Up and running in three steps

When you add a host, a lightweight agent SSHes in once, scans the node, and imports your existing VMs, containers, storage and networks. Nothing is reinstalled and nothing is migrated: NexoVirt reads what is already there.

From then on a collector records a snapshot only when a resource actually changes, carrying the last-known IP forward for offline guests. Every page (dashboard, guest list, node views, network map) reads this database, so it opens instantly and keeps working with an "as of" timestamp even when a host is briefly unreachable.

Create, reinstall, delete and power actions return immediately. The panel writes an optimistic status, queues a job, and a worker runs the real Proxmox call before a targeted refresh swaps in the live state. You never sit on a spinner waiting for Proxmox to finish.

QEMU guests are built from a cloud-init OS-template library: a base image plus native cloud-init for users, SSH keys, IP and more. The qemu-guest-agent snippet is delivered through the host agent, and images are downloaded on demand and cleaned up after use, so nothing lingers on your storage.

Define IPv4 or IPv6 zones and the panel does the subnet math: it enumerates the CIDR and allocates the next free address transactionally, so the create wizard can hand a guest a static IP or leave it on DHCP.

Give private guests internet access with MASQUERADE and expose them with DNAT port-forwards, applied through a dedicated, fail-closed agent ruleset that only ever touches its own chains and never flushes Proxmox or built-in rules. The panel also reads iptables, nftables, ufw, firewalld and pve-firewall and normalises them into one readable rule model with a NAT map.

Assign a guest an owner and that customer gets a slim, role-scoped portal for only the servers they own. Every portal read and action re-checks ownership on the server, so a customer can never reach a guest that is not theirs.

Plans bundle cores, memory, disk, traffic and expiry, and an optional daemon enforces them: suspend on expiry or over-limit, auto-delete after a grace period, auto-resume on the monthly reset. Enterprise adds a reseller hierarchy with per-reseller quotas and white-label branding, so you can hand partners their own slice.

Everything in the UI is available over a clean REST API: token authentication with per-token IP allow-lists, rate limits and host scoping, a consistent response envelope, and in-app documentation. The full guest lifecycle is drivable end to end.

Manage NexoVirt as code with the OpenTofu / Terraform provider, and wire it into your stack with outbound event webhooks (event to templated JSON to HTTP, signed and retried) and rule-based alerting to an in-panel inbox, email, Discord and Google Chat.