Setting up a virtual system with a separate proxy and direct access to RDP

Setting up a virtual Proxmox system or an equivalent with a separate proxy and direct RDP access for multiple guest OS (minimal involvement of guest OS)


The task is to set up a virtual Proxmox system or an equivalent to provide internet access for multiple guest OS through a separate proxy server for each of them, while each guest OS must have direct access via RDP, bypassing the proxy. Port forwarding must be configured for each guest OS, as the host has only one external IP. All proxy and routing settings must be performed exclusively on the host OS, with guest OS minimally involved in the configuration.


    Host configuration for Proxmox or an equivalent
        The host system is connected to the internet with a working network connection (using an external IP).
        Several guest OS, each of which will have its own configuration for internet access through its own proxy and access via RDP.
        Proxy configuration and all routes must be set up only on the host OS, guest OS should not require configuration for the proxy.

    Installation and configuration of the proxy for each guest OS (on the host OS):
        Each proxy must be configured to handle internet traffic for its corresponding guest OS.
        Proxy servers must handle traffic from each guest OS separately, and RDP traffic must bypass the proxy and use a direct connection.
        All proxy settings must be performed on the host. Guest OS should not require proxy configuration.

    Network configuration for multiple guest OS:
        Ensure that the network interfaces of all guest OS (virtual network adapters) are configured on the Proxmox host or an equivalent.
        Each guest OS will have its internal IP address (e.g., 192.168.100.x, 192.168.100.y).
        Guest OS must be able to access their proxy servers via the host's internal IP.

    Setting up port forwarding for RDP for each guest OS:
        For each guest OS, set up port forwarding from the host's external IP to the internal IP of the guest OS on the RDP port (TCP 3389).
        Each guest OS will have a unique external port for RDP (e.g., X.X.X.X:13389, X.X.X.X:13390, etc.).

    Configuration of a separate proxy for each guest OS (on the host OS):
        Set up a separate proxy server for each guest OS on the host.
        The proxy must handle all TCP/UDP traffic except for RDP.
        All proxy settings must be performed on the host. Guest OS should not require proxy configuration.

    Firewall and NAT configuration for multiple guest OS (on the host OS):
        Modify the iptables configuration on the host for proper NAT setup for each guest OS, directing non-RDP traffic through its proxy, while RDP traffic goes directly to the corresponding guest OS.

    Internet access for guest OS:
        After setting up the proxy, each guest OS should:
            Have internet access through its separate proxy server.
            Be accessible via RDP on a unique external port.

    Documentation:
        Document all configuration steps for adding new guest OS, including setting up their proxy and RDP.
        Describe how to configure port forwarding for new guest OS and modify proxy settings for each of them on the host OS.

Expected results:
    A working Proxmox configuration routing traffic for each guest OS through its separate proxy, with the exception of the RDP port for direct connection.
    Port forwarding setup for each guest OS ensuring direct RDP access.
    Firewall and NAT rules ensuring secure traffic routing and internet access for each guest OS through its proxy, while RDP connection remains direct.
    Confirmation that RDP works correctly for each guest OS, and internet traffic passes through the corresponding proxy.
    Documentation of the configuration for new guest OS, including port forwarding and modifying proxy settings.