Skip to content

Resource: proxmox_virtual_environment_firewall_options

Manages firewall options on VM / Container level.

Example Usage

resource "proxmox_virtual_environment_firewall_options" "example" {
  depends_on = [proxmox_virtual_environment_vm.example]

  node_name = proxmox_virtual_environment_vm.example.node_name
  vm_id     = proxmox_virtual_environment_vm.example.vm_id

  dhcp          = true
  enabled       = false
  ipfilter      = true
  log_level_in  = "info"
  log_level_out = "info"
  macfilter     = false
  ndp           = true
  input_policy  = "ACCEPT"
  output_policy = "ACCEPT"
  radv          = true
}

Argument Reference

  • node_name - (Required) Node name.
  • vm_id - (Optional) VM ID. Exactly one of vm_id or container_id must be specified.
  • container_id - (Optional) Container ID. Exactly one of vm_id or container_id must be specified.
  • dhcp - (Optional) Enable DHCP. Defaults to false.
  • enabled - (Optional) Enable or disable the firewall. Defaults to false.
  • ipfilter - (Optional) Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
  • log_level_in - (Optional) Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog). Defaults to nolog.
  • log_level_out - (Optional) Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog). Defaults to nolog.
  • macfilter - (Optional) Enable/disable MAC address filter. Defaults to true.
  • ndp - (Optional) Enable NDP (Neighbor Discovery Protocol). Defaults to false.
  • input_policy - (Optional) The default input policy (ACCEPT, DROP, REJECT). Defaults to DROP.
  • output_policy - (Optional) The default output policy (ACCEPT, DROP, REJECT). Defaults to ACCEPT.
  • radv - (Optional) Enable Router Advertisement. Defaults to true.

Attribute Reference

There are no additional attributes available for this resource.

Import

VM Firewall Options

Use the import ID format: vm/<node_name>/<vm_id> Example uses node name pve and VM ID 100.

Example: 

terraform import proxmox_virtual_environment_firewall_options.vm_firewall_options vm/pve/100

Container Firewall Options

Use the import ID format: container/<node_name>/<container_id> Example uses node name pve and container ID 100.

Example: 

terraform import proxmox_virtual_environment_firewall_options.container_firewall_options container/pve/100