Reimplementing pf as an eBPF/XDP dataplane on Linux

Post by 882542F3884314B » Sat, Jul 11, 2026, 1:09 PM UTC

Post by hlieberman » Sat, Jul 11, 2026, 9:03 PM UTC

asmnzxklopqw wrote: post #2

PF configuration language that author considers to be “the clearest expression of firewall intent anyone has shipped” is 95% the configuration language of ipfilter, the initial solaris and bsd firewall software. Quite suspicious that the author doesn’t mention it, especially when pf started merely as a clone of the latter.

Post by Chu4eeno » Mon, Jul 13, 2026, 8:08 PM UTC

hlieberman wrote: post #3

asmnzxklopqw wrote: post #2

PF configuration language that author considers to be “the clearest expression of firewall intent anyone has shipped” is 95% the configuration language of ipfilter, the initial solaris and bsd firewall software. Quite suspicious that the author doesn’t mention it, especially when pf started merely as a clone of the latter.

Considering the author is the founder of pfSense and has been contributing to BSD since 1995, I suspect he knows about the origins of pf.