# DreamServer - full content for LLMs > Full plain-text of DreamServer's company and service pages (AS57050, own datacenter in Bucharest, Romania). Blog posts are listed in https://dreamserver.ro/llms.txt and the XML sitemap. Every page has a Romanian version under /ro/. Generated: 2026-09-03 ============================================================================== # DreamServer | Servers, VPS, Peering & LIR in Bucharest URL: https://dreamserver.ro/en/ (RO: https://dreamserver.ro/ro/) DreamServer | Servers, VPS, Peering & LIR in Bucharest Home Romania's full-stack infrastructure provider • AS57050 • Operating since 2009 Dedicated servers, virtual servers, peering, Bucharest datacenter. Dedicated servers, VPS and VDS on Proxmox plus Ceph, RIPE LIR services, and free peering at DSIX. Engineered, hosted and operated by us, on our own hardware, under EU jurisdiction. Explore servers Configure a VPS Talk to an engineer RIPE NCC LIR MANRS participant IPv6 native Own datacenter, Bucharest Proxmox + Ceph 24/7 NOC HP ProLiant BladeSystem with HPE Virtual Connect and Cisco Nexus vPC DC-Bucharest • AS57050 • 25 TB/mo • Free DSIX peering 2009 Operating since AS57050 Our autonomous system AS58218 DSIX Internet Exchange 15+ DSIX members peering IPv6 /29 RIPE allocation MANRS Routing security participant The full stack Datacenter, network, virtualization. One team, one stack. Most providers rent the rack from one company, the AS from another, and the orchestration layer from a third. We operate all three. That is why we can answer "why is my latency to Frankfurt 23 ms today" with a real answer, the same shift. 1 Our racks, our power, our cooling DreamServer datacenter in Bucharest, redundant UPS plus generator backup, N+1 cooling, multi-carrier diverse fiber uplinks. No third-party colocation. 2 Our AS, our peerings, our policy AS57050 with full BGP, RPKI-signed announcements, MANRS-aligned filters, sFlow-driven RTBH, Tier 1 transit and direct peering at DSIX, SBIX, 4IXP and LOCIX. 3 Our orchestration, your workload Proxmox VE clusters with Ceph distributed storage (3x replication, self-healing). Same stack from VPS to managed PBS to Nextcloud. No proprietary hypervisor lock-in. 4 RIPE LIR services on top Lease IPv6 prefixes, register an ASN, transfer existing resources under our sponsorship, or hand the LIR over end-to-end. Production-ready RPKI ROAs and rDNS, instant on payment. Bare metal Single-tenant hardware, made for production HP, Dell, IBM and Fujitsu chassis in our own racks. ECC memory, out-of-band management, dual-port active-active VPC on Cisco Nexus, free DSIX peering on every server. Blade Servers HP ProLiant BladeSystem with HPE Virtual Connect. Maximum density, shared chassis power and cooling. Dual Xeon, 192-288 GB ECC Dual 1 or 10 Gbit/s vPC 20x IPv4 + IPv6 included From €125/mo View → Enterprise Dual-port active-active vPC on Cisco Nexus, optional 10 GbE Intel X710-DA. Mission-critical workloads. Active-active vPC, zero-loss failover iLO/IPMI/IMM/iRMC over VPN Loyalty Gift program (12 months) From €70/mo View → Game Servers High-clock CPUs (i9-10900K, Ryzen 9 3900X) tuned for competitive multiplayer hosting. 128-tick CS2, MC, Rust, ARK ready RTBH DDoS mitigation included Sub-millisecond peering at DSIX From €70/mo View → Micro Servers Entry-level dedicated nodes for side projects, dev environments, lab and always-on services. Fixed price, no surprises Single-tenant, full root access Free DSIX peering Affordable View → Virtual servers Spin up in minutes on Proxmox plus Ceph Both VPS and VDS run on the same clusters with 3x replicated Ceph storage and self-healing. Choose the virtualization that fits your workload. VPS · LXC containers Lightweight containers For web stacks, databases, mail servers, CI runners Low-overhead Linux containers with shared kernel. Fast boot, dense allocation, lower price per resource. Ideal when you do not need a custom kernel or non-Linux OS. From 2 vCPU, 4 GB Ceph SSD, snapshots Xterm.js shell console Free PBS backup tier From €5.60/mo Configure VPS → VDS · KVM virtualization Full-fat virtualization For Windows, BSD, custom kernels, nested virtualization Hardware-assisted KVM with dedicated virtual CPUs. Run any operating system, mount your own ISO, do nested virtualization, expose virtual hardware your workload expects. From 2 vCPU, 4 GB noVNC graphical console ISO upload, custom boot Free PBS backup tier From €6.20/mo Configure VDS → Managed services Open-source platforms, operated by us You get the admin panel. We handle the host, the updates, the monitoring, the backups, and the on-call. Server Administration Senior Linux engineers as an extension of your team. OS hardening, patches, monitoring Web stack, databases, migrations Hourly, retainer or project Quote on demand Learn more → Proxmox Backup Server Off-site VM backup with deduplication and AES-256. Content-defined dedup, ZSTD Live-restore, scheduled verify Native PVE storage target From €10/TB/mo Learn more → Nextcloud Storage Managed Nextcloud Hub for private cloud collaboration. Files, calendar, contacts, mail Sub-users with quotas EU jurisdiction, no hyperscalers From €10/TB/mo Learn more → .ro Domains ROTLD partner registrar with full DNSSEC and free transfer-in. EUR 9 per year, all renewals DNSSEC, custom nameservers Registrant management portal EUR 9/year Learn more → RIPE NCC LIR Internet resources, on tap DreamServer is an accredited Local Internet Registry. Lease IPv6, register an ASN, transfer existing resources or run the LIR end-to-end. Every object is created and signed in the RIPE Database. IPv6 Lease Sub-allocations from /48 to /32, RPKI-signed, rDNS, instant activation. From EUR 5/yr → ASN Registration 32-bit ASN at RIPE NCC bundled with /40 IPv6, aut-num, route6 and ROA. EUR 100/yr → LIR Sponsoring Move existing RIPE resources under our sponsorship, zero downtime. From EUR 100/yr → Managed LIR We run the RIPE backend. You keep membership and voting rights. Custom quote → BGP Services Design, deploy and operate BGP networks. RIPE-certified engineers. Engineering hours → Need the full picture? See all LIR services and pricing . Free for every customer DSIX, our community Internet Exchange DSIX (AS58218) is the public IXP we operate in our Bucharest datacenter. Peer directly with Romanian ISPs, CDNs and content networks, no transit middleman. Open peering policy via RPKI-validated route servers, both 1 Gbps and 10 Gbps ports free for DreamServer customers. DSIX overview How to join Members Join DSIX Route servers AS112 service Route collector ============================================================================== # About DreamServer | Romanian Hosting Built Since 2009 URL: https://dreamserver.ro/en/about/ (RO: https://dreamserver.ro/ro/about/) About DreamServer | Romanian Hosting Built Since 2009 Home › About Us DELIVERING DREAMS SINCE 2009 Game servers, VPS, VDS and dedicated servers, hosted in Romania since 2009 DreamServer was founded on 13 June 2009 on one belief: the Romanian hosting market deserved a higher standard. We started with game servers and web hosting and, over the years, built out the full catalogue of dedicated servers, VPS, VDS and private-cloud solutions on infrastructure we own. Today we operate a Bucharest datacenter, hold RIPE NCC LIR membership (AS57050) and host DSIX, the community-driven internet exchange. 2009 FOUNDED AS57050 RIPE NCC LIR DSIX OWN INTERNET EXCHANGE 1 OWN DATACENTER IN BUCHAREST OUR STORY From a Passion Project to a National Operator It all started on 13 June 2009, when DreamServer was born from a love of technology and the wish to offer something better to the growing Romanian gaming and online-community scene. In the beginning we ran web hosting and game servers on rented capacity from various Romanian ISPs, dreaming big on a modest budget and doing the work that nobody else wanted to do. By 2011 DreamServer was already a familiar name in Romanian game hosting. We ran more than 100 active game servers, most of them Counter-Strike 1.6, with hundreds, sometimes thousands of players online every evening. Legendary Romanian communities made their home with us: Deathrun, Zombie Plague, Jailbreak, SA-MP and many more. You could feel the energy of the local community pulsing through those servers. From 2012 to 2020 our fleet was colocated at Voxility, then one of the strongest datacenters in the region. It was the right platform for that chapter, and it let us grow without having to carry the weight of physical infrastructure alone. Then, in 2017, we made the single most important decision in our history: we started building our own datacenter. It took years of late nights, capex, and gradual migrations, but service by service we moved everything into infrastructure we fully own and operate. Why go through that effort? Because owning the stack end to end is the only way to deliver the quality, performance and security we want for our customers without compromise. Networking, power, cooling, hardware, software, routing, peering, security, support, all under one roof, all built and run by the same team. Along the way the catalogue evolved. We have offered game servers, web hosting, radio hosting, dedicated servers, VPS, VDS, colocation and plenty more. Today we focus on performance-grade dedicated servers, trustworthy VPS and VDS solutions, RIPE NCC LIR services, technical consulting, web design and custom web platforms. And we went one step further: we built DSIX, our own internet exchange, contributing to a faster, better interconnected Romanian internet. JOURNEY Milestones Since 2009 The defining moments that shaped the company we are today. 