Mastering Proxmox - Third Edition

The pve-firewall and pvefw-logger services

There are two services that enable the Proxmox firewall:

• pve-firewall: This is the main service to run a firewall and it updates iptables rules
• pvefw-logger: This is responsible for logging all firewall traffic when logging is enabled

The pve-firewall service is started automatically when a node is rebooted. We can also manually start, stop, and restart the service using the following commands:

    # pve-firewall start
    # pve-firewall stop
    # pve-firewall restart

To check the status of a firewall service, we can use the following command:

    # pve-firewall status  

When there are no issues in the firewall's operation, the output of the status command will appear as follows:

    Status: enabled/running