Incredibly simple and powerful. I use containers to isolate google and facebook, and it was very easy to set up.