[SOLVED] Firewall in CT

[piviul]

I'm new with proxmox and I would collect some opinion about installing firewall/gateway distributions based on one of the supported Proxmox VE Appliance Manager distributions. In other word, in your opinion do you think it's better install firewall distribution on real VM or if the distribution is supported by pveam it is better install it as a unprivileged CT?

Piviul

 

[LnxBil]

do you think it's better install firewall distribution on real VM

Yes. You have better separation/security and full network stack support without any modules on the PVE host itself.
You can also not install PFsense in a CT, which is most probably the most used Firewall distribution - at least according to the posts.