But definitively, KVM is a whole lot more hassle-free for anything than an OpenVZ pr any container procedure for the VPS.netfilter iptables (soon to be replaced by nftables) is actually a consumer-Area command line utility to configure kernel packet filtering policies created by netfilter.