Have you considered using lxc or lxd to run containers rather than VMs? That way you could have a separate rootfs, network interface, etc. for each service, wit

Have you considered using lxc or lxd to run containers rather than VMs? That way you could have a separate rootfs, network interface, etc. for each service, without the virtualization tax.