Thanks alot for the quick answer Micheal, though im still wondering how to isolate the network of virtual machines on the protected site.
One option might be to have a virtual router where the protected VMs are connected to and have it check ISP connections and dark fiber connection
between data centers with a cronjob if its available and when not disable the interface connecting to the network, but this is also not a perfect
solution.
Kind regards,
Jayson