Virtualized OPNsense and bridges

[SpectreMeltdown]

Hi, folks.

I've installed OPNsense under Proxmox and things have been going quite well.  It's a relatively straightforward install with the following bridges created:

vmbr0 -> Management
vmbr1 -> WAN
vmbr2 -> LAN

Physically, vmbr0 and vmbr2, and their associated ethernet ports, are directly wired to the same switch.  Now, the one thing that I'm not certain of is which bridge I'm supposed to use for other containers or VM's?

I may have goofed after creating a new container and assigning the vmbr0 bridge.  Everything worked out fine, but wouldn't vmbr2 be more ideal as it is the "LAN" bridge?  On the flipside, is it "safe" to utilize vmbr2 for containers or VM's as it's primarily for OPNsense?

Any insight would be appreciated.

Thank you!

[Vesalius]

Use vmbr2 if you want your VM/LXC to be protected by the opnsense firewall. vmbr0 is direct to wan most likely.