Compute · Bare metal

Single-tenant AMD EPYC, with no virtualisation tax.

A bare metal server is a single-tenant physical machine your operating system runs on directly, with no hypervisor and no neighbours sharing the hardware. VV Internet Hosting builds them on AMD EPYC Turin and Genoa with dedicated cores, DDR5, and local NVMe Gen5, so the whole machine — its cores, memory bandwidth, and disk I/O — is yours. That predictability is why high-volume mail, databases, and steady production run on it rather than on a shared cloud VM.

In short

  • The whole machine is yours. No hypervisor, no noisy neighbours, no oversubscription — every core, byte, and IOPS is dedicated.
  • AMD EPYC Turin and Genoa. Up to 192 cores, 12-channel DDR5, PCIe Gen5, and local NVMe Gen5.
  • Predictable and cheaper at steady load. No virtualisation tax, tens-of-microseconds storage latency, and often half to a third the cost of an equivalent cloud instance.
  • Sized to the workload. Storage and network usually matter more than raw core count, so we build to fit, not to impress a spec sheet.
  • Honest about cloud. For bursty or short-lived work, we will point you to VPS or cloud on the same network instead.

What is a bare metal server?

It is a single physical machine dedicated to one tenant — you. The operating system runs straight on the hardware, with no hypervisor carving the box into virtual machines and no other customers sharing the cores, the memory bus, the network card, or the disks. You get full root access, your choice of operating system and kernel, and visibility down to the firmware. Many providers now deliver it with cloud-like convenience — an API, fast provisioning, out-of-band management — but underneath it is still a raw, whole server rather than a slice of one.

That distinction sounds academic until you watch a workload behave. A virtual machine is a negotiated share of a larger host, and the negotiation never fully stops; a bare metal server is a fixed, known quantity that performs the same on a quiet Tuesday and during your busiest hour. For anything that runs continuously and cares about consistency — mail queues, databases, analytics — that steadiness is the entire point.

There is a second reason the distinction matters: control. On a shared platform you take the kernel, the limits, and the tuning the provider allows. On bare metal you choose the operating system, tune the kernel, lay out NUMA nodes to match your workload, and see the firmware — the difference between working around a platform and shaping one to the job.

Cloud-like delivery has blurred the picture for some buyers, since bare metal now provisions through an API in minutes and is managed through the same kind of console. The convenience is real, but the thing underneath is still a whole, single-tenant machine — what changed is the speed of provisioning, not what you get.

Why does single-tenancy matter for performance?

Because virtualisation is never free, and sharing is never invisible. The numbers below are the difference between a machine that performs the same every hour and one whose speed depends on strangers.

5–15%A hypervisor consumes roughly 5–15% of CPU and RAM for itself before your workload runs.
10–30%Compute-intensive workloads commonly run 10–30% faster on bare metal than on equivalent cloud VMs.
50–100µsLocal NVMe answers in roughly 50–100 microseconds; network-attached cloud block storage typically sits at 200–500 microseconds, with higher tail latency.
1:1Cloud vCPUs are time-shares on shared cores and are often oversubscribed (ratios such as 8:1 are documented); on bare metal the physical cores are yours, 1:1.

The noisy-neighbour problem is the other half. On shared hosts, another tenant can degrade your CPU, memory bandwidth, network, and storage I/O without warning. Cloud platforms add credit systems and bandwidth caps to limit the blast radius, but the contention is structural — you are paying for isolation you do not fully have. Single-tenancy removes the question entirely, and with it a whole class of risk: Single-tenancy means physical isolation, removing the class of hypervisor-escape and side-channel risks that exist in multi-tenant environments.

Cost follows performance here rather than fighting it. For identical specifications, bare metal frequently runs 50–70% cheaper than the equivalent hyperscaler instance, before data-egress charges. The savings are largest exactly where cloud is most expensive — sustained, predictable load and high data egress — which is the profile of most production systems once they settle.

The same logic runs through memory and cache. A virtual machine's memory can be reclaimed by the hypervisor under pressure, and its bandwidth is shared with whatever else lives on the host; on bare metal the full memory bus is yours, and NUMA placement is something you control rather than guess at. For workloads that stride across large datasets — analytics, in-memory caches, big database working sets — that steady, uncontested bandwidth is often worth more than raw clock speed.

