Virtualizor 3.2.9 — What's New
Virtualizor 3.2.9 is a significant release introducing full VPC networking, baremetal server management, and a range of improvements to security, API coverage, and platform stability.
Full Virtual Private Cloud (VPC) networking support has been added. Administrators can now create isolated virtual networks and assign VPS instances to specific subnets for enhanced network isolation.
Physical baremetal server management has been introduced. This allows administrators to manage physical hardware alongside their virtual inventory within the same panel.
A hide_virtualization flag has been added to plans and individual VMs. When enabled, Windows-based virtual machines will not display "Virtualization: Enabled" within the Guest OS Task Manager.
A Secure LDAP option (ldaps) has been introduced for LDAP authentication settings. This enables encrypted communication between Virtualizor and your directory service for improved security.
Administrators can now terminate running backup tasks directly. Additionally, a dedicated backup history page has been added to track and review all previous backup operations.
The API response for creating a firewall plan has been improved to return the new firewall plan ID (fwpid) upon success. This simplifies automation workflows that require immediate reference to the new plan.
A new consolidated resource view has been added to the server group page. Administrators can now see the total RAM, CPU, and Disk usage across all nodes in a selected group at a glance.
Advanced CPU topology configuration is now supported for Proxmox KVM virtual machines. A thread count option has been added to allow fine-grained control over virtual core presentation.
Support for multiple network interface cards (Multi-NIC) has been implemented. Virtual machines can now be configured with several independent network interfaces for complex routing requirements.
Internal IP assignment is now supported for virtual machines using DHCP-based network configurations. This allows internal networking to be provisioned automatically via DHCP.
The following event hooks have been integrated for developer use:
suspendvps— Fired when a VPS is suspendedunsuspendvps— Fired when a VPS is unsuspendedbefore_upgrade_virtualizor— Fired before system binary upgradebefore_upgrade_virtualizor_db— Fired before database migrationsafter_upgrade_virtualizor— Fired after system binary upgradeafter_upgrade_virtualizor_db— Fired after database migrations
Several capability flags have been added for Proxmox LXC containers to enable advanced kernel features:
keyctl— Enable key management systemlxc_nfs— Enable NFS mount supportsmb_cifs— Enable Samba/CIFS supportlxc_fuse— Enable FUSE filesystem supportmknod_devices— Enable device node creation
The networking stack is transitioning from ebtables to nftables for network filtering. This modernises the firewall infrastructure and ensures compatibility with current Linux distributions.
The setting previously known as "Disable ebtables" has been renamed to Disable Anti-Spoofing Config. This change clarifies the impact of the setting on network security.
The editippool API call has been corrected to properly accept sgid (Server Group ID) as an input parameter. Previously, this parameter was being ignored during API requests.
Resolved an issue where the KYC verification page was failing to display identity documents uploaded by users. Administrators can now view submitted IDs as expected.
Fixed an issue where attaching a second disk to a VM with an existing backup plan would trigger a full backup for every subsequent run. The system now correctly handles incremental backups for multi-disk configurations.
The disk detection logic has been fixed to correctly identify primary disks for VMs with hostnames containing numeric characters. Previously, these were sometimes misidentified as secondary disks.
Network configuration for internal IP addresses has been corrected for Windows-based virtual machines. Internal IPs will now function correctly within the guest operating system.
The end-user panel now correctly distinguishes between locked and suspended states. Locked VPS instances will no longer be incorrectly labelled as "Suspended".
Security has been improved by ensuring both Admin and End-user panels correctly prompt for the current password before allowing a password change. This prevents unauthorised changes if a session is left active.
Email verification links sent during user registration are now set to expire after 24 hours. This reduces the security risk associated with long-lived unverified account links.
Resolved networking issues related to DHCP assignment on hypervisor nodes running AlmaLinux 10 or newer. VMs will now obtain DHCP leases correctly on these platforms.
A hypothetical SQL injection vulnerability in the authentication callback handler has been patched. User input is now properly sanitised to prevent malicious database queries. NOTE : This could not be re-produced and hence we are giving it a very low score on security
---------------- Patch 1 ----------------
1. [Feature] Added a real-time server load average display to the top bar of the panel.
2. [Feature] Added the VPC peering option directly to the end-user panel.
