EVPS Software & Modules
Sell Proxmox properly · provisioning, portal, backups and native control.
ProxmoxCloud Suite turns Proxmox VE, Proxmox Backup Server and Proxmox Datacenter Manager into products you can sell from WHMCS. A fresh install starts with native management of all three and a setup wizard that tests each server before saving it. Nine optional packs add provisioning admin tools, IP and DNS, Cloudflare, tenant networks, panel access, backup tiers and billing and more, only when you switch them on.
Reselling Proxmox is easy. Operating it safely is not.
Anyone can wire an API call that creates a VM. The hard parts are the ones that bite later: who can reach which guest, token permissions, backups you can actually restore from, and a client panel that does not hand a customer the keys to the cluster.
Every request checked against the real owner
The client area and the customer API check each request on the server against the WHMCS owner of the service, on reads as well as writes. Customers never hold a Proxmox token. Optional native-panel logins are scoped by Proxmox ACL to that one VM.
Turn on only what you sell
Native PVE, PBS and PDM management is always there. Provisioning admin tools, IP and DNS, Cloudflare, tenant networks, panel access, backup tiers and billing and the other packs stay off on a fresh install until you switch them on. A pack that is off is hidden and refused on the server, while orders, usage billing, suspension, termination and retention keep working.
Capabilities are probed, not guessed
The setup wizard reads each server's certificate and tests its token before saving it, and Diagnostics audits the token's privileges and flags any that are missing or that widen its reach. Where a capability cannot be confirmed the suite says so, rather than showing a control that will error.
Hardened for production
Encrypted credentials, a certificate pin checked in the TLS handshake before the API token is sent, no panel sign-on secrets in any log, and a task queue: a create, rebuild, terminate, backup or restore still running when its inline wait ends (25 seconds by default) is handed to cron to finish, instead of holding the WHMCS request until Proxmox is done.
What the suite does
Everything below runs against the real APIs of Proxmox VE, Backup Server and Datacenter Manager. The native screens are always on; the rest are packs you switch on in Feature Control.
Provisioning
Create, suspend, unsuspend, terminate and rebuild KVM guests and LXC containers from WHMCS products. A new VM stays Pending until it runs, has an IP and its guest agent answers.
Feature Control
Nine optional packs on top of native management. Off means hidden and refused on the server, and it never stops orders, usage billing, suspension, termination or retention.
Setup wizard
Adds PVE, PBS and PDM servers step by step: reads the certificate, tests the token and reports what it can and cannot do before saving. Each pack has its own short guide.
Native admin screens
Nodes, guests, storage, HA and replication, SDN, firewall and access for PVE, PBS and PDM, with every API call checked against the vendor's own schema.
PBS contents and one task list
Browse PBS datastores by namespace, group and snapshot, and follow one task list across every PVE and PBS server you run.
Client dashboard
Live CPU, memory, disk and network graphs with power state and a task history the client can actually read.
Console access
noVNC for KVM and xterm.js for LXC, in the browser and brokered so no cluster credential reaches it. On products you enable it for, KVM guests with a SPICE display can also download a short-lived SPICE .vv file for a desktop viewer.
Storage & disks
Disk add, resize and move across configured storage, with the guest limits your product defines enforced server-side.
IP addresses & reverse DNS
IPv4 and IPv6 pools, floating IPs, Detect and Sync matched by NIC MAC, reachability scans per pool, and PTR records through PowerDNS.
Firewall
Per-guest firewall on and off, inbound and outbound rules and default policy for the client, enforced when your datacenter firewall is on. Security groups and aliases stay admin-side.
Snapshots
Create, roll back and delete snapshots with quota limits so a client cannot fill your storage.
Backups
Scheduled and on-demand backups on Proxmox Backup Server, with retention, restore and visible state per guest, plus sellable backup tiers billed per GB of stored snapshot size.
Datacenter Manager
PDM as a native endpoint beside PVE and PBS: inventory across clusters, and power and migrate for existing guests.
Node placement
Weighted least-loaded node selection, allowed nodes, anti-affinity, cordon and drain, and pinning where a guest must stay put.
