at work, we are using evpn using arista-router as evpn exit-node (on 3 DC datacenter),
then each vm use proxmox anycast gateway. (so I can migrate the vm from any DC, and the traffic is always using the local router/anycast gw).
Now, if you want to use opense/pfsense, they are no support of...