I haven't gone to network filter and logger yet, but I'm running mine in a VM, using lima (https://lima-vm.io/) to make it painless. Works on Mac and Linux, has an untested Windows version.
Came here to mention Lima. I use a ton, and it’s been great.
What's the difference between lima and conventional fat VM using kvm/virtualbox?
I only heard about smolvm yet and they are YC, so I'm hesitant to use them as they will probably one day pull the rug.