Bare Metal Infrastructure

Ink runs on self-owned and operated bare metal servers across global datacenters. No shared cloud VMs. Dedicated hardware managed end-to-end by Ink.

Why bare metal

Lower cost

Bare metal means no cloud provider markup. Ink runs on dedicated servers instead of shared cloud VMs, and passes the cost savings directly to you — per-minute billing at rates that reflect actual hardware costs. See pricing for details.

Performance

Dedicated hardware with no noisy neighbors. Your workloads get consistent, predictable performance without virtualization overhead. NVMe storage for fast builds and application data.

Control

Running on dedicated servers gives Ink full control over the software stack — the orchestration layer, networking, security, and build pipeline are all purpose-built for agent workloads. No abstraction layers or managed services sitting between your agent and the infrastructure.

Security

Every customer workload runs in a gVisor sandbox — a userspace kernel that intercepts system calls before they reach the host kernel. This provides VM-level isolation at container density.

Additional security layers:

• Network policies — strict namespace isolation prevents cross-tenant traffic
• Firewall hardening — ingress restricted to load balancer and CDN IPs
• SMTP egress blocked — prevents spam and abuse from deployed applications
• Metadata endpoint blocked — no access to host machine metadata

Regions