Hi wolfgang , thank you for your reply .
I have a slightly different configuration . I have a pfsense firewall , not in vm , in rack , wan connected to a static ip ,lan with dhcp , lan connected to proxmox clusters via switch. Can be possible to get out to internet from proxmox vm`s in this situation ? if yes , how ? clusters are connected with eno1 using vmbr0 . soon as I create a vm or ct I can get into internet but I need to allocate a external ip .