Iptables

https://www.hostinger.com/tutorials/iptables-tutorial

On Debian Buster

https://wiki.debian.org/iptables

iptables -t nat -A PREROUTING -p <tcp|udp> -d <vip> --dport <port> -j REDIRECT

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/load_balancer_administration/s1-lvs-direct-vsa

Instead of LXD proxy for nginx

sudo iptables -t nat -A PREROUTING -p tcp -d 10.x.x.x --dport 443 -j DNAT --to-destination 172.16.x.x