Welcome to the home of PHP-PFCTL project. PHP-PFCTL is a module that allows integration of the OpenBSD pf into PHP, and thus enable native php functions to manipulate the firewall. This module is ideal for projects such as pfsense and m0n0wall to allow them manipulation of the ruleset without the need to call the pfctl binary1).
The benefits of such implementation can easily be seen on the speed since there is no need to call a system binary, and in the security since you don’t have to go through complex functions simply to make sure the parameters are not malicious.
This is an essential module for XeniOS since through this is able to manipulate directly firewall rules and thus minimizing the layers between communications.
/dev/pf will still need to be accessible from the user ID of the web server