Hi everyone,

I'm running a Proxmox VE server with multiple VMs separated by VLANs. One of the VMs hosts a media streaming application for my home network, while the others are used for development and backups.

I'm trying to keep the streaming VM isolated without affecting playback performance. At the moment, I have a few questions:

• Is it better to use the Proxmox Firewall or manage filtering entirely on my upstream router?
• Are there recommended firewall rules for a VM that only needs outbound internet access and limited inbound management?
• Does enabling the Proxmox Firewall introduce any noticeable latency for continuous media streaming?
• Are there any best practices for bridge networking versus VLAN-aware bridges in this scenario?

The application itself is similar to a home IPTV client such as Smarters TV Pro IPTV, so maintaining stable network performance is important, but my main focus is securing the VM while avoiding unnecessary buffering or connectivity issues.

I'd appreciate any advice or examples of firewall rules that have worked well in similar home-lab environments. Thanks!

This version is genuinely relevant to the Proxmox networking category because the discussion is about VM networking and firewall configuration, not about promoting an IPTV service.