For example, there can’t be any disk failures unlike which has a bare-steel unit and it’s straightforward to backup a complete VM to afterwards restore it.netfilter iptables (shortly to get replaced by nftables) is often a user-Room command line utility to configure kernel packet filtering policies