Cloudflare reselling
Zone plans from Free to Business plus Page Rules, APO, Spectrum and Rate Limiting, with customer DNS, SSL and cache controls and a payment gate before any spend.
Native panel for customers
Optional single sign-on into the Proxmox panel with a per-service login scoped to the customer's one VM, through a panel proxy or tunnel.
Owner-move protection
When a service moves to another client, its Proxmox login is replaced and the old one deleted, so an open session cannot renew itself, and the previous owner's Cloud-Init config stops following it. The move does not change anything inside the guest: SSH keys and passwords already set there keep working until the guest is reinstalled or they are removed.
Admin roles
Full, Read-only, Support, Billing and No access, enforced on the server. Guest file contents, backup file contents and stored secrets are for full admins only.
REST API, Terraform & webhooks
A customer REST API with per-capability Bearer scopes, an IP allow-list and OpenAPI 3.0.3, a one-click bpg/proxmox Terraform file for existing guests (applying it needs a Proxmox API token you choose to provide), and signed outbound webhooks with retries.
Task queue
Long operations run on cron and report progress, instead of returning success while work is still pending.
Audit trail
Every provisioning and client action recorded with actor, target and outcome for support and dispute handling.
How the ProxmoxCloud Suite compares, feature for feature and dollar for dollar
ModulesGarden's Proxmox VE VPS & Cloud (v4.4.2, 28 October 2026) is the nearest full-featured competitor. Where it needs a paid add-on to match us, the add-on is named; where it is ahead, the table says so. Checked on 13 November 2026 against each vendor's own product pages, changelogs and published documentation. A cross marked not listed means we found no mention of the feature there, not that ModulesGarden has said it lacks it.
| Capability | ProxmoxCloud Suiteone package | ModulesGardencore module + add-ons |
|---|---|---|
| KVM + LXC provisioningcreate, suspend, terminate, rebuild | ✓ | ✓ |
| Pooled cloud productmany VMs from one resource allowance | Partialextra VMs under a VM count | ✓Cloud product type |
| Rebuild with safety checkstemplate checked, safety backup first | ✓ | ✓ |
| Browser consolenoVNC, xterm.js; SPICE as a .vv download | ✓ | ✓ |
| Client portal in your WHMCS themegraphs, task history, multi-language | ✓13 emails; 10 also in Spanish | ✓ |
| SSH keys and Cloud-Init | ✓ | ✓ |
| ISO mount and boot order for customers | ✓KVM; ISO mount set per product | ✓ |
| Scheduled power tasks | ✗ | ✓ |
| Disk add and resize within plan limits | ✓ | ✓ |
| Snapshots with quota | ✓ | ✓ |
| Automatic scheduled snapshots | Partialdaily or weekly | ✓hours or chosen days |
| Backups, retention and client restore | ✓needs PBS | ✓ |
| File-level restore from PBS | Partialcontainers: browse and download files | ✓files and folders |
| Backup tiers sold as plan options | ✓ | ✓ |
| Per-GB billing on backup size | ✓PBS: summed snapshot size, peak of month | Add-onAdvanced Billing |
| Usage meteringbandwidth and disk | ✓ | Add-onAdvanced Billing |
| Hourly billing; CPU, RAM and IP metering | ✗ | Add-onAdvanced Billing |
| IP pools, subnets and IPv6reachability scans, detect by NIC MAC | ✓ | PartialIPv4, IPv6 and IPv6 subnets in base; multi-level subnets need IP Manager |
| Reverse DNS (PTR) | ✓PowerDNS | Add-onDNS Manager |
| Forward DNS zones for guests | ✗ | Add-onDNS Manager |
| Cloudflare zone-plan reselling | PartialFree to Business, APO, Spectrum | ✗not listed; DNS Manager add-on manages Cloudflare DNS |
| Client private networksProxmox SDN | Partialbuilt; first live build is a test | ✓VLAN-based |
