PegaProx 1.0 🎉
PegaProx is out of Beta. Started in September 2025, the whole 0.9.x line is now hardened and rounded out into the first stable release.
What's in the box
Manage many Proxmox VE (and XCP-ng) clusters from one modern web UI:
- Fleet management — VM/CT lifecycle, live console (VNC / SSH / SPICE), snapshots & snapshot policies, cloud-init — across many clusters at once, in a dense Corporate layout or the card-grid Cloud (Preview) layout (full parity).
- Migration — near-zero-downtime ESXi → Proxmox (V2P) and XCP-ng → Proxmox, with an opt-in cutover-confirmation gate.
- HA & rolling updates — HA monitoring, node evacuation with a RAM pre-flight, and rolling cluster updates.
- Storage & Ceph — Ceph management, StarWind
starlvm, and a cross-node datastore browser. - Cross-cluster — load balancing, a replication overview, and cross-cluster EVPN vNets (SDN).
- Backup & DR — PBS reporting, backup-SLA tracking, and re-runnable Site-Recovery / DR drills.
- Access & security — LDAP, OIDC (Entra ID / Keycloak / Google), enforced 2FA + WebAuthn/FIDO2, fine-grained RBAC with per-VM ACLs and tenant isolation, an encrypted-at-rest database (SQLCipher), and a quota-bound Client Portal.
- Observability & compliance — temperature & long-term metric history, a Prometheus exporter, SIEM & config-drift, and compliance mapping (CIS, ANSSI / DR / RGS, CMMC / NIST).
New in 1.0 (since 0.9.15)
🔒 Security
A full post-release penetration test closed:
- a BMC-credential exfiltration on the test-BMC endpoint,
- an ESXi/XCP password ever landing on a process argv (now passed over stdin / SSHPASS),
- a BMC/Redfish SSRF oracle, and
- an SSH-amplification path in the Ceph mirror views.
The TLS bootstrap now fails closed (#633): if TLS is the intended posture and a usable certificate can't be loaded or generated, PegaProx refuses to start with an actionable error instead of silently serving plaintext on the TLS port. Thanks @SpyrosPsarras for the report.
✨ Features
- Cross-cluster EVPN vNets (#612) — vNets spanning multiple clusters in the same AS: create / edit / membership / drift-detection, with optional reconcile and drift → alert fan-out. Thanks @cybrwerk.
- V2P / ESXi cutover confirmation (#562) — migrations gain an opt-in "wait for confirmation before cutover" gate. Thanks @ajoergensen.
- Sortable Top Resources (#621) — the Top Resources table now sorts by any column. Thanks @ccesario.
- Per-schedule reboot timeout (#630) — scheduled rolling updates carry their own reboot/online timeout instead of a fixed 10 minutes.
🐛 Fixes
- Nested resource pools (#634) — hierarchical pools now show their members and VM counts. Thanks @prasannak81.
- Multi-disk ESXi → PVE to classic LVM (#636) — no longer aborts when a target volume already exists. Thanks @shepart.
- XCP-ng → PVE resume (#546) — transfers resume by HTTP range instead of failing on a broken pipe.
✅ Quality
- The SSL-bootstrap, authorization and integration test suites run on every PR.
Thank you to everyone who filed, fixed and sponsored along the way. 💚
💛 Sponsors
PegaProx is AGPL-3.0 and built in the open. Huge thanks to the sponsors who keep it moving:
💎 Platinum
🥇 Gold
- SocialFurr
🥈 Silver
- uvensys GmbH
- Datimo
- TechniData AG Limited
🥉 Bronze
- IDK Manager
- LINET Services GmbH
Want to help keep PegaProx going? → https://opencollective.com/pegaprox 💚
🛠️ Commercial Support
Need SLA-backed help running PegaProx in production? Commercial support is now available — details at → https://pegaprox.com/sponsors.html
Full changelog: v0.9.15...v1.0
