Having Pfsense router and VMs on same server

[Denon12]

Hello,
I'm planning to make my first proxmox server after some tests on an old PC.
Is it possible to make a pfsense router in a VM, then have all the traffic from other VMs go throught pfsense?
I think it should work by selecting the network card connected to my switch when setting up other VMs on proxmox. Im a beginner so I want to make sure before starting out!
Cheers

 

[bobmc]

How many network ports are on your pc?

It's easy to do with 2 or more network interfaces, harder to do with a single network interface and usually involves VLANs

 

[Denon12]

I didnt buy anything yet. Pfsense requires 2 network ports anyway, do I need more?

 

[bobmc]

If only the VM traffic needs to go through pfsense

create virtual network bridge not attached to any physical port on the host - e.g vmbr2
create a pfsense vm with 2 nic, one attached to a real nic with a route to the internet, the other attached to vmbr2
assign an ip to the 2nd nic as the gateway address for VM traffic
create a vm with a nic attached to vmbr2, and assign an IP in the same subnet, using the pfsense lan ip as the gateway
create filter rules in pfsense to allow traffic from LAN to WAN

 

[Denon12]

What if I want to route the traffic from physical devices throught pfsense as well? It I understand correctly, your solution will only route traffic from VMs

 

[Dunuin]

What if I want to route the traffic from physical devices throught pfsense as well? It I understand correctly, your solution will only route traffic from VMs

Then you either need single NIC + managed switch that supports tagged VLAN (IEEE 802.1q support) or you need atleast two NICs (one for WAN and one for LAN).