git: 47c2526aa8 - main - 2023q2 status: add pf report

From: Ed Maste <>
Date: Mon, 24 Jul 2023 15:47:35 UTC
The branch main has been updated by emaste:


commit 47c2526aa8a79677befb7817be436837a53fd0d5
Author:     Ed Maste <>
AuthorDate: 2023-07-21 12:46:30 +0000
Commit:     Ed Maste <>
CommitDate: 2023-07-24 15:47:16 +0000

    2023q2 status: add pf report
    Based on kp's original review.
    Reviewed by:    salvadore
    Differential Revision:
 .../en/status/report-2023-04-2023-06/pf.adoc       | 45 ++++++++++++++++++++++
 1 file changed, 45 insertions(+)

diff --git a/website/content/en/status/report-2023-04-2023-06/pf.adoc b/website/content/en/status/report-2023-04-2023-06/pf.adoc
new file mode 100644
index 0000000000..97c9ac69c0
--- /dev/null
+++ b/website/content/en/status/report-2023-04-2023-06/pf.adoc
@@ -0,0 +1,45 @@
+=== Pf Improvements
+Links: +
+link:[D40911] URL: link:[] +
+link:[D40861] URL: link:[] +
+link:[D40862] URL: link:[] +
+link:[D40863] URL: link:[] +
+link:[D40864] URL: link:[] +
+link:[D40865] URL: link:[] +
+link:[D40866] URL: link:[] +
+link:[D40867] URL: link:[] +
+link:[D40868] URL: link:[] +
+link:[D40869] URL: link:[] +
+link:[D40870] URL: link:[]
+Contact: Kajetan Staszkiewicz <> +
+Contact: Naman Sood <> +
+Contact: Kristof Provost <>
+man:pf[4] is one of the firewalls included in FreeBSD, and is probably the most popular.
+pf was created by the OpenBSD project and subsequently ported to FreeBSD.
+==== Backport OpenBSD Syntax
+Kajetan introduced the OpenBSD syntax of "scrub" operations in "match" and "pass" rules.
+Existing rules remain supported, but now OpenBSD style "scrub" configuration is also supported.
+==== pfsync Protocol Versioning
+The man:pfsync[4] protocol version can now be configured, allowing for protocol changes while still supporting state synchronisation between disparate kernel versions.
+The primary benefit is to allow protocol changes enabling new functionality.
+==== pfsync: Transport over IPv6
+pfsync traffic can now be carried over IPv6 as well.
+Naman finished the work started by Luiz Amaral.
+==== SCTP
+There is work in progres to support SCTP in pf.
+That support includes filtering on port numbers, state tracking, pfsync failover and returning ABORT chunks for rejected connections.
+Sponsor: InnoGames GmbH
+Sponsor: Orange Business Services
+Sponsor: The FreeBSD Foundation