We run each services in an LXC container. Containers are run inside a KVM that is connected to a bridged interface (one KVM per VLAN).

This setup is very clean and easy to partition, secure and maintain. So yes, light vs real virtualization can work well together!