OVirt already supports filtering the network communication of VMs. Now it is possible to configure the filter parameters using the REST-API.