But definitively, KVM is a whole lot more easy for every little thing than an OpenVZ pr any container system for your VPS. netfilter iptables (shortly to get replaced by nftables) is often a consumer-House command line utility to configure kernel packet filtering principles made by netfilter.