---
title: "Patch the IPv6 ingress firewall policy for a VM"
method: PATCH
path: "/v1/vms/{id}/firewall"
tags: ["VMs"]
---

# Patch the IPv6 ingress firewall policy for a VM

`PATCH /v1/vms/{id}/firewall`

Partially updates the VM's public IPv6 ingress policy. This does not affect the internal IPv4 path used by platform control and exec.

## Path parameters

- `id` string, uuid, required

## Request body

- PatchVMFirewallRequest — Partial update payload for a VM's public IPv6 ingress firewall policy.
  - `mode` 'open' | 'restricted'
  - `ingress` FirewallRule[]
    - `protocol` 'tcp' | 'udp', required
    - `portStart` integer, required
    - `portEnd` integer
    - `sourceCidrs` string[] — IPv6 CIDRs allowed by this rule. If omitted, the backend treats the rule as open to `::/0`.
    - `description` string

## Response `200`

Updated VM

- VMInstance
  - `id` string, uuid, required
  - `name` string, required
  - `orgId` string, required
  - `machineName` string, required
  - `sourceName` string
  - `firewall` FirewallPolicy — Public IPv6 ingress firewall policy for a VM or snapshot.
    - `mode` 'open' | 'restricted', required
    - `ingress` FirewallRule[] — Allow rules evaluated only when `mode` is `restricted`. If empty, all public IPv6 ports are closed except essential ICMPv6 control traffic.
      - `protocol` 'tcp' | 'udp', required
      - `portStart` integer, required
      - `portEnd` integer
      - `sourceCidrs` string[] — IPv6 CIDRs allowed by this rule. If omitted, the backend treats the rule as open to `::/0`.
      - `description` string
  - `cpu` integer, required
  - `memoryMiB` integer, required
  - `diskGiB` integer, required
  - `publicIpv6` string
  - `status` 'provisioning' | 'running' | 'stopped' | 'deleting' | 'error', required
  - `createdAt` string, date-time, required
  - `deletedAt` string, date-time, nullable

## Other responses

- `400` — Error response
- `401` — Error response
- `404` — Error response
- `502` — Error response

---

[API](https://skmtc.dev/fastvm-org/apis/fastvm-api.md) · [All operations](https://skmtc.dev/fastvm-org/apis/fastvm-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/fastvm-org/fastvm-api/revisions/cbe0fe15ce15/schema)