Our network consists mostly of 10 Gbit/s switched backbones to the internet.
On the network we have a cluster of Proxmox VM hosts with around a 100 VMs.
We have the need to do traffic accounting, per VM, in the most efficient manner.
We don't need to count protocol traffic flowing via internet...