But definitively, KVM is quite a bit a lot more convenient for anything than an OpenVZ pr any container process for any VPS.netfilter iptables (quickly to be replaced by nftables) is actually a user-space command line utility to configure kernel packet filtering principles designed by netfil