<story><title>Moving our Encrypted DNS servers to run in RAM</title><url>https://mullvad.net/en/blog/moving-our-encrypted-dns-servers-to-run-in-ram</url></story><parent_chain><item><author>LinuxBender</author><text>Are these physical servers or VM&amp;#x27;s?  I ask because some VM types can be frozen&amp;#x2F;shapshot&amp;#x2F;cloned or live replicated &lt;i&gt;including memory contents&lt;/i&gt; as is done in some VPS providers for lawful requests.  From the bare metal host anything can be accessed in a VM or container.  Do they have a diagram of their physical setup?&lt;p&gt;[Edit] - Are there any Mullvad architects here that can help us avoid going down theoretical hypothetical rabbit holes and turtle stacks?</text></item></parent_chain><comment><author>dijit</author><text>Mullvad has been pushing system transparency a lot (which is a security system specifically designed for bare-metal), so it&amp;#x27;s fairly safe to say that it&amp;#x27;s based on bare-metal.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.system-transparency.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.system-transparency.org&lt;/a&gt;</text></comment>
<story><title>Moving our Encrypted DNS servers to run in RAM</title><url>https://mullvad.net/en/blog/moving-our-encrypted-dns-servers-to-run-in-ram</url></story><parent_chain><item><author>LinuxBender</author><text>Are these physical servers or VM&amp;#x27;s?  I ask because some VM types can be frozen&amp;#x2F;shapshot&amp;#x2F;cloned or live replicated &lt;i&gt;including memory contents&lt;/i&gt; as is done in some VPS providers for lawful requests.  From the bare metal host anything can be accessed in a VM or container.  Do they have a diagram of their physical setup?&lt;p&gt;[Edit] - Are there any Mullvad architects here that can help us avoid going down theoretical hypothetical rabbit holes and turtle stacks?</text></item></parent_chain><comment><author>k8sToGo</author><text>Physical server can also be frozen (literally) and then data extracted from RAM.</text></comment>