13 JUNE 2009 DreamServer is founded Born out of passion for technology. First services: web hosting and game servers for the emerging Romanian gaming scene, running on rented capacity from various ISPs. The budget was small. The ambition was not. 2011 100+ game servers and a booming community DreamServer becomes a household name in Romanian game hosting. Over 100 active game servers, the overwhelming majority Counter-Strike 1.6, hosting legendary communities like Deathrun, Zombie Plague, Jailbreak and SA-MP. Hundreds, sometimes thousands of players online every single evening. See the 2011 server list › 2012 → 2020 Colocated at Voxility For nearly a decade our hardware lived inside Voxility, then one of the leading datacenters in Romania. The partnership let us focus on software, services and customer relationships while the bigger operator carried the physical load. A defining chapter of our story. 2017 Building our own datacenter The biggest decision in DreamServer history: stop renting and start owning. We broke ground on our own facility in Bucharest. Years of late nights, careful planning, capex commitments and step-by-step migrations followed, every one of them worth it. 2018 → 2020 Migration complete Service by service, rack by rack, we moved everything onto our own infrastructure. Total control over hardware, networking, power, cooling and support. No dependency on a third party for the things our customers depend on us for. 2021 DSIX is born DreamServer Internet Exchange launches (AS58218, IX-F ID 939, listed in Euro-IX IXPDB), a community IXP in Bucharest with free peering for our customers and open bilateral or route-server sessions for anyone interested in keeping Romanian traffic local. TODAY Full stack Romanian operator Performance dedicated servers, VPS and VDS, RIPE NCC LIR services (IPv6 leases, ASN registrations, LIR sponsoring, managed LIR, BGP consulting), web design and custom platform development, technical consulting, plus the DSIX fabric. All built and run from Romania, by people who have been in this since 2009. WHAT WE DO Services We Run Today Seventeen years of learning what customers actually need, concentrated into these lines of business. Dedicated Servers HP ProLiant blade, enterprise and micro servers with dual Xeon CPUs, ECC RAM, enterprise storage and redundant everything. VPS and VDS Proxmox based LXC containers and KVM virtual dedicated servers, fast provisioning, full root access, no overselling. RIPE LIR Services IPv6 leases, ASN registrations, LIR sponsoring, managed LIR for operators and BGP consultancy from certified engineers. DSIX Internet Exchange Our own community IXP in Bucharest. Free peering for DreamServer customers, open route servers, AS112 service, Route Collector. Technical Consulting Network design, BGP tuning, DDoS mitigation strategy, infrastructure audits and second opinions from people who actually run the stack. Web Design and Custom Platforms Landing pages, corporate sites, booking systems, internal tools and bespoke web applications tuned for our infrastructure. ARCHIVES Keepsakes From the Journey A few artifacts we have kept from the early days of DreamServer. 2011 DreamServer Linux, the original promo video A 15+ year old clip where we walked through our services with the enthusiasm of day one. A time capsule from when 100 Mbps felt enormous. Watch on YouTube → 2013 DreamServer site, 2013 snapshot Browse what dreamserver.ro looked like in 2013. A different hosting market, same mission. Open the archived version → 2023 DreamServer site, 2023 snapshot A decade later, same domain, much bigger backstage. The version right before our current redesign, with an interactive timeline and clips from every year. Open the archived version → TIMELINE Video Archive 2010 to 2016 Old promo clips and company updates we cooked up across the years. Hit play, click through to the full year page for more context. 2010 See the full 2010 page › 2011 See the full 2011 page › 2012 See the full 2012 page › 2013 See the full 2013 page › 2014 See the full 2014 page › 2015 See the full 2015 page › 2016 See the full 2016 page › // THANK YOU // From a small passion project to a Romanian company with its own infrastructure, its own peering fabric, and thousands of customers along the way. Together we grew, learned and kept dreaming further. Thank you to every one of you who has been part of this story. DreamServer, delivering dreams since 2009. Want to work with us? Whether it is a single server, a fleet, an IX presence or a custom platform, we would love to hear what you are trying to build. Contact Us Explore Dedicated Servers ============================================================================== # DreamServer Blog URL: https://dreamserver.ro/en/blog/ (RO: https://dreamserver.ro/ro/blog/) DreamServer Blog Home › Blog JOURNAL DreamServer Blog Welcome to the DreamServer blog. Here we publish technical articles that help our customers (and anyone stopping by) get more out of our services and learn new things about dedicated servers, VDS, networking, applications and platforms. Plus the occasional announcement when we roll out promotions or new features. All 31 Announcements 3 Apps 1 Archiving 1 Automation 1 Backup 1 Bastion 1 Cloud 1 Control Panels 1 Databases 1 Dedicated Servers 1 DevOps 1 Domains 1 Gaming 1 Hosting 1 IPAM 1 Logs 1 Monitoring 6 NAS 1 Network 9 Observability 3 Panel 1 Payments 1 SSO 1 Security 6 Storage 2 TLS 1 VPN 4 WAF 1 24 Aug 2026 Announcements Last Summer Discount: blade servers up to 60% off until September 1 Summer is almost over and so is the price. Until September 1 our HP ProLiant blade servers are up to 60% off: 192 GB RAM minimum, dual Xeon, perfect for virtualization, from 100 EUR / month in Bucharest. Read article 14 Aug 2026 Announcements RoPay is here: pay for your hosting instantly by QR, with a 0.5% fee Starting today you can pay your DreamServer invoices with RoPay: instant bank-to-bank payments by QR code, straight from your banking app, no card needed, with a low 0.5% fee. Here is how it works. Read article 26 Jul 2026 Bastion Warpgate: the open-source bastion that brings order to your SSH access A hands-on look at Warpgate, the self-hosted PAM bastion written in Rust: a transparent proxy for SSH, HTTPS, MySQL, Postgres and Kubernetes, 2FA and SSO out of the box, session recording, install on a VPS in minutes, and the limits to know before production. Read article 22 Jul 2026 Network Domain Monitor: never let a domain die from expiry you didn't see coming Domain Monitor is a self-hosted PHP tool that tracks domain expiry, WHOIS data, and sends notifications over 7 channels, so you find out before the domain drops, not after. Read article 19 Jul 2026 DevOps Cronmaster: a decent web UI on top of the crontab you keep forgetting about Cronmaster puts a modern web UI, live logging, and SSO on top of cron jobs, so you stop editing crontab with vi over SSH at 2am. Read article 15 Jul 2026 Archiving ArchiveBox: self-hosted web archiving that actually beats link rot ArchiveBox saves every URL as HTML, PDF, screenshot, WARC and more, all at once. We run it in our Bucharest datacenter to stop link rot before it costs us a source. Read article 12 Jul 2026 Network WatchYourLAN: knowing what's actually connected to your network, right now WatchYourLAN scans your network via ARP and tracks every host it finds. We run it ourselves in our Bucharest datacenter, and here's how to install it. Read article 8 Jul 2026 Storage OpenMediaVault: a Debian-based NAS you run entirely from a browser OpenMediaVault is a Debian-based