What a bare metal server actually is
A bare metal server is one physical machine, rented whole, with your operating system installed directly on the hardware. There is no hypervisor between your kernel and the CPU, and no other customer on the box. When you read a core count, that is the core count you get, every hour of the month, whether or not somebody else on the same rack is running a build.
The difference people notice first is not raw speed but predictability. A virtual instance is a scheduling promise: the hypervisor decides when your vCPU runs, how much of the host NIC you see, and how deep the storage queue goes. On bare metal those are physical facts you can measure once and rely on. That matters most for the workloads that are sensitive to the ninety-ninth percentile rather than the average: databases, latency-bound game servers, real-time media, and anything where a scheduler stall shows up as a user complaint.
Where the two models actually differ
Cloud instances are the right tool for bursty, short-lived, horizontally scaled work. This is the honest list of what changes when the workload stops being any of those things.
| Bare metal server | Cloud VM | |
|---|---|---|
| Who else is on the machine | Nobody | Other tenants, scheduled by a hypervisor you do not control |
| CPU you can count on | Every physical core, all the time | A vCPU share, subject to the host scheduler and its neighbours |
| Hypervisor overhead | None. Your kernel talks to the hardware | Present on every instruction path, storage queue and packet |
| Storage | Physical disks in the chassis | A network volume, or local disk with instance-lifetime rules |
| Kernel and OS control | Full root, custom ISO, your own kernel and modules | Whatever the platform's images and drivers allow |
| Network identity | IPv4 and IPv6 on AS55285, with BGP and BYOIP available | The provider's address space and routing policy |
| Port speed | 20 Gbps or more per server, up to 200 Gbps on order | Tied to the instance size |
| Private network between your servers | Layer 2 with jumbo frames at 9000 MTU, able to span our datacenters, at no extra charge | The provider's virtual network, usually called a VPC |
| Firewall at the network edge | Stateless inbound rules on the access switch your server connects to; blocked traffic never reaches your port | Filtering inside the provider's virtual network, set per instance or subnet |
| Bill shape | Hourly to annual, on a machine that does not resize | Per-second or per-hour on a machine you can resize |
| DDoS mitigation | Inline at our edge, on by default | Usually a separate product line |
The trade is real in both directions: you cannot resize a physical box at 3am, and you should not pick one for a workload that idles at zero most of the week. What you get in return is a machine whose performance you can characterise once, and a bill that does not move when your traffic does.
The control plane, not just the hardware
We spent a decade on other people's panels before building our own. Everything here is in the console today, and everything in the console has an API key behind it.
Provisioning in under a minute
Claim a machine and a cloud-init image installs itself. No ticket, no scheduled window, no engineer waiting on another engineer.
Capture and move your machines
Record an image of a live bare metal server, store it, and deploy it onto another box. Migrate with clicks, not trips.
API keys you issue yourself
Generate keys in the console and drive the same operations from your own tooling. The cloud console is a client of the API, not a layer above it.
API referenceRoles and permissions
Give each teammate the access their job needs. Granular roles instead of one shared login passed around a channel.
Browser KVM, on demand
Out-of-band console access from the browser, in seconds. Watch a boot, fix a broken fstab, no remote hands ticket.
DDoS mitigation, on by default
Filtering runs inline at our edge in front of every server, from the moment it provisions. Nothing to buy, nothing to switch on.
Networks you define
Create private networks between your own servers, in one datacenter or extended between several, plus edge firewall rules and our own IP address management.
Private networkingReal-time task updates
Every provision, reinstall and reboot reports progress live instead of leaving you to poll and guess.
What comes with every server
You pay for the server, for additional IP blocks, and for bandwidth beyond your plan's allowance. Every other function in this table comes with the server at no cost.
| Function | Where you use it | Cost |
|---|---|---|
| Private networks between your servers, extendable between datacenters | Console and API | No cost |
| Firewall groups, enforced on our access switches | Console and API | No cost |
| API keys with per-key permissions and IP allowlists | API; create and delete keys in the console | No cost |
| Organizations with custom roles, an audit log and two-factor authentication | Console and API | No cost |
| OS deploy, custom iPXE, remote console (iKVM) and virtual media | Console and API | No cost |
| Security scans of your IP addresses | Console and API | No cost |
| Additional IP blocks | Console and API | Billed hourly per block |
| Hourly or monthly billing | Chosen per server, in the console or by API | Not a separate charge |
Workloads that earn the whole machine
Four patterns come up over and over in the accounts that move off virtual instances.
