We have successfully completed our migration to RAM-only VPN infrastructure - Blog | Mullvad VPN
mullvad.net
Today we announce that we have completely removed all traces of disks being used by our VPN infrastructure!

Today we announce that we have completely removed all traces of disks being used by our VPN infrastructure!

  • BaroqueInMind@kbin.social
    12·
    1 year ago

    So now all that needs to happen is a freak solar flare or electrical surge to completely destroy their business?

    • 👁️👄👁️@lemm.eeEnglish
      1·
      1 year ago

      It’d turn the servers off obviously, but that’d be true if it was on disk or not. The source code is stored elsewhere probably on multiple data servers they access with git.

    • viking@infosec.pub
      0·
      1 year ago

      Not at all. Of course their operating system has to be booted from some kind of solid state disk, but all actual operations are carried out in the RAM, meaning that nothing is ever written to the disk. Since the RAM is periodically overwritten and doesn’t hold any data in case of a reboot or power failure, they are de-facto not logging a single thing.

      • 4am@lemm.eeEnglish
        0·
        1 year ago

        I believe the edge devices would use netboot, so they load the kernel and user land into RAM over a network and have no disk in them at all.

        Here’s hoping that image stays clean😉

        • viking@infosec.pub
          1·
          1 year ago

          Right, I mean that the boot image is stored somewhere in a solid state. Whether that’s on a centralized server or locally, no clue. But makes sense to load it remotely, easier to maintain proper versioning that way and ensure cross-compatibility.