Our Windows virtual personal servers are KVM-based. Our servers don't overcommit or oversell any assets. It's also possible to decide to get dedicated CPU cores for the servers.netfilter iptables (shortly to get replaced by nftables) is often a person-House command line utility to configure kernel packet filtering procedures developed by netfilter.