Access from public_ip to vm_ip

[ThemeSaul]

Hello,

I have been trying to get this for a few days and decided to ask.

I have a Proxmox 7.2 server on a machine in my house. My router has a public ip, let's assume 200.200.200.200 external and 192.168.86.1 internal. My goal is to access 200.200.200.200:443 from the internet and reach a service exposed on 443 of a VM.

I have made the router redirection of ports 80 and 443 to point to the VM IP (192.168.86.32).

The problem is that accessing 200.200.200.200:80 from outside the house works but not 200.200.200.200:443. I have read that it is possible that the ISP router is blocking port 443.

I have tried with the firewall enabled (with rules for HTTP and HTTPS) and disabled. In both cases port 80 does reach from the internet but not port 443.

I understand that it is going to be a problem of my ISP router (I think that in the firmware it makes an iptable drop wan 443 for security). Before changing ISP router I wanted to ask if there is something particular I have to do or is there any particularity with port 443 and proxmox.

Correct me if I'm wrong but with my current configuration (VirtIO, bridge vmbr0 linked to en1) all the network configuration has to be done inside the VM and in the proxmox firewall for that VM right?. Will my router see VM 192.168.86.32 as if it were directly connected?

Thank you very much



Proxmox /etc/network/interfaces

auto lo
iface lo inet loopback

iface eno1 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.86.122/24
        gateway 192.168.86.1
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes

VM interface



VM Netplan

network:
  ethernets:
    ens18:
      dhcp4: no
      addresses: [192.168.86.32/24]
      nameservers:
       addresses: [1.1.1.1]
      routes:
      - to: 192.168.86.0/24
        via: 192.168.86.1
      - to: default # or 0.0.0.0/0
        via: 192.168.86.1
        on-link: true
  version: 2

VM routes

default via 192.168.86.1 dev ens18 proto static onlink
10.8.0.0/24 dev wg0 proto kernel scope link src 10.8.0.1
192.168.86.0/24 dev ens18 proto kernel scope link src 192.168.86.32
192.168.86.0/24 via 192.168.86.1 dev ens18 proto static

 

[floh8]

I have read that it is possible that the ISP router is blocking port 443.

no

all the network configuration has to be done inside the VM

yes

in the proxmox firewall for that VM righ

try to deactivate it

Will my router see VM 192.168.86.32 as if it were directly connected

can u ping vm from the router? i think yes when port 80 is working