i think this is the best solution

Linux Docker Containers can run on Windows using WSL and if you later migrate the host to linux, you can also run the same container there natively

DMZ is usually where you put servers that should be externally accessible

it’s like a guest network in that it is a separate network segment with different filtering/forwarding rules than the main local network