Thanks @Dunuin
Now I need to decide which route to take. I might try both and I think a vm bridge with the bond on proxmox side might be the path of least resistance. Like my container adventure a while ago, I just want to ensure that all traffic going through a particular interface only...