The router port to the proxmox machine is set up for tagged packets that isolate incoming/outgoing traffic.
After that my VMs and Containers are easily set up to "live" on one or more networks.
For me the firewall rules on the router determine what traffic can be relayed between vlans through the router.
I'm pretty sure you could set up opnsense running in a container or vm to do the same thing, selectively passing traffic from one vlan to another.
What's the virtualization technology on proxmox?
What's the advantage to using something like this as opposed to terraform or salt stack or Ansible?
- provision VMs with Terraform - configure/maintain your VM with something like Ansible
The provider also allows your to schedule LXC if you'd like to target that instead.
right off the bat, this callout makes it difficult for me to consider these approaches for any serious project.
I find the simpler I keep it, the more likely I'll post.