As an example, there can’t be any disk failures compared with with a bare-steel unit and it’s very easy to backup a whole VM to afterwards restore it.netfilter iptables (shortly to be replaced by nftables) is really a user-Place command line utility to configure kernel packet filtering guide