Prior to migrating to proxmox from opennebula, we had assigned a vlan tag for private networking for every customer. Currently, we don't have an excessive amount of customers and private vlans are still an easy way for us to manage inter VM communication.