NAS solution with SMB/NFS/FTP, software RAID and a plugin system. What it offers and why it wants dedicated disks, not a VPS. Read article 5 Jul 2026 Gaming Pterodactyl: the game server panel that saves you from SSH-ing in every time someone wants to restart Minecraft How Pterodactyl's Panel + Wings architecture gives game communities and hosting providers self-service control over Docker-isolated game servers. Read article 1 Jul 2026 Backup Databasement: self-hosted database backups, with schedules and restore A hands-on look at Databasement, the open-source database backup manager: MySQL, Postgres, MongoDB and more in one web interface, with scheduling, retention, cross-server restore and S3 or SFTP storage. One container, self-hosted. Read article 28 Jun 2026 Cloud Nextcloud: Your Own Dropbox, Minus the Vendor Lock-in Nextcloud turns a VPS into a full file-sync and collaboration suite you control. What it is, how to install it with AIO, and when it's not the right tool. Read article 24 Jun 2026 Observability Graylog: Open Source Log Management That Doesn't Make You Grep Six Servers at 3am A practical look at Graylog: architecture, streams, pipeline rules, alerting, a real docker-compose setup, and when it's the wrong tool for the job. Read article 21 Jun 2026 Network Akvorado: see who is actually sending you traffic, flow by flow A hands-on look at Akvorado, the open-source flow collector from Free: it receives NetFlow/IPFIX and sFlow, enriches with SNMP and GeoIP, stores in ClickHouse and draws Sankey diagrams. Peering, capacity and DDoS analysis, self-hosted. Read article 17 Jun 2026 Security authentik: The Open-Source SSO Platform That Speaks SAML, OIDC, LDAP, and RADIUS A practical look at authentik, the open-source identity provider with SAML, OIDC, LDAP, SCIM and RADIUS support, configurable flows, and forward-auth for any self-hosted app. Read article 14 Jun 2026 Security mkcert: local HTTPS with no browser warnings, in two commands A hands-on look at mkcert, the tool that generates locally-trusted development certificates: how it installs a local CA into the trust store, how you issue a cert for any domain and IP, plus mkcert Web UI for teams. No self-signed, no browser warnings. Read article 10 Jun 2026 Monitoring Grafana: the single pane of glass for your whole infrastructure A hands-on look at Grafana, the open-source visualization layer for monitoring: how it pairs with a metrics backend like VictoriaMetrics or Prometheus, dashboards-as-code, alerting, install on a VPS in minutes, and the limits to know before production. Read article 7 Jun 2026 Security Wazuh, Open-Source XDR and SIEM for When Grep Isn't a Security Strategy Anymore Wazuh combines XDR and SIEM in one open-source platform: agents, FIM, intrusion detection, vulnerability scanning and compliance. When it's worth running. Read article 3 Jun 2026 Security CrowdSec: Crowdsourced Intrusion Prevention for Everyone Else's Servers Too CrowdSec brings collaborative, behavior-based intrusion prevention to your servers: what it does, how to install it, and where it honestly falls short. Read article 30 May 2026 Network NetBox: the source of truth behind our own infrastructure (DCIM + IPAM) How we use NetBox as our real CMDB and IPAM for our Bucharest datacenter, queried live by our own Ansible automation. Plus a VPS install guide. Read article 27 May 2026 Monitoring Gatus: health monitoring with config that lives in Git How we run Gatus, an open source health dashboard, to watch dozens of services across our fleet, all defined in YAML and version-controlled in Git. Read article 23 May 2026 Control Panels CloudPanel: a free server panel that does not feel cheap A practical look at CloudPanel, the free open-source server control panel from MGT-COMMERCE: what is in the box, how it installs on a Debian or Ubuntu VPS, and where it stops short. Read article 20 May 2026 WAF SafeLine WAF: a serious open-source firewall for your web apps A hands-on look at SafeLine, the self-hosted WAF from Chaitin Tech: semantic detection engine, install on a VPS in five minutes, real configuration examples and the limits to know before you put it in front of production. Read article 16 May 2026 Monitoring Uptime Kuma: uptime monitoring without the headache What Uptime Kuma is, what it monitors out of the box, what a public status page looks like, and how to install it on a VPS in a few minutes. Read article 13 May 2026 Network SmokePing: seeing the jitter and packet loss a plain ping hides from you SmokePing measures and visualizes latency over time, with its signature smoke graph showing jitter and packet loss where a plain up/down check sees nothing. Read article 9 May 2026 Monitoring Zabbix: enterprise-scale monitoring without the license bill What Zabbix is, how it scales from 10 to 10,000 hosts through distributed proxies, what you get out of the box, and how to install it on a VPS. Read article 6 May 2026 Monitoring Checkmk: infrastructure monitoring that configures itself What Checkmk is, why its auto-discovery beats hand-written Nagios configs, what you get out of the box, and how to install it on a VPS. We run it ourselves. Read article 2 May 2026 Network ZeroTier: when you need a virtual Ethernet switch, not just IP routing ZeroTier emulates a Layer 2 Ethernet switch over the internet, with broadcast and multicast, where WireGuard's strict Layer 3 model falls short. Read article 29 Apr 2026 Network NetBird: a peer-to-peer WireGuard mesh VPN with a fully self-hostable control plane NetBird is a peer-to-peer mesh VPN built on WireGuard, with both the management and signal server fully self-hostable. What it offers and how to run it on a VPS. Read article 25 Apr 2026 Network Tailscale: a mesh network on top of WireGuard, without hand-wiring tunnels Tailscale takes the WireGuard engine and adds automatic key coordination, NAT traversal, and SSO. How it works, what's free, and where it stays a proprietary SaaS. Read article 22 Apr 2026 Network WireGuard: the modern VPN that fits in a config file WireGuard brings modern cryptography and a few thousand lines of code straight into the Linux kernel. Why it's different from OpenVPN/IPsec, and how we run it. Read article 18 Apr 2026 Announcements Introducing the DreamServer Blog We are starting a blog to publish promotions, campaigns, tutorials, recommendations and technical articles about the hosting services we run - dedicated servers, VDS, VPS and everything around them. Read article No articles match your filters. ============================================================================== # Contact DreamServer | 24/7 Hosting Support Romania | Bucharest Datacenter URL: https://dreamserver.ro/en/contact/ (RO: https://dreamserver.ro/ro/contact/) Contact DreamServer | 24/7 Hosting Support Romania | Bucharest Datacenter Home › Contact 24/7 Support Available Answering since 2009 24/7 NOC Support <1h Avg. Email Response English & Romanian Contact DreamServer Whether you're an existing client or exploring our services, we're here to help. Existing clients can open a support ticket directly in the Client Area for the fastest response. New visitors can reach us by email, phone, or WhatsApp, whichever suits you best. We recommend email for non-urgent inquiries (clear record, efficient handling), phone for immediate assistance, and WhatsApp for quick questions. Get in Touch Real humans, fast responses. Pick the channel that fits your need. Online, fast response Phone & WhatsApp +(40) 773 870 363 Around the clock for urgent matters. Romanian and English spoken. WhatsApp Call Now Client Area Open a support ticket for the fastest tracked response. Available to all registered clients, prioritized by our team. Open Ticket Email Us Pick the right inbox so we can route your request faster. General, Sales contact@dreamserver.ro Inquiries, sales and partnerships NOC, Tech noc@dreamserver.ro Network ops and tech support, 24/7 Abuse abuse@dreamserver.ro Report network abuse incidents Company Details Legal Information Registered entity, Romania S.C. DreamServer S.R.L. VAT ID 29975003 CIF RO36208038 EUID ROONRC.J2012003481409 Chamber of Commerce J2012003481409 Share Capital 200 RON Registered Office Bucharest, Romania S.C. DreamServer S.R.L. Str. Mircea Vulcanescu, Nr. 2 Et. 7, Ap. 25 Sector 1, Bucharest, Romania Bank Account Information Wire transfer details for payments in multiple currencies. EUR Account Beneficiary: S.C. DreamServer S.R.L. RO15 BREL 0002 0037 6300 0200 USD Account Beneficiary: S.C. DreamServer S.R.L. RO31 BREL 0002 0037 6300 0300 GBP Account Beneficiary: S.C. DreamServer S.R.L. RO90 