assign ip to VM

[tad]

I don't know if my description is correct, but I'm wondering:

Is it prosible to assign a IP address to a VM and to protect the VM from using other IP's using proxmox?

 

[wbumiller]

Enable the firewall (note that it has to be enabled on the VM's network interfaces as well as the VM's firewall's [Options] page) and for every network interface add an IPset called ipfilter-netX (X being the interface number) and add the IPs the VM is allowed to use.
For containers this filter will implicitly contain the IP addresses configured on the interfaces via the gui.

See: http://pve.proxmox.com/wiki/Proxmox_VE_Firewall#Standard_IP_set_.27ipfilter.27
https://git.proxmox.com/?p=pve-docs.git;a=blob;f=pve-firewall.adoc#l348

 

[tad]

ah nice. Will this have any (bad) effect on the performance of the vm's/pve host?

 

[tad]

@wolfgang, do you have any idea?

 

[wbumiller]

If the firewall is already being used somewhere then the performance difference should be negligible for most use cases.