Boot & run

Networking

Give a VM a network card in one flag: outbound internet, checked HTTPS, every connection under your rules.

What it is

One flag gives a VM a network card.

Add --nic and the FlashVM gets a NAT network card with outbound internet. HTTPS works out of the box, with certificates checked against the guest's trusted authorities. A VM can carry several cards.

Why it matters

Agents need to fetch packages, call APIs and read the web. FlashVMM gives them the network without exposing the host.

  • One flag. NAT, outbound internet, an IP address at boot.
  • Full speed. Network rules run at full speed: rules on or off, 1,751 vs 1,679 Mbit/s.
  • Shaped per card. Upload, download and packet rates set per card.

Runs on

  • Linux x86_64
  • Linux arm64
  • macOS
  • Windows x64
  • Windows arm64

How it works

The flashnet helper builds the card; the VM boots already connected.

CLI

sudo flashnet --mode nat --vm-id net1 -- \
flash run --bundle /opt/flashvm/bundles/current --id net1 --vcpus 1 --mem-mib 512 --disk-mib 20 \
  --nic '{NIC},mbps=100,ingress-mbps=100' --entry 'sleep 3600' --detach
flash exec net1 -- wget -qO- https://example.com

MCP

flash_resource(vm_id: "net1", resource: "nics")

API

GET /v1/flashvm/nics
PATCH /v1/flashvm/nics/0 {"ingress_mbps": 100}

The result

The VM fetches a web page over HTTPS with a verified certificate.

Real connectivity from the first boot, with every rule enforced outside the guest.

How it works

Related

See it live: flash demo run 3