Linux command
pve-firewall 命令
文本
复制后可按需替换文件名、目录或参数。
常用示例
Compile
pve-firewall compile
Example
pve-firewall localnet
Restart
pve-firewall restart
Start
pve-firewall start
Stop
pve-firewall stop
Simulate
pve-firewall simulate
Example
pve-firewall status
说明
pve-firewall manages the Proxmox VE distributed firewall. It generates iptables rules based on cluster-wide and per-VM/container configurations. The firewall can be configured at datacenter, node, VM, and container levels. The compile and simulate commands are useful for debugging firewall configurations before applying them. The firewall supports rule sets, IP sets, aliases, and security groups for organized configuration management.
参数
- compile, c
- Compile and print all firewall rules
- localnet, l
- Show local network information
- restart, r
- Restart the firewall service
- start
- Start the firewall service
- stop
- Stop the firewall service
- simulate, si
- Simulate firewall rules without applying
- status
- Show firewall service status
FAQ
What is the pve-firewall command used for?
pve-firewall manages the Proxmox VE distributed firewall. It generates iptables rules based on cluster-wide and per-VM/container configurations. The firewall can be configured at datacenter, node, VM, and container levels. The compile and simulate commands are useful for debugging firewall configurations before applying them. The firewall supports rule sets, IP sets, aliases, and security groups for organized configuration management.
How do I run a basic pve-firewall example?
Run `pve-firewall compile` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does compile, c do in pve-firewall?
Compile and print all firewall rules