proxmox cluster behind nat hardware firewall

Hi All,

Is it possible to have proxmox behind a NAT firewall in terms of VNC? Do the ports need to be forwarded to just one host or all hosts in the cluster?

For example.

host1 - 10.10.10.1
host2 - 10.10.10.2
host3 - 10.10.10.3

firewall - 192.168.0.1 (outside) - 10.10.10.4 (inside)

Do VNC ports only forward to host1 or to all hosts?

Thanks