4 ms·

This is possible with Linux network namespaces too (but doesn't provide protection against kernel exploitation).