Like others already said, by default it reads everything.
The money quote line is this one:
107: 2026-02-28 21:00:07 INFO: scsi0: dirty-bitmap status: created new
Since the VM is not running and/or you have the stop backup mode, it can't make...
No. It is read completely, to seek and find modified chunks. Look at "write: 0 B/s" in every line ;-)
In a simplified nutshell: the source is read chunk by chunk. The chunk is hashed. That checksum is sent to the PBS. The PBS notices that a...
ARC is for a default installation on a PVE 9 with 32 GiB much lower. So the example is missing clear directions and could be phrased much better to be helpful.
I'll give you some options:
OPNSense
pfSense
VyOS
Proxmox!
A Debian box is quite capable of being a very decent router and you already have one: Proxmox. However, that is one for the likes of me to run up. What you probably need is something...
I'd recommend Opnsense. It fits all these requirements and it can be installed as a VM on Proxmox VE (just download the iso-vga installer) https://opnsense.org/
It's basically an open source firewall. Among other functions, you can create...
The resolving commit for mentioned vioscsi (and viostor) bug was merged 21 Jan 2026 into virtio master (commit cade4cb, corresponding tag mm315).
So if the to-be-released version will be tagged as >= mm315, the patch will be there.
As of me...
That sounds like a reasonable fix. A minor delay in handoff between the nodes in the interest of security is very much acceptable. I look forward to seeing it pushed out once you get it applied and tested. Thanks!
understandable, the only mitigation I can currently think of is by utilizing a hook script, but that won't catch every case in the guest lifecycle.
I'll look into creating patches that resolve this problem by making the guest wait for a firewall...
Interesting, I’d have also expected firewall rules to be applied the whole time.
Can access be controlled by a firewall outside Proxmox? At least for external connections… That’s our primary method though we use Proxmox firewall in a few cases...
Just an update. I have confirmed that I can exploit this to establish an SSH session with the guest by simply probing the ssh port every second. As soon as I migrate the VM to another node the session connects and I can use that session as long...
This is true in theory but not always possible. There is, for example, a well-known enterprise-grade backup software, who allows backing up MS SQL clusters, but doesn't support the backup of MySQL/MariaDB/Oracle or PostgreSQL clusters.
For this...
I would never solve those RPO/RTO demands with a recovery solution, I would always go with internal replication/standby solutions within the database. There is also a reason those techniques exist in those products for decades. So those should be...
This is how I look at it.
You are offering to operate a bus for people. but instead of selling seats, you are putting busses inside your bus.
Whats the use case?! If you're trying to offer a customer resources that they can distribute between...
no.
There is almost NEVER a use case for nested hypervisors except for development/lab use. Even if we assume there are no cpu/ram performance degradation that occurs with modern VT extensions (hint: there are) the consequences of cascading...
You dont. I dont understand the use case enough to comment on the wisdom of the solution; please explain what you mean by VDS, and why you want proxmox inside them.
If possible (e.g. enough storage available) you should always restore to a new VMID, or create a backup of the broken system before overwriting it.
You can never be sure that a backup is valid and restorable until you have sucessfully restored...
Hi,
you may be interesed in the following admin guide section for configuring pveproxy: pveproxy - Proxmox VE API Proxy Daemon
Of course, a proper firewall setup is still recommended.