Consistency is the quiet benefit underneath the headline numbers. Averages rarely hurt you; tail latency does. A shared host can serve a fast average and still spike at the ninety-ninth percentile when a neighbour gets busy, and those spikes are exactly what a user notices or an SLA punishes. A machine you do not share has far less to spike about, which is why latency-sensitive systems keep coming back to it.

The hardware

The AMD EPYC generations we run

We build on AMD EPYC because the core density, memory bandwidth, and PCIe Gen5 lanes suit single-tenant work — from a mail spool that needs fast local I/O to a database that wants many fast cores.

Turin

EPYC 9005 · Zen 5 / Zen 5c

Launched October 2024

CoresUp to 128 cores (Zen 5) or 192 cores / 384 threads (Zen 5c)
Memory12-channel DDR5 up to 6000 MT/s (6400 on qualified platforms), up to 6 TB per socket
I/O128 PCIe Gen5 lanes per socket (160 in dual-socket), CXL 2.0

Roughly 17% IPC uplift for general workloads and up to ~37% for HPC and AI versus the prior generation; full 512-bit AVX-512 datapath. High-frequency 'F' parts (around 5 GHz) make strong GPU host CPUs. Drops into the same SP5 socket as Genoa.

Genoa

EPYC 9004 · Zen 4 / Zen 4c (Bergamo)

Launched November 2022

CoresUp to 96 cores (Genoa) or 128 cores (Bergamo, Zen 4c)
Memory12-channel DDR5 up to 4800 MT/s
I/O128 PCIe Gen5 lanes per socket, CXL 1.1

Still an excellent value tier for steady production where the very latest core counts are not required; shares the SP5 platform with Turin.

a representative build — EPYC 9755, dual socket
$ lscpu | head -n 14
Architecture:        x86_64
CPU(s):              128
Thread(s) per core:  2
Core(s) per socket:  64
Socket(s):           2
Model name:          AMD EPYC 9755 128-Core Processor
CPU max MHz:         4100.0
L3 cache:            512 MiB
NUMA node(s):        2
# memory + storage
MemTotal:            1.5 TiB DDR5-6000 ECC (12-channel)
nvme0n1:             3.84 TB Gen5 NVMe  # spool / data
nvme1n1:             3.84 TB Gen5 NVMe  # mirror
One example layout; we size cores, memory, and NVMe to your workload rather than to a fixed tier.

How many cores do you actually need?

Fewer than the top of the price list usually suggests. The instinct is to buy core count, but most real workloads are bound by storage and memory bandwidth long before they run out of CPU. A high-volume mail host spends its time writing to the spool, so fast NVMe and a clean network matter more than another thirty-two cores. Many databases want a handful of fast cores and a lot of fast disk rather than a vast, slower core array. We size to the shape of your workload, not to the most impressive line on a datasheet.

There is a money reason to be disciplined about this in 2026. AI demand pushed component prices up sharply through 2025–2026 — NVMe and DDR5 especially — which is why right-sizing the build matters more than chasing the highest core count. An oversized box is not just wasted capital up front; it is capacity you keep paying to power and cool while it sits idle. We would rather right-size a machine with clear headroom and add to it when your numbers genuinely ask, which is also why we keep Genoa in the mix: for plenty of steady production it is the better value, and the newest cores would never be fully used.

A few concrete shapes help. A high-volume mail host is usually memory- and I/O-led: a moderate, fast core count, generous RAM for queues, and the fastest NVMe we can give the spool. A busy transactional database wants high-frequency cores and low-latency storage more than sheer parallelism. A batch-analytics or rendering node is the case that genuinely rewards many cores, and a GPU host wants the high-frequency parts that keep accelerators fed. We match the build to which of those you are.

None of this is guesswork on our side. We would rather start you on a machine with clear, deliberate headroom and watch the real numbers than sell a configuration you grow into over years. When a host does fill up, adding capacity or a second node is a planned step rather than an emergency, and the data from the first machine tells us what the next one should be.

It also means we are comfortable saying a smaller, faster machine beats a larger, slower one for most jobs. Newer cores at higher clocks, more memory channels, and Gen5 NVMe usually do more for a real workload than a big count of older, slower cores, and they draw less power doing it. Performance per watt is part of the sizing conversation now, for your bill and for the data centres we run in.

