Our Windows virtual private servers are KVM-centered. Our servers never overcommit or oversell any means. It's also possible to elect to get devoted CPU cores for the servers. netfilter iptables (shortly to be replaced by nftables) can be a user-space command line utility to configure kernel