Feature Request: Object-based Firewall Rules for VMs

[EmpireCool]

Hi Proxmox team,

I’d like to suggest an improvement for the Proxmox Firewall: the ability to define firewall rules not only based on static IP addresses, but directly on VM objects.

The idea is to create rules that reference virtual machines by their name, ID, or tags — similar to how it’s implemented in solutions like VMware.

So instead of defining a rule like

Allow TCP from 192.168.100.12 to 192.168.100.20

you could simply write something like:

Allow HTTP from VM “web01” to VM “app01”
or
Allow SSH from all VMs tagged “dev” to “git-server”

This would make firewall configuration much clearer and more flexible — especially in dynamic environments.

Thanks in advance!

Best regards,
Adrian