But definitively, KVM is quite a bit additional easy for anything than an OpenVZ pr any container process for your VPS. netfilter iptables (soon to be replaced by nftables) is usually a user-Area command line utility to configure kernel packet filtering rules developed by netfilter. The diffic