What a bare metal server actually is

A bare metal server is one physical machine, rented whole, with your operating system installed directly on the hardware. There is no hypervisor between your kernel and the CPU, and no other customer on the box. When you read a core count, that is the core count you get, every hour of the month, whether or not somebody else on the same rack is running a build.

The difference people notice first is not raw speed but predictability. A virtual instance is a scheduling promise: the hypervisor decides when your vCPU runs, how much of the host NIC you see, and how deep the storage queue goes. On bare metal those are physical facts you can measure once and rely on. That matters most for the workloads that are sensitive to the ninety-ninth percentile rather than the average: databases, latency-bound game servers, real-time media, and anything where a scheduler stall shows up as a user complaint.

Where the two models actually differ

Cloud instances are the right tool for bursty, short-lived, horizontally scaled work. This is the honest list of what changes when the workload stops being any of those things.

Bare metal serverCloud VM
Who else is on the machineNobodyOther tenants, scheduled by a hypervisor you do not control
CPU you can count onEvery physical core, all the timeA vCPU share, subject to the host scheduler and its neighbours
Hypervisor overheadNone. Your kernel talks to the hardwarePresent on every instruction path, storage queue and packet
StoragePhysical disks in the chassisA network volume, or local disk with instance-lifetime rules
Kernel and OS controlFull root, custom ISO, your own kernel and modulesWhatever the platform's images and drivers allow
Network identityIPv4 and IPv6 on AS55285, with BGP and BYOIP availableThe provider's address space and routing policy
Port speed20 Gbps or more per server, up to 200 Gbps on orderTied to the instance size
Private network between your serversLayer 2 with jumbo frames at 9000 MTU, able to span our datacenters, at no extra chargeThe provider's virtual network, usually called a VPC
Firewall at the network edgeStateless inbound rules on the access switch your server connects to; blocked traffic never reaches your portFiltering inside the provider's virtual network, set per instance or subnet
Bill shapeHourly to annual, on a machine that does not resizePer-second or per-hour on a machine you can resize
DDoS mitigationInline at our edge, on by defaultUsually a separate product line

The trade is real in both directions: you cannot resize a physical box at 3am, and you should not pick one for a workload that idles at zero most of the week. What you get in return is a machine whose performance you can characterise once, and a bill that does not move when your traffic does.

The control plane, not just the hardware

We spent a decade on other people's panels before building our own. Everything here is in the console today, and everything in the console has an API key behind it.

Provisioning in under a minute

Claim a machine and a cloud-init image installs itself. No ticket, no scheduled window, no engineer waiting on another engineer.

Capture and move your machines

Record an image of a live bare metal server, store it, and deploy it onto another box. Migrate with clicks, not trips.

API keys you issue yourself

Generate keys in the console and drive the same operations from your own tooling. The cloud console is a client of the API, not a layer above it.

API reference

Roles and permissions

Give each teammate the access their job needs. Granular roles instead of one shared login passed around a channel.

Browser KVM, on demand

Out-of-band console access from the browser, in seconds. Watch a boot, fix a broken fstab, no remote hands ticket.

DDoS mitigation, on by default

Filtering runs inline at our edge in front of every server, from the moment it provisions. Nothing to buy, nothing to switch on.

Networks you define

Create private networks between your own servers, in one datacenter or extended between several, plus edge firewall rules and our own IP address management.

Private networking

Real-time task updates

Every provision, reinstall and reboot reports progress live instead of leaving you to poll and guess.

What comes with every server

You pay for the server, for additional IP blocks, and for bandwidth beyond your plan's allowance. Every other function in this table comes with the server at no cost.

FunctionWhere you use itCost
Private networks between your servers, extendable between datacentersConsole and APINo cost
Firewall groups, enforced on our access switchesConsole and APINo cost
API keys with per-key permissions and IP allowlistsAPI; create and delete keys in the consoleNo cost
Organizations with custom roles, an audit log and two-factor authenticationConsole and APINo cost
OS deploy, custom iPXE, remote console (iKVM) and virtual mediaConsole and APINo cost
Security scans of your IP addressesConsole and APINo cost
Additional IP blocksConsole and APIBilled hourly per block
Hourly or monthly billingChosen per server, in the console or by APINot a separate charge

Workloads that earn the whole machine

Four patterns come up over and over in the accounts that move off virtual instances.

