For instance, there can’t be any disk failures contrary to by using a bare-metallic unit and it’s very easy to backup a whole VM to later on restore it.netfilter iptables (quickly to be replaced by nftables) is a user-space command line utility to configure kernel packet filtering procedures