But definitively, KVM is lots more convenient for everything than an OpenVZ pr any container system for a VPS. netfilter iptables (before long to be replaced by nftables) is often a user-Room command line utility to configure kernel packet filtering rules produced by netfilter. A further terri