But definitively, KVM is quite a bit a lot more convenient for all the things than an OpenVZ pr any container method for a VPS.netfilter iptables (quickly to get replaced by nftables) is usually a user-Area command line utility to configure kernel packet filtering policies created by netfilter.Based on what type of packets you ought to block or mod