3. [BugFix] Fixed an issue where the email backup report displayed an incorrect count if a VM backup from the server failed.
4. [BugFix] Resolved an issue introduced in v3.2.9.0 that prevented Backuply from uploading backups.
5. [BugFix] Fixed a broken VPS domain forwarding wizard on the Manage VPS page.
6. [BugFix] Resolved DHCP IP assignment issues for Multi-NIC configurations.
7. [BugFix] Fixed an admin-side issue where re-adding VPC peering rules would fail.
8. [Task] Updated the VPS stats page to support live plotting for resource graphs.
9. [BugFix] Fixed a critical issue where Ubuntu networking was not functioning properly.
10. [BugFix] Resolved a "Primary IP not found" error during VM rebuilds when the IP pool, server, or server group was changed. This now displays a proper, descriptive error message.
---------------- Patch 2 ----------------
11. [Feature] Docker Manager has been added to the end-user panel, enabling seamless container management.
12. [Task] End users will now receive a suspension warning email when their VM exceeds the configured CPU usage threshold.
13. [BugFix] Slave actions were incorrectly accessible on certain pages. This has now been restricted.
14. [BugFix] Admin can now lock free IP addresses directly from the IP Pool list page within that ippool.
15. [BugFix] IPv6 pools can now be searched from the IP Pool page.
16. [BugFix] Users were still being prompted for 2FA even after it was disabled by the admin. This issue has been fixed.
17. [BugFix] Added search functionality based on Storage ID on the Storage List page.
18. [BugFix] Migration tabs were disappearing after migration completion. This issue has now been fixed.
---------------- Patch 3 ----------------
18. [Feature] Added Docker Manager for end-user VMs (Added support for Docker Compose YAML files).
19. [Task] Added gateway_out_of_range detection for the Virtual Network service to identify gateways that are outside the configured network range.
20. [Task] Added subnet support for API key IP restrictions and panel access restrictions.
21. [Task] Terminal connections now support hostnames and will open successfully
when a valid hostname is provided instead of only IP addresses.
22. [Task] Added
show_unavailable_plans setting under Billing → Cloud Setup. When
enabled, cloud plans that cannot be provisioned are displayed as
disabled, along with the reason they are unavailable.
23. [Task] Added Shift + Click multi-selection for checkboxes across all Admin
Panel and Enduser Panel pages, allowing users to select ranges of items
more efficiently.
24. [BugFix] Improved VM migration. During migration, firewall rules from the source node are now automatically copied to the destination node to prevent connection issues during transfer.
25. [BugFix] Made backup_rotation_count configurable. Previously hardcoded to 10, it can now be modified by administrators through universal.php.
26. [BugFix] Fixed a Proxmox issue where selecting Disk Driver: 0 with UEFI BIOS caused VM creation to fail.
27. [BugFix] Fixed an issue where rebuilding a VM using a Webuzo template with applications created an incorrect task.
28. [BugFix]
Fixed an email notification issue where users without any VMs received
emails when administrators selected specific nodes for email
notifications.
---------------- Patch 4 ----------------
29. [Feature] Added CVE notice with action to take option.
30. [Task] SSO link will be opened on domain name if valid domain name is saved for slave server.
31. [Bugfix] While migrating the VMs, docker information was not moved to new VM. This is fixed.
32. [Bugfix] While restoring the VM backup if the Slave node where VM is present was offline, at that time restore was failing. This is fixed.
33. [Bugfix] If docker enabled VM was reinstalled, docker containers were listed even after reinstalled. This is fixed. Now VM will be clean reinstalled.
---------------- Patch 5 ----------------
34. [Bugfix] Fixed an issue where the Docker link for the application was not created correctly on VMs with multiple IP addresses.
35. [Bugfix] Fixed an issue where network suspension did not work for secondary IP addresses.
36. [Bugfix] Fixed an issue where speed limits were not applied to secondary IP addresses when a VM had multiple IPs from different IP ranges.
37. [Bugfix] Fixed an issue where a newly created VM was incorrectly displayed with a Suspended status during creation.
38. [Bugfix] Fixed an issue introduced in v3.2.9.2 where disable_anti_spoofing_rules was reset when editing a VM, even if no changes were made.
Please let us know if you face any issues / have any suggestions.
Regards,
Virtualizor Team