Proxmox network management: IP pools, NAT and firewall in one panel
NexoVirt brings Proxmox network management into the panel: IP pools that give each new guest the next free address, NAT and port forwarding for private guests, and a readable view of the firewall rules running on the host. The agent applies the rules, and they survive reboots.
What it does
IP pools, NAT and port forwarding, firewall inspection and a network map.
-
IPAM with subnet math
Define IPv4 or IPv6 zones. The panel enumerates the range, reserves the gateway and IPs already in use, and hands out the next free address at create time.
-
NAT and port forwarding
Private guests reach the internet through masquerading, and port forwards expose them. The agent writes only its own NEXOVIRT chains and restores them at boot.
-
Firewall inspection
iptables, nftables, ufw, firewalld and pve-firewall are parsed into one rule model and shown as readable tables with a NAT map.
-
Network map
Bridges classified as WAN, private or internal, the guests on each matched by IP, and the NAT overlay on top.
-
Per-guest firewall
Per-guest rules with reusable presets for admins, and optionally for customers in the portal.
Why not just use the Proxmox web UI?
Proxmox VE runs the virtualization. NexoVirt adds the layer around it. Networking & IPAM, task by task:
| Task | Proxmox web UI | NexoVirt |
|---|---|---|
| Give a private VM internet access | post-up iptables lines in /etc/network/interfaces | Enable NAT on the host page and click Apply |
| Forward a public port to a VM | Hand-written DNAT rules | One row: protocol, public port, guest IP and port |
| Pick a free IP for a new VM | A spreadsheet, or SDN IPAM inside SDN zones | The next free address from a zone, set in the wizard |
| See every firewall rule on a host | pve-firewall rules only | iptables, nftables, ufw, firewalld and pve-firewall in one view |
How to use it
Up and running in 3 steps, all in the panel.
-
Create an IP zone in Settings, IP zones. The panel detects your bridges and does the subnet math.
-
On a host's Networking page, enable NAT, add port forwards and click Apply.
-
Click Analyze to read the host's live firewall, and open the Map tab to see what sits where.
See it in the panel
Real screenshots from NexoVirt, with demo data.
Networking & IPAM FAQ
How do I set up port forwarding to a Proxmox VM?
Enable NAT for the host with its WAN bridge and private subnet, add a port forward (for example TCP 2222 to 10.10.0.5 port 22) and click Apply. The agent writes the DNAT rule into its own iptables chain.
Do NAT rules survive a reboot of the Proxmox host?
Yes. The agent writes a restore script and a systemd unit, nexovirt-nat.service, that applies the rules again at boot.
Does NexoVirt change my existing firewall rules?
No. It only creates and flushes its own NEXOVIRT chains and jumps into them. Built-in chains and the Proxmox firewall are never flushed.
Start running NexoVirt today
Free for homelabs with unlimited VMs on up to 2 nodes. Running a hosting business? Upgrade in place when you grow, no migration.