must i deploy firewall VM (or lxc) on each Node of the cluster in order to isolate lxc each other ? (like in docker)
or pve provide tools for doing that ?
in fact i would like to compltely isolate proxmox ve admin network (the only one that can have a gateway ;-)) from user network (pct + vm) , user network go through hardware firewall with one nic , proxmox admin network another one..