The virtual router will be deployed once for a shared network to provide DHCP and DNS services, or per account and isolated guest network when advanced networking is used. It has three network interface cards - one connected to the isolated guest network to serve as the gateway, DHCP, and DNS server for VMs on that network, one on the management network, and one on the public network with a public IP address. The virtual router isolates VMs and performs source NAT for outbound traffic by default. It uses a secure Debian OS configuration with essential packages only and non-standard services ports.