BREL 0002 0037 6300 0402 RON Account Beneficiary: S.C. DreamServer S.R.L. RO96 BREL 0002 0037 6300 0100 Trezoreria Sector 1 RON Account Beneficiary: S.C. DreamServer S.R.L. RO44 TREZ 7015 069X XX01 3182 Payment Methods DreamServer accepts Visa and Mastercard credit and debit cards, processed in real time through the PCI-DSS certified payment gateways NETOPIA Payments and euPlatesc , with full 3D Secure authentication for every transaction. We also support PayPal for fast international checkout, Bitcoin for customers who prefer privacy and instant cryptocurrency settlement, RoPay for instant bank-to-bank payments by QR code in RON, and bank transfers via Libra Internet Bank in EUR, USD, GBP and RON. All payment methods are available across our full catalog. Credit / Debit Card Visa and Mastercard accepted securely. Processed by euPlatesc or NETOPIA RoPay Instant bank-to-bank payment by QR code, in RON. Bank Transfer Direct wire transfer in EUR, USD, GBP, or RON. via Libra Internet Bank Bitcoin + Lightning BTC on-chain and Lightning Network payments. Processed by BTCPay PayPal Fast and secure payments via PayPal. ============================================================================== # Blade Dedicated Servers in Romania | HP ProLiant BladeSystem | DreamServer URL: https://dreamserver.ro/en/dedicated-servers/bladeservers/ (RO: https://dreamserver.ro/ro/dedicated-servers/bladeservers/) Blade Dedicated Servers in Romania | HP ProLiant BladeSystem | DreamServer Home › Dedicated Servers › Blade Servers Bare Metal Performance Bare Metal Blade Servers Deploy enterprise-grade bare metal infrastructure powered by HP ProLiant BladeSystem servers. Each configuration starts with a minimum of 192 GB ECC RAM and dual Intel Xeon processors, delivering the performance, stability, and reliability required for demanding workloads. Our blade architecture provides a compact, high-density solution ideal for virtualization clusters, private cloud environments, high-availability platforms, and mission-critical applications. The modular HP ProLiant blade platform allows rapid scaling, efficient hardware upgrades, and seamless server replacement, without major infrastructure investments. RIPE NCC LIR Member Free DSIX Peering AS57050 Founded 2009 Request a Quote View Pricing Network Architecture How Your Blade Connects to the World The diagram below shows the complete network path from your blade server through the HP Virtual Connect fabric, across redundant Cisco Nexus switches, to the internet and DSIX peering exchange. High-Availability Blade Server with HP Virtual Connect and Cisco Nexus vPC Blade Server Plans Choose from our HP ProLiant BladeSystem configurations, each with dual Intel Xeon processors, ECC RAM, hardware RAID, and dual-port Cisco Nexus vPC networking. All plans include a 128 GB OS SSD, 25 TB monthly traffic, dedicated IPv4 and IPv6 addresses, iLO remote management via secure VPN, and a free peering port to DSIX Internet Exchange. 🎉 Discount This blade server is available at a reduced price. Enterprise-grade performance at an unbeatable value. HP BL460c G6 Dual XEON L5640 24 Cores @ 2.80 GHz 192 GB ECC RAM Up to 2x SAS or SATA Dual 1 or 10 Gbit/s 25 TB /mo 10 IPv4 | 10 IPv6 RAID 1 or 0 DreamServer , Bucharest, Romania €230 €130 /month Order Now 🎉 Discount This blade server is available at a 50% discount. Take advantage of this limited-time offer for enterprise-grade blade performance at half the price. HP BL460c G7 Dual XEON L5640 24 Cores @ 2.80 GHz 192 GB ECC RAM Up to 2x SAS or SATA Dual 1 or 10 Gbit/s 25 TB /mo 10 IPv4 | 10 IPv6 RAID 1 or 0 DreamServer , Bucharest, Romania €250 €125 /month Order Now ⚡ Limited Only a few units of this blade server remain in stock. Availability is limited and may sell out soon. 🎉 Discount This blade server is available at a reduced price with the highest RAM capacity in our blade lineup. HP BL490c G7 Dual XEON E5645 24 Cores @ 2.67 GHz 288 GB ECC RAM Up to 2x SAS or SATA Dual 1 or 10 Gbit/s 25 TB /mo 10 IPv4 | 10 IPv6 RAID 1 or 0 DreamServer , Bucharest, Romania €275 €180 /month Order Now Included with Every Blade Server Free Port to DSIX Internet Exchange, 1 Gbps or 10 Gbps Every blade server ships with dual 10 Gbps dedicated ports through the HP Virtual Connect fabric. Connect your BladeSystem to the DSIX Internet Exchange (AS58218) at no additional cost, with either a 1 Gbps or 10 Gbps peering port included. Peer directly with Romanian ISPs, CDNs, hosting providers, and content networks for sub-millisecond latency and reduced transit costs. Combined with up to 288 GB ECC RAM per blade, our BladeSystem platform is ideal for building peering-enabled virtualization clusters, content delivery nodes, and high-performance hosting infrastructure. Explore DSIX & Members View Enterprise Servers BladeSystem Technology HP ProLiant BladeSystem with HPE Virtual Connect and Cisco Nexus vPC delivers enterprise-grade performance, redundancy, and simplicity in a single modular enclosure. Connectivity Redundancy Performance Simplicity Remote Access Storage Virtualization Operating Systems Enterprise-Grade Blade Server Connectivity Our blade server solutions integrate HP BladeSystem enclosures equipped with dual Virtual Connect Flex-10 modules directly connected to Cisco Nexus data center switches using virtual PortChannel (vPC) technology. This architecture delivers resilient, high-performance network connectivity designed to maximise uptime, aggregate throughput, and enable seamless scaling for the most demanding enterprise workloads. Each blade in the enclosure benefits from hardware-level network virtualisation through Virtual Connect. This allows network profiles (MAC, VLAN, bandwidth limits) to be assigned independently of the physical server, enabling rapid blade replacement, migration, and provisioning without reconfiguring upstream switches. True High Availability with Dual-Path Redundancy Each BladeSystem enclosure includes two Virtual Connect modules, each linked independently to a pair of Cisco Nexus switches. These uplinks are configured as vPC port channels, presenting multiple physical links as a single logical connection across two upstream switches. No single point of failure at the network layer can interrupt your server traffic. In the event of a switch failure, link interruption, or planned maintenance on one network path, traffic seamlessly migrates to the surviving path with zero packet loss and zero downtime. Your applications stay online without manual intervention, making this architecture ideal for production databases, financial platforms, and always-on services. Multi-Gigabit Performance with Dynamic Bandwidth Each BladeSystem enclosure supports multi-gigabit Ethernet traffic with dynamic bandwidth allocation at the blade level. Virtual Connect Flex-10 technology allows a single 10 Gbps physical port to be partitioned into multiple FlexNICs, each with independently assigned bandwidth, ensuring that every blade receives exactly the throughput it needs. With dual Virtual Connect modules and Cisco Nexus vPC connectivity, blade servers can reach aggregate speeds of up to 10 Gbps per port with sub-millisecond switching latency. Ideal for virtualized environments running 50+ VMs, clustered database engines, real-time analytics pipelines, and high-throughput content delivery. Operational Simplicity at Scale HPE Virtual Connect abstracts blade server network profiles from the underlying physical switches. This means you can replace a blade, move workloads between slots, or upgrade hardware without touching a single switch configuration. Combined with vPC, this simplifies network changes, eliminates manual errors, and supports scaling infrastructure without redesign. For IT teams managing growing environments, this translates to faster provisioning (minutes instead of hours), fewer change-window outages, and a network fabric that grows with your business rather than constraining it. Integrated Remote Management via iLO Every HP ProLiant blade includes HP Integrated Lights-Out (iLO) for complete out-of-band server management. Access iLO through a dedicated, secure VPN connection to monitor hardware health, view real-time power and thermal data, launch a remote console session, and control power states (on, off, reset, graceful shutdown) from anywhere in the world. iLO operates independently of the operating system and remains accessible even when the blade is powered off or the OS is unresponsive. Mount virtual ISO images to install or recover operating systems remotely, capture pre-boot diagnostics, and update firmware without physical datacenter