| Client firewall rules | ✓with the datacenter firewall on | ✓ |
| Client-selectable security groups | ✗ | ✓ |
| Automatic node placementweighted, anti-affinity, drain | ✓ | ✓ |
| Migration between nodes | Partialadmin-side; not yet run on a multi-node cluster | ✓ |
| High availability set per product | ✗admin screen, by hand | ✓per template |
| TPM as a sellable option | ✗ | ✓ |
| Proxmox Datacenter Manager | ✓ | ✗custom development only |
| Per-VM graphsCPU, memory, network | ✓ | ✓ |
| In-guest disk usage history | ✓90 days, guest agent | PartialKVM: fixed root-disk size |
| Client resource alerts | ✓ | ✓ |
| External uptime checksping, port, HTTP | ✗ | Add-onServer Monitoring |
| Event-driven automation rules | Partialsigned webhooks | ✓Automations |
| End-customer REST API + OpenAPIscoped Bearer tokens | ✓ | ✗not listed; resellers get an API via Products Reseller |
| Reseller layer and reseller API | ✗ | Add-onProducts Reseller |
| Terraform exportimport file for existing guests | ✓ | ✗not listed |
| Import from another vendor's module | ✓incl. ModulesGarden | Partialexisting Proxmox VMs only |
| Admin console with diagnosticslogs, task queue, diagnostics | ✓30 screens incl. native PVE, PBS and PDM | ✓ |
| WHMCS 9.1 and PHP 8.4 | ✗WHMCS 8.13 and 9.0, PHP 8.2-8.3 | ✓ |
| Proxmox VE 8.x fully supported | Partial9.x; 8.3 and 8.4 best effort | ✓8.x and 9.x |
| Source-code edition | ✗ | ✓owned licence |
What the shared ground costs to assemble from ModulesGarden, module by module. Its On-Premises VPS & Cloud bundle (the core module plus nine add-ons, these three among them) is advertised at $149/mo, monthly billing only.
| ModulesGarden · the modules that cover the shared ground | Covers | Owned (source) | Leased (encoded) |
|---|---|---|---|
| Proxmox VE VPS & Cloud (core) | Provisioning, backups, SDN, console | $2,999.95 | $59.95/mo · $499.95/yr |
| Advanced Billing | Usage and backup billing | $1,999.95 | $35.95/mo · $299.95/yr |
| IP Manager | Multi-level subnet IPAM | $1,999.95 | $35.95/mo · $299.95/yr |
| DNS Manager | Reverse DNS (PTR) and DNS records | $2,499.95 | $47.95/mo · $399.95/yr |
| Total for the shared ground | $9,499.80 | $179.80/mo · $1,499.80/yr |
ProxmoxCloud Suite · one SKU, ionCube-encoded, three terms
More than 3× cheaper to lease: $39.95/mo against the $149/mo advertised for ModulesGarden's monthly bundle, or $399 a year against $1,499.80 a year for the four modules on annual licences. To own, $1,299 against $9,499.80, about a seventh of the price. A ModulesGarden owned licence is source code for up to 3 installs with one year of updates, further years optional; ours is one encoded install with 12 months of updates, renewable, or 25 installs on Agency for $3,499.
Where ours goes further
- Proxmox Datacenter Manager as a native endpoint beside PVE and PBS: inventory across clusters, and power and migrate for existing guests. ModulesGarden offers PDM only as custom development.
- End-customer REST API and Terraform export: per-capability Bearer scopes, an IP allow-list, OpenAPI 3.0.3, and a one-click
bpg/proxmoxfile with import commands for the customer's existing guests. Terraform talks to Proxmox directly, so applying the file needs a Proxmox API token and access to your PVE API, which you decide whether to provide. - Real in-guest disk usage, kept for 90 days from the guest agent, where ModulesGarden's changelog says KVM guests show a fixed root-disk size instead of usage (v3.10.1).
- Import from another vendor's module, including a ModulesGarden adapter that keeps IPs and SSH keys.
- Cloudflare zone-plan reselling: Free to Business plans plus Page Rules, APO, Spectrum and Rate Limiting, with customer DNS, SSL and cache controls and a payment gate before any spend.
