For instance, there can’t be any disk failures unlike which has a bare-steel unit and it’s straightforward to backup a whole VM to afterwards restore it.netfilter iptables (shortly to get replaced by nftables) is usually a user-space command line utility to configure kernel packet filtering