  • Kubernetes on metal. Running the kubelet directly on the host removes a scheduling layer from every pod and gives the CNI a real NIC to work with. You also stop paying twice for isolation you already get from the cluster.
  • Databases and anything storage-latency bound. Physical disks in the chassis, no network storage hop, and a page cache that is not competing with another tenant's.
  • Game and real-time servers. Tick rates live or die on the tail of the latency distribution, which is exactly what a shared host scheduler makes unpredictable.
  • Steady, always-on compute. CI fleets, encoders, indexers and batch workers that run flat all month. Elasticity you never use is elasticity you should stop paying for.

If your workload is bursty, idles overnight, or scales out and back several times a day, a cloud instance is genuinely the better answer. We sell those too.

Pick your configuration

Every processor, memory and storage option lives in the dedicated servers catalogue: priced live, filterable by location, billed hourly to annually.

From claim to root shell

The point of running bare metal cloud-style is that a physical machine stops being a project. This is the entire lifecycle, in the console or over the API.

  1. 1Claim a machine. Pick a configuration from the live catalogue and choose a billing cycle: hourly if you are testing, longer if you are staying. The same operation is one call with an API key you issue yourself.
  2. 2The install runs itself. A cloud-init image lands on the hardware and reports progress live in the console. No ticket, no scheduled window. Need something outside the catalogue? Mount your own ISO over virtual media or boot it with iPXE.
  3. 3Get to work. SSH in as normal, or open the browser KVM to watch the boot and fix what breaks: out-of-band, in seconds. DDoS mitigation is already inline in front of the machine, including during the install.
  4. 4Capture it, move it, or hand it back. Record an image of the live server and redeploy it onto another box, or return the machine when the job ends. An hourly server is a resource, not a contract.

Every step above is an API call as well as a console click. The cloud console is a client of the API, not a layer above it. Issue a key and script the parts you do more than once.

Read the API reference
AS55285 · 7 metros · 6 Amsterdam exchanges

Our own network, not resold capacity

Your servers ride AS55285, the network we own and run ourselves. We control the routes, the peering and the fix when something breaks, so the person who can change it is the person you are talking to.

Built for uptime
  • Multihomed in every metro, on dual uplinks across separate switches
  • Local exchange and private interconnect capacity at 6 exchanges in Amsterdam
  • Always-on DDoS mitigation inline in front of every server
  • Dual stack IPv4 & IPv6 network, bring your own IP, or set up a BGP session with our routers
Transit partners
Measure it yourself

Our looking glass runs ping, traceroute and BGP lookups from 5 metros: New Jersey, Chicago, Dallas, Los Angeles, and Amsterdam. Measure the path from where you actually sit, before you order.

Operating Systems, Installed Your Way

One-click cloud-init deploys, custom ISOs, or ephemeral iPXE boot.

Debian logo

Debian

Ubuntu logo

Ubuntu

RHEL

RockyLinux logo

RockyLinux

AlmaLinux logo

AlmaLinux

FreeBSD logo

FreeBSD

OpenSUSE logo

OpenSUSE

CentOS logo

CentOS

NixOS logo

NixOS

Fedora logo

Fedora

Proxmox VE logo

Proxmox VE

Server 2022 logo

Server 2022

One click

Pre-built cloud-init images deploy automatically.

Custom ISO

Install anything else manually over virtual media.

iPXE boot

Boot an OS ephemerally, with no disk writes.

Frequently asked questions

A single physical machine rented whole, with your OS installed directly on the hardware and no hypervisor between your kernel and the CPU. No other customer shares the box, so the cores, memory and disks listed on the plan are the ones you actually get.

Bursty workloads belong on cloud instances

Same network, same console, same DDoS mitigation. Cloud instances that come up within minutes and go away when the job is done.

  • Live within minutesPick a plan and the instance boots on a shared KVM hypervisor, with no machine to claim.
  • Same network underneathAS55285, dual-stack, DDoS mitigation included.
  • Scale down as well as upPay for the capacity a bursty workload actually uses.

Take the whole machine

Pick a stock configuration, deploy it in under a minute, and bill it by the hour until you are sure.