← Back to all blogs
Cloud Architecture6 min readAugust 5, 2026

Scaling HTTP Application Proxies on Proxmox VE Infrastructure

NB

Infrastructure Team

Official Netbay Contributor

Building scalable HTTP proxies requires isolation, rapid provisioning, and custom network configurations. On Netbay Cloud Hosts, we leverage Proxmox VE hardware virtualization paired with automated `fw_cfg` injection.

How Credentials Injection Works When an Application VM is ordered or rebuilt: 1. **Credentials Generation**: Fresh random credentials (`proxyUser`, `proxyPass`, `proxyPort`) are assigned. 2. **INI Configuration Encoding**: The network parameters, hostname, and proxy user credentials are formatted into an INI payload and base64 encoded. 3. **Hardware Injection**: During QEMU initialization, Proxmox injects the payload via `-fw_cfg name=opt/in.netbay/config,string=<BASE64>`. 4. **Instant Boot**: The guest OS parses the hardware config on boot, starting Squid proxy services in under 15 seconds.