How to Isolate 300 Windows 10 Desktops in Proxmox: Seeking Best Practices

[dbmello75]

This question may have already been answered, but I'm unsure how to find it.

I need to set up a Proxmox environment that hosts around 300 Windows 10 desktops. These desktops should only have internet access, without being able to communicate with each other.

What is the best way to achieve this? What is the recommended approach for this type of solution?

 

[pvps1]

as bridges are switches a short search for "port isolation" pointed me to

https://manpages.debian.org/bullseye-backports/iproute2/bridge.8.en.html#isolated

so linux bridges know port isolation.
that should do the trick. exact implementation might be tricky but setting tap devices of the windows machines with port isolation on should do as first step

 

[Pifouney]

If i was in your situation, i gonna check around network range for isolation.
If you only need a GW - WinVM dialog, use /30 or /32 subnets, and play with firewall rules.

 

[dbmello75]

This is part of my interface files.

auto vmbr1
iface vmbr1 inet manual
        bridge-ports enp6s0f1
        bridge-stp off
        bridge-fd 0
        isolated on

I also tried using the firewall.