How to set up a router?

Question

Mikrotik

Good day. There is the following situation. 4 external IP addresses (1.1.1.1 - 1.1.1.4) come to the incoming router, then subnets are distributed from this router, 2 servers are connected via 1 cable in the 172.31.0.0/24 subnet (their addresses are 172.31.0.10 and 172.31.0.20) and separate external IP addresses are forwarded to each of these servers. (for server 10 .1 , for server 20 .2 ). In the server room, these servers live on the same host in Hyper-V (2 machines). You need to make the following story, at the level of the router in the server room (where the cable with 2 internal IPs comes in), configure the firewall so that all traffic on 80/443 is passed to server 10, the rest is blocked, and traffic can go to server 20 to any ports, but only from whitelisted IPs.
In the server room, we can plug in the gap between the network card and the cable: Mikrotik hAP lite, TP-Link TL-ER6120v1 or Ubiquiti Edgerouter X SFP.
The main problem is that all ports are already occupied in the server and we can only connect a separate network card via USB (I don’t want to do this). It will be extremely problematic to set up filtering on the incoming switch (we can assume that it is not realistic)
---
UPD: Hyper-V can connect to VLANs, can it be possible to distribute traffic based on this?

Answer 1

VLAN is quite a solution. On a home testlab 10 VLAN + Hyper-V on the host, a Mikrotik router (or any other functional router with the necessary performance characteristics). Further as you like.

Answer 2

even the only thing that came to mind was forward Chain, ACL and MAC addresses...