How a RAM-only server works
A normal server keeps its operating system, settings and files on a disk. Anything written there stays after a restart, including logs and temporary files nobody meant to keep. Even deleted files can often be recovered from a disk unless it is properly sanitized.1
A RAM-only, or diskless, server works differently:
- It boots from a clean image. The whole system is loaded into memory at start-up, often from a read-only image or over the network.
- It runs from a memory filesystem. Linux supports filesystems that live entirely in RAM, such as tmpfs and the initramfs used at boot.23
- Nothing is written to disk. Keys, configuration, connection state and any logs exist only in memory.
- A reboot wipes it. When power is cut, memory loses its contents, and the next boot starts again from the same clean image.
Why RAM-only servers matter
A VPN server sits between you and the internet, so it is a natural target. If someone seizes or breaks into a server with a disk, whatever was written to that disk is theirs to search. On a RAM-only server there is nothing persistent to search: no saved logs, no stored keys and no leftover files.
It also helps with trust over time. Because every server boots from the same image, a change made to one machine disappears at the next restart, and the whole fleet stays identical.
| Question | Encrypted disk | RAM-only |
|---|---|---|
| Is data written to storage? | Yes, encrypted | No |
| After power off | Data still on disk, locked by a key | Gone |
| If the key is obtained | Stored data can be read | There is no stored data |
RAM-only is about where data can live. A provider still has to choose not to log in the first place, so look for both: RAM-only servers and a clear logging policy.
Where you’ll see RAM-only servers
- VPN services that want a seized server to reveal nothing.
- Network-booted fleets in data centers, where machines start from a shared image instead of local disks.
- Live operating systems that run from a USB stick and leave nothing on the computer afterwards.
RAM-only servers in Secria
Every Secria VPN server runs entirely in RAM, on every plan. No keys, configuration, connection state or logs are written to disk, and the post-quantum preshared key for your connection lives in memory only for that connection. Every server runs the same RAM-only setup and the same post-quantum tunnel.
Related terms
Sources
- NIST, SP 800-88 Rev. 2: Guidelines for Media Sanitization (September 2025).
- Linux kernel documentation, Tmpfs.
- Linux kernel documentation, Ramfs, rootfs and initramfs.
Checked October 2026. Secria facts are from our Mail and VPN pages and the whitepaper.
Questions about RAM-only servers
What is a RAM-only VPN server?
A VPN server that runs its operating system and all its data in memory, with no hard drive in use. When it restarts or loses power, everything it handled is gone.
Does RAM-only mean no logs?
Not by itself. RAM-only means nothing is stored on disk, so logs can’t pile up over time. Whether a provider logs anything at all is a separate policy, so look for both.
Is RAM-only better than an encrypted disk?
They protect in different ways. An encrypted disk still holds the data, locked by a key. A RAM-only server never writes it, so there is nothing to unlock later.
Are RAM-only servers slower?
No. Memory is much faster than a disk. The trade-off is operational: servers must be rebuilt from an image on every boot, which takes more engineering work from the provider.