Proxmox SDN BGP Integration Expert

I already have a Proxmox cluster running and the SDN feature enabled; what I do not have is the routing magic that ties several internal subnets together and hands them off cleanly to my external software firewall.

Here is the core of what I need:

• My routing protocol of choice is BGP, and I want every SDN-defined subnet announced through it.
• Inside Proxmox I rely on Virtual Switches, VRFs and Security Groups. Each element must be configured so that traffic stays segregated yet routable as required.
• The end result has to pass traffic end-to-end: VM ↔ virtual switch ↔ VRF ↔ BGP ↔ software firewall, with no asymmetric routes or hair-pinning.

Acceptance criteria
1. All internal subnets are visible on the firewall via BGP and can reach the internet and each other according to the Security Group rules.
2. A concise set of CLI commands and/or configuration snippets is provided so I can reproduce the setup on additional nodes.
3. A quick test plan (ping / traceroute / iptables counters) demonstrates that failover and route updates behave as expected.

This is a surgical assignment for someone who already lives and breathes Proxmox SDN and dynamic routing; I will be able to spot shortcuts right away. If you are confident you can hand over a rock-solid, documented configuration that meets the above checkpoints, let’s get it done.