 2026

Security

PF provides an antispoof keyword for protection against address spoofing.openbsd.org · read 11 Oct 2026

Stateful inspection

PF tracks connection state in a state table, allowing packets in established connections to bypass ruleset evaluation.openbsd.org · read 11 Oct 2026

Traffic handling

PF can normalize and condition TCP/IP traffic, control bandwidth, and prioritize packets.openbsd.org · read 11 Oct 2026

Alternatives to OpenBSD PF

O OPNsenseAndroidiPhone & iPad+3 I IPFireWebLinux+2 GC Google Cloud NGFWWebAPI MF ManageEngine Firewall AnalyzerAndroidiPhone & iPad+5 C CrowdSeciPhone & iPadWeb+6 AN Arista NG FirewallWeb V VyOSLinuxAPI+1 G GlassWireAndroidWeb+1

Every alternative, ranked