access. All iLO access is provided through our isolated management VPN, keeping your management interface completely off the public internet and protected from unauthorized access. Flexible Storage with Hardware RAID Each blade supports up to 2 hot-swappable SAS or SATA drives in a compact form factor. Choose between high-speed SAS drives for I/O-intensive workloads like databases and virtualization, or cost-effective SATA SSDs for web hosting and general-purpose applications. All blades ship with a 128 GB OS SSD pre-installed. Hardware RAID 0 (striping for performance) and RAID 1 (mirroring for redundancy) are supported through the integrated HP Smart Array controller. RAID 1 is recommended for production environments where data protection is critical, providing real-time mirroring with automatic failover if a drive fails. Need more storage capacity? Combine your blade with external NFS/iSCSI storage over the 10 Gbps Virtual Connect fabric, or pair it with one of our Enterprise servers configured as a dedicated storage node. Purpose-Built for Virtualization at Scale With 192 to 288 GB ECC RAM per blade and dual Intel Xeon processors providing 24 cores, these servers are engineered for high-density virtualization. Run VMware ESXi, Proxmox VE, Microsoft Hyper-V, or KVM with dozens of virtual machines per blade, each with dedicated CPU and memory resources guaranteed by hardware-level isolation. The HP Virtual Connect Flex-10 technology allows each blade's 10 Gbps physical NIC to be partitioned into multiple virtual NICs (FlexNICs), each assigned to a different VLAN or network segment. This means your VMs can have isolated network paths without external switch configuration, simplifying multi-tenant deployments and security zoning. Build high-availability clusters across multiple blades in the same enclosure with shared storage over iSCSI/NFS, live migration support, and automatic VM failover. The modular blade architecture means adding compute capacity is as simple as sliding in a new blade, no cabling, no switch ports, no network redesign. Any Operating System, Your Choice We provide ready-to-deploy ISO images for all major operating systems: Ubuntu Server LTS (22.04, 24.04), Debian 12, AlmaLinux 9, RockyLinux 9, Devuan 5, FreeBSD 14, Windows Server 2019/2022, and hypervisors including Proxmox VE, VMware ESXi, and XCP-ng. Installation is handled through iLO virtual media mount, no physical presence required. Running a custom stack or an OS not in our library? Send us your own ISO image and we will stage it on iLO for remote installation. Whether it is a hardened Linux build, a specialized appliance image, or a recovery disk, we accommodate any x86-64 compatible operating system. Need help choosing? Our team can recommend the optimal OS for your workload, configure initial security hardening (SSH keys, firewall rules, fail2ban), and set up monitoring agents so your blade is production-ready from day one. DreamServer DataCenter Our premier hosting facility in Bucharest, Romania. Every blade server is housed in our own secure, climate-controlled datacenter with redundant power, high-speed fiber uplinks, and advanced cooling. From enterprise applications to high-density virtualization, DreamServer delivers the reliability your business demands. Own Datacenter Hosted in our DreamServer Datacenter in Bucharest with full physical control, enterprise-grade security, redundant UPS with generator backup, and 99.9% SLA-guaranteed uptime. High Performance Powered by HP ProLiant BladeSystem hardware with enterprise ECC RAM and SSD storage. Multi-carrier fiber connectivity, Cisco Nexus switching fabric, and sub-millisecond latency for demanding applications. 24/7 Expert Support Professional engineering team available around the clock via email, phone, and support tickets. Proactive monitoring, scheduled maintenance, and hands-on troubleshooting to keep your blades running at peak efficiency. Included on All Dedicated Servers RTBH DDoS Mitigation with sFlow Telemetry We operate Remotely Triggered Black Hole (RTBH) filtering on our BGP uplinks, continuously monitored via sFlow telemetry on our edge routers. When traffic to a destination IP spikes above baseline, our sFlow collector detects the anomaly in real time and triggers a blackhole route over iBGP. The blackhole community is automatically announced to our upstream Transit Providers , so the attack traffic is dropped at their network edge before it ever reaches our network, while the rest of your infrastructure stays online. Your blade fleet and virtualization clusters, running Proxmox VE, VMware ESXi, or Hyper-V with dozens of VMs per node, continue serving traffic on every healthy IP while the attacked one is blackholed. The vPC fabric keeps surviving workloads at line-rate throughput. You can announce a blackhole community yourself (if you operate BGP with us) or simply ask our NOC to trigger it. RTBH is effective against volumetric L3/L4 floods (UDP, SYN, amplification). Layer 7 application-layer attacks fall outside the scope of RTBH and require application-level defenses such as a WAF, rate limiting, or caching that you implement at your own application tier. Attack traffic sFlow telemetry BGP blackhole announcement Recommended Add-on Pair Your Blade with Proxmox Backup Server Planning to install Proxmox VE on your blade? We strongly recommend bundling it with our Proxmox Backup Server service . The two products are engineered to work together: PBS plugs in as a native storage target on the Proxmox VE node (Proxmox VE 8 or newer recommended), uses QEMU dirty bitmaps for fast incremental VM and container backups, and unlocks Live-restore so a guest can boot while its data is still streaming back from the backup store. Trust between the blade and the backup server is anchored by a certificate fingerprint pinned at storage-add time. Not running Proxmox VE? The recommendation still holds. Proxmox Backup is a client-server solution where many unrelated hosts can share one backup server. The lightweight client runs on most modern Linux distributions, so you can back up files, directories, and entire raw disks from any blade or VM into a centralised, deduplicated, encrypted store. Encryption happens client-side, before any byte leaves the blade, so the server only ever sees ciphertext. Incremental & Deduplication Encrypted, compressed chunks in flight Dedup match (chunk already stored) Single stored copy, N references Incremental + Deduplication Periodic backups produce mostly duplicate data. The client sends only changed blocks; the server splits data into fixed or variable sized chunks and collapses identical ones across all hosts and snapshots. A fleet of VMs sharing one OS image stores that OS once. ZSTD Compression Zstandard handles several gigabytes per second on modern CPUs while keeping a high compression ratio. Backups stay fast and storage stays small, with no perceptible CPU pressure on the source blade. End-to-end Encryption Authenticated AES-256 in Galois/Counter Mode (GCM) runs on the client, before any byte leaves the blade. An optional RSA master key pair safely stores and recovers the backup key, which you can print for offline, disaster-proof storage. SHA-256 Integrity Every backup ships with a manifest (index.json) listing every file, size, and SHA-256 checksum. Schedule verification jobs to catch bit rot. The same checksums drive cross-machine deduplication, so identical OS chunks are stored once across your fleet. Granular Recovery Why restore everything when you can restore one file? Browse the snapshot catalog, pull individual files or directories from a VM image, drop into an interactive recovery shell, or Live-restore a guest that boots while data is still streaming back. Learn About Proxmox Backup Order Backup Storage Tight integration with Proxmox VE 8 or newer, certificate-fingerprint pinned, deployable in minutes. Frequently Asked Questions Everything you need to know about our blade server solutions. What is a blade server? A blade server is a compact, modular server that fits into a shared enclosure (chassis) along with other blades. Unlike traditional rack servers, blades share power, cooling, networking, and management infrastructure, resulting in higher density, lower cabling complexity, and simplified administration. How much RAM do DreamServer blade servers have? Our blade servers come with 192 GB to 288 GB of ECC registered RAM depending on the model. The HP BL460c G6 and G7 ship with 192 GB, while the HP BL490c G7 supports up to 288 GB, ideal for memory-intensive virtualization and database workloads. What