For example, I run a Visionfive 2 OpenBSD install with squid, everything else has to go through that.
Relayd also does a bunch of similar things and is closely integrated with pf too..
For example, I run a Visionfive 2 OpenBSD install with squid, everything else has to go through that.