Our Windows virtual private servers are KVM-centered. Our servers do not overcommit or oversell any means. It's also possible to choose to get committed CPU cores for the servers.netfilter iptables (quickly to be replaced by nftables) is really a person-House command line utility to configure kernel packet filtering policies developed by netfilter.