networking is included with blade servers? Every blade includes dual-port connectivity through HP Virtual Connect Flex-10 modules connected to Cisco Nexus switches via vPC (virtual PortChannel). This provides redundant active-active networking with speeds of 1 Gbps or 10 Gbps per port. Is DSIX peering included with blade servers? Yes. Every blade server includes a free port to the DSIX Internet Exchange (AS58218) at no additional cost. You can choose between 1 Gbps or 10 Gbps peering ports to connect directly with Romanian ISPs, CDNs, and content providers. Can I run virtualization on blade servers? Absolutely. With 192-288 GB ECC RAM and 24 cores per blade, these servers are purpose-built for running VMware ESXi, Proxmox VE, Microsoft Hyper-V, or KVM. Virtual Connect FlexNIC technology allows partitioning each 10 Gbps port into multiple virtual NICs for isolated VM networking. What storage options are available? Each blade supports up to 2 hot-swappable SAS or SATA drives with hardware RAID 0 or RAID 1 through the HP Smart Array controller. All blades ship with a 128 GB OS SSD pre-installed. External NFS/iSCSI storage is available over the 10 Gbps Virtual Connect fabric. How do I manage my blade server remotely? Every blade includes HP Integrated Lights-Out (iLO) for full out-of-band management. Access iLO through our secure VPN to power on/off, launch remote console, mount virtual ISO images, and monitor hardware health, even when the OS is unresponsive. Where are the blade servers located? All blade servers are hosted in the DreamServer datacenter in Bucharest, Romania, within EU jurisdiction. Our facility features redundant power with UPS and generator backup, advanced cooling, and multi-carrier fiber uplinks with 99.9% SLA-guaranteed uptime. What is the difference between a blade server and a rack server? A blade server is a modular compute unit that slots into a shared enclosure (chassis) providing common power, cooling, networking, and management. Rack servers are standalone units with their own power supplies and NICs. Blades offer higher density (more compute per rack unit), simplified cabling, and centralized management through HP Virtual Connect. Rack servers offer more local storage bays and independence from shared infrastructure. How many blades fit in one HP BladeSystem enclosure? The HP BladeSystem c7000 enclosure supports up to 16 half-height blades or 8 full-height blades. Each enclosure shares redundant power supplies, cooling fans, and Virtual Connect modules. DreamServer hosts multiple enclosures, allowing you to start with one blade and scale to dozens without infrastructure changes. Can I mix different blade models in the same enclosure? Yes. The HP BladeSystem c7000 enclosure supports mixing different blade models (BL460c G6, BL460c G7, BL490c G7) in the same chassis. Each blade operates independently with its own CPU, RAM, and storage, while sharing the enclosure's networking fabric and power infrastructure. Can I use my blade server for web hosting with cPanel or Plesk? Absolutely. With 192-288 GB RAM and 24 CPU cores, blade servers are excellent for hosting hundreds of websites. Install cPanel/WHM, Plesk, Hestia, or any other control panel on top of a standard Linux distribution. The dual-port vPC networking ensures your hosted sites benefit from redundant connectivity and free DSIX peering for Romanian traffic. How do I monitor my blade server health? Through the iLO management interface (accessible via VPN), you can monitor CPU temperature, fan speeds, power consumption, memory status, and disk health in real time. iLO also sends SNMP traps and email alerts for hardware events. Additionally, our NOC monitors all blade enclosures 24/7 and proactively contacts you if we detect anomalies. Can I get a private VLAN between multiple blades? Yes. HP Virtual Connect supports creating isolated network segments (server profiles) that span multiple blades within the same enclosure. We can configure private VLANs for inter-blade communication (e.g., database replication, cluster heartbeats) with no traffic leaving the enclosure. For cross-enclosure VLANs, we route through the Cisco Nexus fabric. What payment methods do you accept? We accept credit/debit cards (Visa, Mastercard via euPlatesc), bank transfers (EUR, USD, GBP, RON via Libra Internet Bank), PayPal, and Bitcoin (on-chain and Lightning Network via BTCPay). Invoices are generated monthly in advance. For bank transfers, payment is due within 7 days of invoice date. Show More Questions ============================================================================== # Enterprise Dedicated Servers | DreamServer URL: https://dreamserver.ro/en/dedicated-servers/enterprise/ (RO: https://dreamserver.ro/ro/dedicated-servers/enterprise/) Enterprise Dedicated Servers | DreamServer Home › Dedicated Servers › Enterprise Enterprise-Grade Infrastructure • AS57050 Enterprise Dedicated Servers in Romania DreamServer Datacenter · Bucharest · Founded in 2009 Built for mission-critical production environments. Every enterprise server ships with redundant network paths across two independent Cisco Nexus data center switches, delivering simultaneous active-active throughput with zero-downtime failover. RIPE NCC LIR Member MANRS Participant AS57050 Founded 2009 Enterprise Dedicated Servers with Dual-Port Active-Active VPC and Cisco Nexus Ultra-Low-Latency Switches Included with Every Enterprise Server Peer for Free at DSIX, 1 Gbps or 10 Gbps Every Enterprise dedicated server ships with a free 1 Gbps port to the DSIX Internet Exchange (AS58218), no setup fee, no monthly charge, no catch. Opt for the Intel X710-DA 10 GbE upgrade and we bump your DSIX port to 10 Gbps, still at zero cost. Peer directly with ISPs, CDNs, hosting providers, and content networks in Romania for sub-millisecond latency and reduced transit bills. Need more horsepower, up to 288 GB ECC RAM and dual-port Cisco Nexus vPC fabric? Our Blade Servers ship with the same free DSIX peering (1 or 10 Gbps), built on HP ProLiant BladeSystem for memory-intensive workloads, virtualization clusters, and AI/ML pipelines. Explore DSIX & Members View Blade Servers Choose Your Enterprise Server Every enterprise dedicated server at our Bucharest datacenter ships ready for production: 50€ one-time setup, 128 GB OS SSD, dual Intel Xeon CPUs with ECC RAM, dual-port Active-Active vPC across Cisco Nexus switches for sub-millisecond latency, dedicated IPv4 and IPv6 addresses, out-of-band remote management (iLO, IPMI, IMM, iRMC), hardware RAID on selected models, and a free 1 Gbps port to DSIX Internet Exchange (upgraded to 10 Gbps with the optional Intel X710-DA NIC). Optional add-ons include additional storage, bandwidth upgrades, and DDoS-protected uplinks. All servers are fully managed on request, with 24/7 NOC support included. 🎉 Discount This server is available at a substantial discount compared to its regular price. Take advantage of this limited-time offer. 🎁 Loyalty Gift Receive the server as a complimentary gift after 12 consecutive months of uninterrupted rental. After this period, the server is yours to keep. Note: includes only the 128 GB OS SSD; no extra storage is provided. HP Proliant DL160 G6 SAS 2xQUAD-Core Intel® Xeon® Dual L5630 (Quad-Core) 8 Cores / 16 Threads 48 GB ECC RAM (up to 192 GB) Optional NIC: Intel X710-DA 2x1 Gbps Active-Active 20 TB /mo 10 IPv4 | 10 IPv6 iLO Port 128 GB OS SSD 8x SATA|SAS + 1x NVMe Hardware RAID: Yes DC: DreamServer , Bucharest Setup: €50 €100 €75 /month Buy Now 🎉 Discount This server is available at a substantial discount compared to its regular price. Take advantage of this limited-time offer. 🎁 Loyalty Gift Receive the server as a complimentary gift after 12 consecutive months of uninterrupted rental. After this period, the server is yours to keep. Note: includes only the 128 GB OS SSD; no extra storage is provided. ⚡ Limited Only 1-2 units of this server remain in stock. Availability is limited and may sell out soon. HP Proliant DL160 G6 SATA 2xSix-Core Intel® Xeon® Dual L5640 (Six-Core) 12 Cores / 24 Threads 72 GB ECC RAM (up to 288 GB) Optional NIC: Intel X710-DA 2x1 Gbps Active-Active 20 TB /mo 20 IPv4 | 20 IPv6 iLO Port 128 GB OS SSD 4x SATA + 1x NVMe Hardware RAID: No DC: DreamServer , Bucharest Setup: €50 €130 €90 /month Buy Now 🎉 Discount This server is available at a substantial discount compared to its regular price. Take advantage of this limited-time offer. 