A modern subsystem for filtering network traffic and packet routing in the Linux kernel, designed to replace the outdated Iptables firewall.