Virtual Datacenter + BGP Session Upstream, Downstream is Perring

I have a Dedicated server in a colocation where I want to transform it into a virtual Datacenter infrastructure.

1 - Port 1 (Upstream Cogent)
2 - Port 2 (Upstream HE)
3 - Port 3 (Port IX)

A - Use VM to create redundant virtual BGP routers with failover protection
B - Using bird2 is good practice based on https://www.manrs.org/
C - Provide redundant BGP Downstream sessions for VMs
D - The virtual Datacenter will be built based on Proxmox 8
E - Implement security for Proxmox (access only via VPN)