The epair interfaces are part of a system that gives each jail its own separate virtualized network stack instead of sharing the host OS networking. It's enabled by default as of FreeBSD 12.0, but you can read the original pager (from 2003!) here for background and motivation information: https://papers.freebsd.org/2003/zec-vimage.files/zec-vimage-...