You’ll have to accomplish that with a firewall on the OS. A network firewall could restrict traffic based on ports, but your apps aren’t that predictable.
Debian foundation, built-in ZFS, decent web GUI, clusterable -- all in all, a very good VMWare replacement.
Love seeing Proxmox so high on the host OS list.