http://roscidus.com/blog/blog/2016/01/01/a-unikernel-firewall-for-qubesos/

A Unikernel Firewall for QubesOS - Thomas Leonard’s blog
QubesOS provides a desktop operating system made up of multiple virtual machines, running under Xen.To protect against buggy network drivers, the …