But definitively, KVM is a lot far more convenient for almost everything than an OpenVZ pr any container system for just a VPS.netfilter iptables (before long to get replaced by nftables) is actually a user-space command line utility to configure kernel packet filtering procedures formulated