But definitively, KVM is lots far more convenient for anything than an OpenVZ pr any container method for your VPS. netfilter iptables (shortly to be replaced by nftables) is usually a consumer-space command line utility to configure kernel packet filtering rules created by netfilter. Lowered