VPNs With RAM-Only Servers: 3 Providers That Claim It

Three VPN providers that publicly claim to run RAM-only (diskless) servers are Mullvad, Proton VPN, and IVPN. This means their servers load the VPN software into RAM and never write data to a physical hard drive, so when a server is rebooted or decommissioned, all data is permanently erased. Below we explain what RAM-only servers actually do, why providers use them, how to verify the claim, and what it does and doesn’t mean for your privacy.

Background: Why RAM-Only Servers Exist

Traditional VPN servers run their operating system and VPN software from a hard drive (SSD or HDD). That drive can store logs, temporary files, encryption keys, and other data. If a government seizes the server, or if an attacker compromises it, they can potentially extract that data. RAM-only servers, also called “diskless” or “RAM-disk” servers, boot from a remote image over the network and run entirely in memory. They have no local persistent storage.

The idea is simple: if there is no disk, there is nothing to seize. When the server is rebooted, the RAM is cleared, and the server boots a fresh image from a remote source. This makes it much harder for anyone to obtain logs or other sensitive data, even with physical access to the hardware.

How RAM-Only Servers Work

In a typical RAM-only setup, the server hardware has a small boot ROM or a network boot (PXE) that pulls a read-only operating system image from a central server. The image is loaded into RAM, and the VPN software (like WireGuard or OpenVPN) runs from there. All runtime data—sessions, temporary files, and any in-memory logs—exists only in RAM.

When the server is rebooted, the RAM is wiped. The server then fetches the same clean image again. This means that even if an attacker or law enforcement has physical access to the server, they cannot recover anything from the local disk because there is no disk. Some providers also use full-disk encryption on the remote boot image, adding another layer of protection.

It is important to note that RAM-only does not mean “no logs.” A provider could still log your IP address and activity on a separate system, for example by routing traffic through a logging gateway. RAM-only is a hardware design choice that minimizes the attack surface, not a guarantee of zero logging.

The Three Providers That Claim RAM-Only

Three VPN providers that have publicly stated they use RAM-only servers are:

Mullvad – Mullvad has been a vocal advocate of diskless servers. They have published blog posts and transparency reports describing their RAM-based infrastructure. They also run a public “server audit” system where you can verify the software on each server.
Proton VPN – Proton VPN states on their website that all their servers are RAM-only. They have also undergone independent security audits that confirm this. Proton VPN is based in Switzerland, which has strong privacy laws, but they still use RAM-only to further reduce data exposure.
IVPN – IVPN, a smaller provider, also claims to use RAM-only servers. They have written about their infrastructure and have been transparent about their no-logging policy, which is reinforced by the lack of persistent storage.

These are not the only providers that use RAM-only, but they are the most prominent ones that make the claim openly. Others, like OVPN and AzireVPN, also use diskless servers, but they are less well-known.

How to Verify the Claim

You cannot easily verify that a VPN server is RAM-only from the outside. However, there are some indicators:

Server audits: Some providers, like Mullvad, allow you to remotely verify the server’s software and configuration. Mullvad’s “server audit” tool lets you compare the server’s TLS certificate with a public log.
Transparency reports: Look for independent security audits that specifically mention the server hardware. Proton VPN has published audits that confirm RAM-only servers.
Server reboot behavior: If a provider claims RAM-only, you can test by connecting to a server, rebooting it (if the provider allows you to request a reboot), and then checking if your session is still active. But this is not a definitive test because the provider might not reboot the exact server you are on.

In practice, you have to trust the provider’s claims and any audits they commission. The technical design makes it hard for an outsider to verify, which is why independent audits are valuable.

Common Misconceptions About RAM-Only

There are several myths about what RAM-only servers do:

Myth: RAM-only means no logs at all. As mentioned, a provider could still log on a separate system. RAM-only only prevents logs from being stored on the VPN server itself.
Myth: RAM-only makes the VPN faster. The performance gain is negligible. RAM is faster than a disk, but the bottleneck in a VPN is usually the network and CPU, not storage.
Myth: RAM-only is only for privacy extremists. Actually, it is a best practice for any VPN that claims to be no-log. It reduces the risk of data leaks in case of a server seizure or compromise.

Comparison: RAM-Only vs. Traditional Servers

Here is a quick comparison:

Data persistence: RAM-only – no data survives a reboot. Traditional – data may survive on disk.
Seizure resistance: RAM-only – a seized server yields nothing. Traditional – a seized server may contain logs or keys.
Complexity: RAM-only – requires a network boot infrastructure, which is more complex to manage. Traditional – simpler, but less secure.
Cost: RAM-only – may be slightly more expensive due to the need for centralized boot images and management. Traditional – lower overhead.

For most users, the difference is invisible. You connect to a server and your traffic is encrypted. The advantage of RAM-only is mainly for privacy advocates who are worried about legal requests or physical attacks on data centers.

Cost and Practical Considerations

RAM-only servers do not directly affect the price you pay. VPN providers charge based on their overall infrastructure, bandwidth, and features. Mullvad, for example, charges a flat €5 per month, while Proton VPN has a free tier and paid plans. IVPN is slightly more expensive but includes additional features like multi-hop.

When choosing a VPN, do not base your decision solely on RAM-only. Also consider the provider’s jurisdiction, logging policy, transparency, and speed. RAM-only is a strong indicator of a privacy-focused provider, but it is not the only factor.

Frequently Asked Questions

Q: Can I check if a VPN server is RAM-only myself?
A: Not easily. You can look for audits or transparency reports, but there is no user-facing tool to verify the hardware. Mullvad’s server audit is the closest thing, but it verifies software, not hardware.

Q: Does RAM-only protect me from law enforcement?
A: It protects you from data being stored on the server, but law enforcement could still track you through your ISP or the VPN provider’s payment information. RAM-only is just one layer of privacy.

Q: Are all VPNs that claim “no logs” using RAM-only?
A: No. Many no-log VPNs use traditional servers but simply don’t write logs. RAM-only is a stronger guarantee because it makes logging technically harder, but it is not the only way to be no-log.

Q: Does RAM-only affect VPN speed?
A: No. The speed is determined by server capacity, network, and protocol. RAM-only has no noticeable impact on performance.

Q: What happens if a RAM-only server is rebooted while I’m connected?
A: Your connection will drop, and you will need to reconnect. That is normal for any server reboot, RAM-only or not.

Q: Is RAM-only the same as a “diskless” server?
A: Yes, the terms are used interchangeably. Both mean the server has no local persistent storage.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.

More cards in this drawer

The whole Numbers and Powers drawer →