1. A system comprising: a first virtual machine executed by a first physical server connected to a physical network; a second virtual machine executed by a second physical server connected to the physical network, wherein the first and second virtual machines are connected to a same virtual network; a first firewall module executed by the first physical server and a second firewall module executed by the second physical server, the firewall modules configured to filter network traffic received by the physical servers and addressed to the virtual servers.