- Kubernetes on metal. Running the kubelet directly on the host removes a scheduling layer from every pod and gives the CNI a real NIC to work with. You also stop paying twice for isolation you already get from the cluster.
- Databases and anything storage-latency bound. Physical disks in the chassis, no network storage hop, and a page cache that is not competing with another tenant's.
- Game and real-time servers. Tick rates live or die on the tail of the latency distribution, which is exactly what a shared host scheduler makes unpredictable.
- Steady, always-on compute. CI fleets, encoders, indexers and batch workers that run flat all month. Elasticity you never use is elasticity you should stop paying for.
If your workload is bursty, idles overnight, or scales out and back several times a day, a cloud instance is genuinely the better answer. We sell those too.
Pick your configuration
Every processor, memory and storage option lives in the dedicated servers catalogue: priced live, filterable by location, billed hourly to annually.
From claim to root shell
The point of running bare metal cloud-style is that a physical machine stops being a project. This is the entire lifecycle, in the console or over the API.
- 1Claim a machine. Pick a configuration from the live catalogue and choose a billing cycle: hourly if you are testing, longer if you are staying. The same operation is one call with an API key you issue yourself.
- 2The install runs itself. A cloud-init image lands on the hardware and reports progress live in the console. No ticket, no scheduled window. Need something outside the catalogue? Mount your own ISO over virtual media or boot it with iPXE.
- 3Get to work. SSH in as normal, or open the browser KVM to watch the boot and fix what breaks: out-of-band, in seconds. DDoS mitigation is already inline in front of the machine, including during the install.
- 4Capture it, move it, or hand it back. Record an image of the live server and redeploy it onto another box, or return the machine when the job ends. An hourly server is a resource, not a contract.
Every step above is an API call as well as a console click. The cloud console is a client of the API, not a layer above it. Issue a key and script the parts you do more than once.
Read the API reference- Multihomed in every metro, on dual uplinks across separate switches
- Local exchange and private interconnect capacity at 6 exchanges in Amsterdam
- Always-on DDoS mitigation inline in front of every server
- Dual stack IPv4 & IPv6 network, bring your own IP, or set up a BGP session with our routers
Operating Systems, Installed Your Way
One-click cloud-init deploys, custom ISOs, or ephemeral iPXE boot.
Pre-built cloud-init images deploy automatically.
Install anything else manually over virtual media.
Boot an OS ephemerally, with no disk writes.
Frequently asked questions
A single physical machine rented whole, with your OS installed directly on the hardware and no hypervisor between your kernel and the CPU. No other customer shares the box, so the cores, memory and disks listed on the plan are the ones you actually get.
Bursty workloads belong on cloud instances
Same network, same console, same DDoS mitigation. Cloud instances that come up within minutes and go away when the job is done.
- Live within minutesPick a plan and the instance boots on a shared KVM hypervisor, with no machine to claim.
- Same network underneathAS55285, dual-stack, DDoS mitigation included.
- Scale down as well as upPay for the capacity a bursty workload actually uses.
Further reading
Bare Metal vs Dedicated Server: What the Two Terms Actually Mean
Bare metal and dedicated server describe the same hardware. What differs is the operating model: provisioning, billing, images and API access.
Game Server Performance: Bare Metal vs Virtual Machines
Bare metal vs virtual machines for game server performance: where tick rate and latency actually come from.
Proxmox VE on Bare Metal: The Hypervisor Guide
Running Proxmox VE on bare metal: the type-1 hypervisor guide for a dedicated server.
How Much Server Do You Need? Sizing CPU, RAM and Storage by Workload
Dedicated server sizing guide: how much CPU, RAM, NVMe and bandwidth you need per workload.
