i route all incoming traffic through a tp-link vlan switch to openwrt router in an lxc container to vlan dmz in which all public service traffic is

all the public services and openwrt are running in proxmox lxc containers. all public traffic is trapped in the vlan dmz