As an example, there can’t be any disk failures unlike which has a bare-steel device and it’s very easy to backup a whole VM to afterwards restore it. netfilter iptables (soon to be replaced by nftables) is actually a user-Area command line utility to configure kernel packet filtering