How to isolate a host in KVM for i2p only?

Question

linux

Due to the latest news habrahabr.ru/post/228689 , I decided to study i2p, tor and other technologies more closely.
There is a home server on which an i2p router and KVM are raised. What I would like:
1. a web server for hosting a blog/site
1. the ability to visit i2p sites without the risk of revealing your IP or other potentially dangerous information.
Having a separate browser is not entirely correct. There is a risk to enter / download / click somewhere and using the vulnerability information about the user / system will be obtained. Therefore, I think to use a separate virtual machine that can only go to i2p (maybe also tor).
To host a site or a blog, use a virtual machine ( another one or the one with a browser?).
There is not enough knowledge to properly connect all this. Perhaps I'm wrong about the "architecture" of my guerrilla server.
What to read on this topic?

Answer 1

If the i2p server creates a separate interface on the server through which it accesses the i2p space, then dig in the direction of the routing tables.
Well, or if everything is on 1 host, then network namespaces.