Anyone wanting to use the remote management software (IPMI, iLO, iDRAC) on these servers must first connect to the bastion host. On the servers we own, remote management resides behind bastion hosts which are special-purpose computers on a network specifically designed and configured to withstand attacks. In the unlikely event that any of these were to be extracted, only that particular individual server would be affected. In addition, the passwords, certificates, and private keys for the VPN tunnels are all unique for each server.
Only relevant Mullvad staff have access to these. This means that no one can simply unplug a server, boot it up, and mount the disk in order to copy keys without first knowing the encryption passwords. We encrypt all of our servers to secure their data. In order to ensure secure deployment procedures, we always perform hardening and sanity checks on all servers before provisioning our own software and allowing customers to connect to them. We always carefully choose server providers, opting for those who share our values concerning privacy.
And so that you as a customer can make a more informed decision about which server(s) you want to use. Simply because we believe that transparency is one important component of a trustworthy VPN provider. Why do you list the ownership status and provider of your servers? If the circle next to the server is red, it’s currently offline. You can read more below on the details of how we manage our servers.
Visit our Servers page for a completely list of our VPN servers. If you want to know about our VPN servers and how we manage them, then you’re in the right place.
0 kommentar(er)