Platform

Storage, network, and what you control

The CPU is only part of the machine. The parts that decide how a real workload feels are the disk, the network, and how much of the box you are allowed to tune.

One tenant, the whole machine
Your OS + workload full root · no hypervisor single-tenant AMD EPYC host EPYCcores 1:1 DDR512-channel NVMe Gen5local · RAID Networkbonded + DDoS BMC / IPMI
StorageLocal NVMe Gen5, hardware or software RAID; sized to IOPS and durability needs rather than a fixed tier.
NetworkBonded 10/25/100 GbE, VLAN segmentation, out-of-band BMC/IPMI on a separate management network, always-on DDoS absorption.
ControlFull root, your choice of OS and kernel, NUMA tuning, and firmware visibility.

Workloads

What runs well on EPYC bare metal

Anything that runs continuously and cares about consistency tends to prefer a machine it does not have to share.

High-volume email (MTA)

The mail spool wants consistent local NVMe I/O; a noisy neighbour steals exactly the latency deliverability depends on.

Databases & caches

PostgreSQL, MySQL, MongoDB, and Redis live and die by steady I/O latency and uncontested CPU cache.

Real-time analytics & pipelines

Continuous large-dataset processing needs steady throughput from local storage and dedicated networking.

AI inference & fine-tuning

CPU-only inference for smaller models, or EPYC as a high-frequency host CPU feeding GPUs.

Latency-sensitive services

Real-time bidding, game servers, and trading engines cannot tolerate virtualisation jitter and tail latency.

Streaming & CDN origin

High-egress delivery runs predictably and avoids per-gigabyte cloud egress surprises.

It is no accident the list starts with email: our KumoMTA and PowerMTA hosts run on exactly this hardware, because deliverability depends on the steady I/O that single-tenancy guarantees. See the email stack →

The common thread is sustained, predictable load. None of these workloads benefit from elastic scaling the way a spiky front end might; they benefit from a machine that behaves the same way every hour, which is precisely what a single tenant gets.

What does single-tenancy mean for security and compliance?

It narrows the attack surface in a way virtualisation cannot. Because you are the only tenant, your environment is physically separated from anyone else's, which removes the class of hypervisor-escape and side-channel risks that exist whenever workloads share a host. You also hold the whole security posture: the firewall rules, the encryption keys, the OS hardening, and the patch cadence are decisions you make rather than ones you inherit.

Compliance follows from that control. Running on known, single-tenant hardware in a region you choose makes data residency a fact rather than a hope, which matters under regimes like PCI DSS and DORA that have tightened what operators must demonstrate. We place servers where you need them, keep the configuration and logs yours, and provide the out-of-band access and isolation an audit tends to ask about.

It is worth being precise about the limits too. Single-tenancy removes the shared-host risks, but it does not harden your application for you — that work is still yours, and we would rather advise on it than pretend the hardware is the whole answer.

Bare metal, VPS, or cloud — which fits?

Bare metal wins for steady-state production where performance consistency and cost predictability matter more than spinning up in seconds. It is the right home for your database under constant query load, the API tier that handles predictable traffic, the mail platform that sends every day. But it is not the answer to every question, and pretending otherwise would not serve you.

When a VPS or cloud instance is the better call

  • Bursty or unpredictable load that needs to scale up and down within seconds.
  • Short-lived environments — staging spun up for an afternoon, a one-off batch job.
  • Very small or intermittent workloads where a dedicated machine would sit idle.
  • Teams that want a fully managed platform and have no appetite to run an OS.

The sharpest teams run both: bare metal for the steady core, cloud for burst and experiments, on one network so data moves between them without egress surprises. We offer VPS and cloud compute on the same backbone for exactly that, and we will tell you honestly when a slice of a shared machine is the right size for the job rather than a whole one.

The economics reward the split rather than punish it. Steady production on bare metal avoids the per-hour premium and the egress meter; burst and experimentation on cloud avoid paying for idle iron. The mistake is treating it as a loyalty test — all-in on one model — when the calmer, cheaper answer is usually to put each workload where it belongs and keep them on one network.

There is a planning benefit as well. A bare metal bill is a known number every month, while cloud spend moves with usage and is famously hard to forecast once storage, egress, and a long list of line items are added up. For a workload whose shape you already understand, fixed and predictable is usually easier to run a business on than elastic and variable.

