FreeBSD has bHyve which when using bHyve in production is a bit of a chunky cog; however when it's turning, it turns.
One of my servers just scored over 400 days uptime, hosting: Windows with a mixed various other *nix distributions adding failing RAM to the mix, I am astonished that I've had no issues.
If you use the latest release it's no-longer experimental to having a jail with it's own network adapter. In theory this allows you to then host multiple bHyve instances; in that if a user somehow breaks out of their Virtual Machine they are stuck to the jail rather then the Host-OS.
With such of a feature you can then lock clients in separate jails of their own, alone from any other client.
One of my servers just scored over 400 days uptime, hosting: Windows with a mixed various other *nix distributions adding failing RAM to the mix, I am astonished that I've had no issues.
If you use the latest release it's no-longer experimental to having a jail with it's own network adapter. In theory this allows you to then host multiple bHyve instances; in that if a user somehow breaks out of their Virtual Machine they are stuck to the jail rather then the Host-OS.
With such of a feature you can then lock clients in separate jails of their own, alone from any other client.