🎁 Loyalty Gift Receive the server as a complimentary gift after 12 consecutive months of uninterrupted rental. After this period, the server is yours to keep. Note: includes only the 128 GB OS SSD; no extra storage is provided. ⚡ Limited Only 1-2 units of this server remain in stock. Availability is limited and may sell out soon. HP Proliant DL160 G6 SATA 2xSix-Core X5690 Intel® Xeon® Dual X5690 (Six-Core) 12 Cores / 24 Threads 72 GB ECC RAM (up to 288 GB) Optional NIC: Intel X710-DA 2x1 Gbps Active-Active 20 TB /mo 20 IPv4 | 20 IPv6 iLO Port 128 GB OS SSD 4x SATA + 1x NVMe Hardware RAID: No DC: DreamServer , Bucharest Setup: €50 €150 €100 /month Buy Now 🎉 Discount This server is available at a substantial discount compared to its regular price. Take advantage of this limited-time offer. 🎁 Loyalty Gift Receive the server as a complimentary gift after 12 consecutive months of uninterrupted rental. After this period, the server is yours to keep. Note: includes only the 128 GB OS SSD; no extra storage is provided. HP Proliant DL160 G6 SATA 2xQUAD-Core Intel® Xeon® Dual L5630 (Quad-Core) 8 Cores / 16 Threads 72 GB ECC RAM (up to 288 GB) Optional NIC: Intel X710-DA 2x1 Gbps Active-Active 20 TB /mo 15 IPv4 | 15 IPv6 iLO Port 128 GB OS SSD 4x SATA + 1x NVMe Hardware RAID: No DC: DreamServer , Bucharest Setup: €50 €100 €80 /month Buy Now 🎉 Discount This server is available at a substantial discount compared to its regular price. Take advantage of this limited-time offer. 🎁 Loyalty Gift Receive the server as a complimentary gift after 12 consecutive months of uninterrupted rental. After this period, the server is yours to keep. Note: includes only the 128 GB OS SSD; no extra storage is provided. ⚡ Limited Only 1-2 units of this server remain in stock. Availability is limited and may sell out soon. Dell PowerEdge C1100 SATA 2xQUAD-Core Intel® Xeon® Dual L5420 (Quad-Core) 8 Cores / 8 Threads 24 GB ECC RAM Optional NIC: Intel X710-DA 2x1 Gbps Active-Active 20 TB /mo 10 IPv4 | 10 IPv6 IPMI Port 128 GB OS SSD 4x SATA + 1x NVMe Hardware RAID: No DC: DreamServer , Bucharest Setup: €50 €100 €70 /month Buy Now 🎉 Discount This server is available at a substantial discount compared to its regular price. Take advantage of this limited-time offer. 🎁 Loyalty Gift Receive the server as a complimentary gift after 12 consecutive months of uninterrupted rental. After this period, the server is yours to keep. Note: includes only the 128 GB OS SSD; no extra storage is provided. ⚡ Limited Only 1-2 units of this server remain in stock. Availability is limited and may sell out soon. IBM X3650 M3 2xSix-Core Intel® Xeon® Dual X5660 (Six-Core) 12 Cores / 24 Threads 72 GB ECC RAM (up to 288 GB) Optional NIC: Intel X710-DA 2x1 Gbps Active-Active 20 TB /mo 20 IPv4 | 20 IPv6 IMM Port 128 GB OS SSD 8x SATA|SAS + 3x NVMe Hardware RAID: Yes DC: DreamServer , Bucharest Setup: €50 €150 €130 /month Buy Now 🎉 Discount This server is available at a substantial discount compared to its regular price. Take advantage of this limited-time offer. 🎁 Loyalty Gift Receive the server as a complimentary gift after 12 consecutive months of uninterrupted rental. After this period, the server is yours to keep. Note: includes only the 128 GB OS SSD; no extra storage is provided. ⚡ Limited Only 1-2 units of this server remain in stock. Availability is limited and may sell out soon. Fujitsu PRIMERGY RX200 S6 2xSix-Core Intel® Xeon® Dual E5649 (Six-Core) 12 Cores / 24 Threads 48 GB ECC RAM (up to 192 GB) Optional NIC: Intel X710-DA 2x1 Gbps Active-Active 20 TB /mo 20 IPv4 | 20 IPv6 iRMC Port 128 GB OS SSD 8x SATA|SAS + 1x NVMe Hardware RAID: Yes DC: DreamServer , Bucharest Setup: €50 €150 €100 /month Buy Now 🎁 🎉 🎁 🎉 🎁 🎁 🎉 🎁 🎉 🎁 🎁 🎉 🎁 🎉 🎁 🎉 🎁 🎉 🎁 🎉 🎉 🎁 🎉 🎁 🎉 🎁 🎉 🎁 🎉 🎁 🏆 🎀 🎊 🏆 🎀 ⭐ ✨ ✨ ✨ ✨ ✨ ✨ ✨ ✨ ✨ ✨ 🎁 EXCLUSIVE LOYALTY PROGRAM Rent for 12 Months, Keep the Server Forever Servers marked with the Loyalty Gift badge are yours to keep after 12 consecutive months of uninterrupted rental. Continue using the service and take your server home whenever you decide to cancel, or simply keep renting and enjoy the reliability of infrastructure you already trust. ✅ What the Gift Includes ✓ The physical server chassis and CPUs listed on the product page ✓ A single 128 GB OS SSD (the one the server ships with) ✓ The minimum ECC RAM configuration listed on the product page ❌ What Is Not Included ✗ Additional RAM modules added during rental ✗ Extra storage drives (HDDs, SSDs, NVMe) beyond the OS drive ✗ Network cards added as upgrades (Intel X710-DA, etc.) ✗ Any other components added during the rental period ⚠ No Warranty After Handover: Once you pick up your gifted server, DreamServer provides no warranty or technical support for the hardware. The server is provided as-is, free of charge, and we cannot be held liable for any subsequent hardware failure or issues. Full Remote Control & Enterprise Networking Out-of-band management for full hardware control, any OS you like, on-demand hardware upgrades, plus an active-active dual-port vPC fabric on Cisco Nexus with an optional 10 Gbps NIC upgrade. Click through the tabs below. Remote Console OS & ISO Scale On Demand Active-Active vPC 10 Gbps Upgrade Remote Console via Secure VPN Access your server's out-of-band management interface ( iLO on HP, IPMI on Dell, IMM on IBM, iRMC on Fujitsu) through a dedicated VPN connection. Power on, power off, reboot, watch boot sequences, mount virtual media, and troubleshoot BIOS or OS issues, all remotely. The management plane is isolated from the public internet, so hostile scanners and credential-stuffing attacks never see it. You reach it only through the VPN tunnel we provision for you. Full "standing in the datacenter" control from anywhere in the world, without exposing the management interface to the public internet. Any OS, Any ISO Ready-to-install ISOs for every popular OS: all major Linux distributions ( Ubuntu LTS, Debian, AlmaLinux, Rocky Linux, Devuan ), Windows Server 2019/2022 , FreeBSD, OpenBSD, Proxmox VE, VMware ESXi , and more. Need something custom? Upload your own ISO in the client area and we will stage it on the out-of-band console so you can install and configure exactly as you want, no forced stack, no hidden agents. Bring your own ISO, or pick from our library. You stay in full control of what lands on the disk. Scale On Demand Add extra IPv4 or IPv6 addresses on the fly, increase ECC RAM up to the chassis maximum, expand storage with additional SATA/SAS/SSD/NVMe drives, or upgrade the NIC to the Intel X710-DA 10 GbE, all without migrating data or reinstalling your OS. Upgrades are priced per component. IP additions are hot-path with no downtime; physical upgrades (RAM, drives, NIC) require a scheduled 15-30 minute maintenance window. Start with what you need today, scale the same chassis as your workload grows. No migrations, no surprise bills. Dual-Port Active-Active vPC Every enterprise server comes standard with two network ports configured in active-active Virtual Port Channel (vPC) mode. Unlike traditional active-passive failover, both ports carry traffic simultaneously, delivering 2x1 Gbps aggregate through professional Cisco Nexus datacenter switches. Cisco Nexus runs cut-through switching at nanosecond latency , ensuring your traffic takes the fastest possible path. Load balancing happens in hardware across both uplinks. If one link or switch fails, traffic seamlessly migrates to the surviving path with zero packet loss and zero downtime. No single point of failure in network connectivity, consistent sub-millisecond latency, and bandwidth that scales with your workload instead of limiting it. Optional Intel X710-DA 10 Gbps Upgrade When 2 Gbps is not enough, upgrade to the Intel X710-DA dual-port 10 GbE adapter. Each port connects to a separate Cisco Nexus switch, maintaining full active-active vPC redundancy while multiplying your throughput by 10x. The X710-DA is not just faster, it offloads network processing from your CPU with hardware-accelerated features: SR-IOV for direct VM-to-NIC passthrough, RDMA for ultra-low-latency storage access, and advanced traffic classification that auto-prioritizes your critical workloads. Ideal for virtualization clusters running 50+ VMs, real-time database replication, high-frequency trading, large-scale media streaming, and any workload where network latency directly impacts revenue. Guaranteed Uptime and Ultra-Low Latency Enterprise infrastructure guarantees that keep your applications running without compromise. Active-Active Redundancy Dual ports with vPC across Cisco Nexus switches ensure traffic continues uninterrupted even if one link or switch fails. No convergence delay, no dropped connections. Ultra-Low Latency Cisco Nexus cut-through switching operates in nanoseconds, not