Operated, not just racked

Renting a server and operating one are different things, and the gap is where most self-managed projects quietly struggle. With us the hardware, the network, and the DDoS protection are ours to keep healthy: we replace a failing drive, chase a flaky link, and stay on call when something physical goes wrong, so a fault at two in the morning is our pager rather than yours. You still get full root and out-of-band IPMI, so nothing about that operation locks you out of your own machine.

What stays yours is the part you want to own: the operating system, the application, the data, and the configuration. We do not log into your workload or hold your stack behind a console. The line is deliberate — we take the undifferentiated weight of running iron on a network, and leave you the part that is actually your business. When you would rather we operate more of the stack, such as the mail platform itself, that is a conversation we are glad to have.

Operating also means watching. We pair out-of-band telemetry from the BMC — temperatures, power draw, fan and hardware health — with in-band metrics from the operating system, and we track drive SMART data and firmware versions across the fleet, so a disk about to fail or a host that has drifted from its golden image is flagged before it becomes your outage. You see the same health data we do.

Getting started

Provisioning a server with us

Four steps from a conversation about your workload to root access on a machine that is entirely yours.

  1. 01

    Size to the workload

    We start from what you run — message volume, query load, dataset size — and pick cores, memory, and NVMe to fit it rather than selling the biggest box.

  2. 02

    Provision single-tenant

    The host is built for you alone on AMD EPYC, with the OS and kernel you choose, NUMA laid out sensibly, and reverse DNS set.

  3. 03

    Wire the network

    Bonded uplinks, VLAN segmentation, out-of-band BMC/IPMI on a separate management network, and DDoS absorption on by default.

  4. 04

    Hand over root

    You get full root and IPMI access; we stay on call for hardware, network, and capacity, and you own the configuration.

Questions

Bare metal, answered plainly

The questions teams ask before they move.

What is a bare metal server?

A single-tenant physical machine where your operating system runs directly on the hardware with no hypervisor in between. Every core, every gigabyte of memory, and all the local NVMe and network capacity belong to you, with full root control over the OS, kernel, and firmware.

Why choose bare metal over a cloud VM?

Predictable performance and lower cost at steady load. A hypervisor takes roughly 5 to 15 percent of CPU and memory before your work runs, and cloud vCPUs are oversubscribed time-shares on shared cores. On bare metal the cores are yours one-to-one, local NVMe answers in tens of microseconds rather than hundreds, and for identical specifications the bill is often half to a third less before egress.

Which AMD EPYC generation do you run?

Mainly Turin, the EPYC 9005 series on Zen 5, with up to 128 classic cores or 192 dense cores, 12-channel DDR5, and PCIe Gen5. We also run Genoa, the EPYC 9004 series, as a strong value tier where the very latest core counts are not required. Both sit on the same SP5 platform.

How many cores do I actually need?

Usually fewer than the spec sheet tempts you toward. A mail host is bound by storage and network long before CPU, and many databases want fast cores and fast disks more than a high core count. We size to the workload, which also matters because AI demand has pushed NVMe and DDR5 prices up sharply, so an oversized box is wasted money.

Is bare metal more secure than cloud?

It removes a class of risk. Because you are the only tenant, your environment is physically isolated, which eliminates the hypervisor-escape and side-channel exposure that exists in multi-tenant hosts. You also control the entire security posture: firewall, encryption keys, and OS hardening are yours.

Can I run virtual machines or Kubernetes on it?

Yes. Bare metal is a fine base for your own hypervisor or a container platform, and you control the oversubscription ratio rather than inheriting the provider's. Many teams run KVM or Kubernetes directly on the hardware to avoid a second virtualisation tax.

What storage and network do the servers have?

Local NVMe Gen5 with hardware or software RAID, sized to your IOPS and durability needs, and bonded 10, 25, or 100 GbE with VLAN segmentation and out-of-band BMC/IPMI on a separate management network. DDoS absorption is included on every server.

When is cloud or a VPS the better choice?

When load is bursty or short-lived, when you need to scale up and down within seconds, or when a workload is too small to keep a dedicated machine busy. We offer VPS and cloud on the same network for exactly those cases, and we will point you there when they fit rather than sell you a server that sits idle.

Tell us what you run.

We will size a single-tenant EPYC host to your workload — or tell you when a VPS or cloud instance is the smarter spend.