Today we announce that we have completely removed all traces of disks being used by our VPN infrastructure!

  • eatham 🇭🇲@aussie.zone
    link
    fedilink
    English
    arrow-up
    2
    ·
    10 months ago

    Full article:

    We have successfully completed our migration to RAM-only VPN infrastructure

    20 September 2023 NEWS SYSTEM TRANSPARENCY

    Today we announce that we have completely removed all traces of disks being used by our VPN infrastructure!

    In early 2022 we announced the beginning of our migration to using diskless infrastructure with our bootloader known as “stboot”. Completing the transition to diskless infrastructure

    Our VPN infrastructure has since been audited with this configuration twice (2023, 2022), and all future audits of our VPN servers will focus solely on RAM-only deployments.

    All of our VPN servers continue to use our custom and extensively slimmed down Linux kernel, where we follow the mainline branch of kernel development. This has allowed us to pull in the latest version so that we can stay up to date with new features and performance improvements, as well as tune and completely remove unnecessary bloat in the kernel.

    The result is that the operating system that we boot, prior to being deployed weighs in at just over 200MB. When servers are rebooted or provisioned for the first time, we can be safe in the knowledge that we get a freshly built kernel, no traces of any log files, and a fully patched OS.

  • Hubi@feddit.de
    link
    fedilink
    arrow-up
    0
    ·
    10 months ago

    Wow, that is very impressive. I’ve been a subscriber for a few years and I couldn’t be happier with their service.

      • Ado@lemmy.ml
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        10 months ago

        I’ve been a subscriber for 5+ years and have zero issue with the loss of port forwarding. I use my devices for everything from gaming to torrenting, and haven’t run into something cause a problem that required me to use port forwarding on mullvad.

        what has been an incredible source of frustration as a user of Mullvad tho is when websites block me or hit me with repeating captchas. I’ve also had a huge uptick of spam coming in from weird domains. Obviously not sure if thats mullvad-related, but sounds like the issue of “individuals have frequently used this feature to host undesirable content and malicious services from ports that are forwarded from our VPN servers”.

        The removal of this feature seems to be a better of two difficult options.

        • lud@lemm.ee
          link
          fedilink
          arrow-up
          0
          ·
          10 months ago

          Torrenting works better and faster with port forwarding.

          • Ado@lemmy.ml
            link
            fedilink
            arrow-up
            0
            arrow-down
            1
            ·
            10 months ago

            dogs need about one ounce of water per pound of body weight per day

  • Onii-Chan@kbin.social
    link
    fedilink
    arrow-up
    0
    ·
    10 months ago

    It’s a good day to be a Mullvad user. Switched over from Surfshark a while ago, and I love it.

      • PeachMan@lemmy.one
        link
        fedilink
        arrow-up
        1
        ·
        10 months ago

        You don’t use Mullvad for their performance, you use them for their insanely paranoid security and privacy practices.

        And for the record, I was never impressed with Surfshark speeds. I dropped them when they bundled a virus scanner into their VPN client, that’s sketchy as hell. I don’t want my VPN provider scanning my files.

        • TrustingZebra@lemmy.one
          link
          fedilink
          arrow-up
          1
          ·
          10 months ago

          Funny thing is I started using Surfshark just before they started all the YouTube sponsorships. Them doing so many sponsorships actually made me trust them less somehow, if that makes sense.

          Mullvad “appears” to be more trustworthy but maybe they are just better at marketing that image. They still cost twice as much as Surfshark.