It is the firewall of OpenBSD that has been ported and is implemented in other operating systems. It replaced IPfilter.

It is kernel level code that integrates the module and its management.