I did this for a while, but decided to just run opnsense on bare metal, I didn’t want my whole network going down if I had to restart Proxmox or something. It’s way overkill but it’s running opnsense, adguard and will soon be running ngnix hopefully.

The only reason I want it on the router is if either my vm or my server go down for whatever reason I have no access. My router is way overkill hardware wise (it’s running opnsense and Adblocking and I’ve never seen above 2%) cpu usage.

My zfs cache for 6x 4tb drives in raidz2 is about 10gb of ram.