Your company is deploying a private cloud based on OpenStack and has selected Contrail Networking as their SDN controller. As part of this solution, you must implement distributed firewall capabilities.

In this scenario, which Contrail component implements this function?