But definitively, KVM is a good deal much more effortless for every little thing than an OpenVZ pr any container procedure for the VPS. netfilter iptables (quickly to be replaced by nftables) is a user-Area command line utility to configure kernel packet filtering policies formulated by netfilter