- Usage and backup billing built in: bandwidth and disk metering, and per-GB billing on the summed size of each customer's PBS snapshots, on an exactly-once ledger, with no separate billing module to buy. Both ship switched off.
Not listed by ModulesGarden for its Proxmox module (checked 13 November 2026), and included in ours: a native Proxmox Datacenter Manager endpoint, an end-customer REST API, Terraform export and Cloudflare zone reselling.
Your staff and your customers
Captures from a live installation and from our test lab, with names and addresses changed · the admin side and the client panel.
How to get it running
- Install. Upload the package for your PHP version, run the included ionCube preflight, then activate the addon and set the server module on your Proxmox products. For the browser console, install the included console proxy service, which needs root on the WHMCS host.
- Connect. The setup wizard adds each PVE, PBS and PDM server: it pins the certificate, tests the API token and shows what that token can and cannot do before saving.
- Scope. Give the module's token the documented role on both the user and the token. Diagnostics shows what the token can do at the root path, flags the privileges that widen its reach, and prints the exact pveum command when the guest-agent read privilege is missing. If you tighten it later, never add a partial role below a path where the token already holds the full one · a deeper sub-path role replaces inherited access rather than adding to it.
- Choose. Switch on the packs you sell in Feature Control. Each one has a short guide with live progress; the rest stay out of your way and your customers' way.
- Configure. Define products, resource limits, snapshot and backup quotas, and which panel features clients may use.
- Operate. Diagnostics, the task lists and the audit trail show what is happening; failed tasks surface rather than disappearing.
Protected, supported, no phone-home
ionCube protected
Packages are built per PHP version: ionCube Loader 14.4.1 or newer on PHP 8.3, 13.3.1 or newer on PHP 8.2. A readable preflight explains a mismatch instead of a blank page.
Checked before it runs
Each package includes a readable ionCube preflight, and the setup wizard tests every server and token before saving it, so a problem shows up with its reason instead of a blank page.
Supported
Support and updates for as long as a subscription runs. Lifetime and Agency are perpetual licences with 12 months of updates and priority support, renewable after that.
Credential-safe, no phone-home
Cluster credentials are encrypted at rest and masked in call logs, panel sign-on exchanges are never logged, and the module does not report to us.
Compare the three licences
One codebase, three ways to buy it. Every tier ships the complete feature set; the differences are installation count, term and support.
| Subscription $39.95 /mo · $399/yr | Best value Lifetime $1,299 one-time | Agency $3,499 one-time | |
|---|---|---|---|
| Complete feature set | |||
| WHMCS installations | 1 | 1 | 25 |
| Proxmox VE provisioning | |||
| Backup Server integration | |||
| Datacenter Manager | |||
| Client self-service panel | |||
| All nine Feature Control packs | |||
| Per-customer access checks | |||
| Cloudflare zone reselling | |||
| Licence | While subscribed | Perpetual | Perpetual |
| Updates | While active | 12 months, renewable | 12 months, renewable |
| Support | While active | Priority, 12 months | Priority, 12 months |
| Billed | Monthly or yearly | Once | Once |
Requirements
WHMCS
8.13 or 9.0
PHP
8.2 · 8.3
ionCube Loader
14.4.1+ on PHP 8.3 · 13.3.1+ on PHP 8.2
Platform
Proxmox VE 9.x (8.3 and 8.4 best effort)
Access
API token per server
Browser console
Root on the WHMCS host for the included console proxy service, Apache mod_proxy and mod_proxy_wstunnel
Optional
PBS 4.x (needed for client backups), PDM 1.0+ (1.1 recommended), Cloudflare, PowerDNS
Frequently asked questions
Do I have to turn everything on?
Does it support LXC containers as well as KVM?
How is one client stopped from reaching another's servers?
What happens if a cluster does not support something?
Can I run several clusters?
Are backups included or do I need Proxmox Backup Server?
Which ionCube Loader do I need?
What are the current limits?
What does the Agency licence cover?
Recent updates
Choose your licence
Same complete module in every tier · the only difference is how you pay and how long updates & support last.