Mastering Proxmox - Third Edition

Zones

The Proxmox firewall protection area is divided into the following three logical zones:

• Datacenter: Rules in this zone define traffic to and from all hosts and guests
• Host: Rules in this zone define traffic to and from a cluster and Proxmox nodes
• VM: Rules in this zone define traffic to and from each VM

All rules in the Datacenter and host zones are cascaded. This means that a rule created in the Datacenter zone will be applied to all hosts or nodes and all the VMs, while rules created in a host zone will be applied to all VMs in that host or Proxmox node. Care must be taken when creating rules in the host zone for particular VMs, because when the VM is migrated to a different node, these rules in the previous node will not apply ...