microseconds, nanoseconds. Your packets spend less time in the switch than it takes light to travel 30 centimeters. Maximum Throughput Standard 2x1 Gbps ports are fully active simultaneously, not active-standby. With the Intel X710-DA upgrade, scale to 2x10 Gbps while maintaining full redundancy. Flexible Expansion Start with 2x1 Gbps and upgrade to 10 Gbps when you need it. No server migration required, we install the NIC and reconnect you to the same vPC fabric. Included on All Dedicated Servers RTBH DDoS Mitigation with sFlow Telemetry We operate Remotely Triggered Black Hole (RTBH) filtering on our BGP uplinks, continuously monitored via sFlow telemetry on our edge routers. When traffic to a destination IP spikes above baseline, our sFlow collector detects the anomaly in real time and triggers a blackhole route over iBGP. The blackhole community is automatically announced to our upstream Transit Providers , so the attack traffic is dropped at their network edge before it ever reaches our network, while the rest of your infrastructure stays online. Your enterprise workloads, from production databases and payment gateways to multi-tenant SaaS, stay online on every other IP while the attacked one rides out the flood, paired with our Dual-Port Active-Active vPC fabric and Cisco Nexus cut-through switching. You can announce a blackhole community yourself (if you operate BGP with us) or simply ask our NOC to trigger it. RTBH is effective against volumetric L3/L4 floods (UDP, SYN, amplification). Layer 7 application-layer attacks fall outside the scope of RTBH and require application-level defenses such as a WAF, rate limiting, or caching that you implement at your own application tier. Attack traffic sFlow telemetry BGP blackhole announcement Need a Custom Configuration? Our enterprise servers ship in standard configurations, but we routinely build custom setups for specific workloads. Tell us what you need, additional storage, higher bandwidth, specific CPU generations, RAID controllers, or full managed hosting, and our team will spec a solution that fits. Running a game server and need high single-thread clock speeds instead of core count? Check out our Gaming Dedicated Servers , purpose-built with high-frequency CPUs (i7-3770/4790, Ryzen 9 3900X, i9-10900K), Cisco Nexus vPC for sub-millisecond latency, and optimized stacks for CS, Minecraft, GTA SA-MP, and modern multiplayer titles. Talk to an Engineer Explore Gaming Servers Recommended Add-on Pair Your Enterprise Server with Proxmox Backup Server Enterprise rack servers are typically deployed as virtualization hypervisors hosting dozens of VMs. If you plan to run Proxmox VE on yours, bundle it with our Proxmox Backup Server service . PBS plugs in as a native storage target on the Proxmox VE node (Proxmox VE 8 or newer recommended), uses QEMU dirty bitmaps for fast incremental VM and container backups, and unlocks Live-restore so a guest can boot while its data is still streaming back. Trust between the enterprise host and the backup server is anchored by a certificate fingerprint pinned at storage-add time. Not running Proxmox VE? The recommendation still holds. Proxmox Backup is a client-server solution where many unrelated hosts can share one backup server. The lightweight client runs on most modern Linux distributions, so you can back up files, directories, and entire raw disks from any enterprise host or VM into a centralised, deduplicated, encrypted store. Encryption happens client-side, before any byte leaves the enterprise host, so the server only ever sees ciphertext. Incremental & Deduplication Encrypted, compressed chunks in flight Dedup match (chunk already stored) Single stored copy, N references Incremental + Deduplication Periodic backups produce mostly duplicate data. The client sends only changed blocks; the server splits data into fixed or variable sized chunks and collapses identical ones across all hosts and snapshots. A fleet of VMs sharing one OS image stores that OS once. ZSTD Compression Zstandard handles several gigabytes per second on modern CPUs while keeping a high compression ratio. Backups stay fast and storage stays small, with no perceptible CPU pressure on the source host. End-to-end Encryption Authenticated AES-256 in Galois/Counter Mode (GCM) runs on the client, before any byte leaves the host. An optional RSA master key pair safely stores and recovers the backup key, which you can print for offline, disaster-proof storage. SHA-256 Integrity Every backup ships with a manifest (index.json) listing every file, size, and SHA-256 checksum. Schedule verification jobs to catch bit rot. The same checksums drive cross-machine deduplication, so identical OS chunks are stored once across your fleet. Granular Recovery Why restore everything when you can restore one file? Browse the snapshot catalog, pull individual files or directories from a VM image, drop into an interactive recovery shell, or Live-restore a guest that boots while data is still streaming back. Learn About Proxmox Backup Order Backup Storage Tight integration with Proxmox VE 8 or newer, certificate-fingerprint pinned, deployable in minutes. Frequently Asked Questions Answers to common questions about our enterprise dedicated servers. How quickly is my server provisioned after payment? For servers in stock, standard provisioning takes under 24 hours during business days. Most orders placed during business hours are live within 4-8 hours. For custom configurations or out-of-stock models, expect 2-5 business days. You will receive access credentials and out-of-band management details via email. What operating systems can I run on my dedicated server? Any OS that supports the server hardware. We provide ready-to-install ISOs for Ubuntu LTS, Debian, AlmaLinux, RockyLinux, Devuan, FreeBSD, Windows Server 2019/2022, Proxmox VE, VMware ESXi, and more. You can also upload your own ISO through the client area, and we will stage it for installation via the out-of-band console. Can I upgrade my server after it is deployed? Yes. We offer hot-path upgrades for additional IPv4/IPv6 addresses (assigned remotely), and scheduled-downtime upgrades for RAM, storage (SATA/SAS/SSD/NVMe), and network cards (Intel X710-DA 10 GbE). Upgrades typically require 15-30 minutes of downtime and are priced per component. Contact our sales team for a quote. How does the out-of-band remote management (iLO/IPMI/IMM/iRMC) work? Each server has a dedicated management controller (iLO on HP, IPMI on Dell, IMM on IBM, iRMC on Fujitsu) connected to an isolated management network. We provide VPN access credentials so you can reach the controller securely from anywhere. Through this interface you can power cycle, remote-console, mount virtual media, view hardware sensors, and perform BIOS changes, just like standing in front of the server. What is the Dual-Port Active-Active vPC mentioned in the specs? Virtual Port Channel (vPC) is a Cisco Nexus feature that allows two physical ports on your server to connect to two different switches and operate as one logical link. Both ports are active simultaneously (2×1 Gbps aggregate, or 2×10 Gbps with the Intel X710-DA upgrade) and load-balance traffic. If one link or switch fails, traffic continues on the surviving path with zero packet loss. Is DSIX peering really free? Are there hidden costs? Yes, 100% free. Every enterprise server includes a free 1 Gbps port to DSIX Internet Exchange (AS58218), and if you upgrade to the 10 GbE Intel X710-DA NIC, your DSIX port is upgraded to 10 Gbps at no additional cost. No setup fee, no monthly fee, no bandwidth cap. You are responsible for your own BGP configuration and peering agreements. What happens when my payment is late? Invoices are due on the date specified. We provide a 7-day grace period with no penalty. If payment is not received within 14 days, the service is suspended. Data is retained for 30 days total from the invoice due date. After 30 days of non-payment, data is permanently deleted. Reactivation is possible during the grace period. Do you offer DDoS protection? Our upstream carriers include baseline volumetric DDoS mitigation (flooding attacks) at the network edge. For Layer 7 attacks or targeted protection, we offer premium DDoS mitigation as an add-on, routed through scrubbing centers with always-on or on-demand activation. Contact sales for pricing based on your expected clean traffic volume. Can I host unmetered traffic or run bandwidth-heavy applications? Enterprise servers include 20 TB/month of measured bandwidth at the standard port speed. After 20 TB, the port is not cut off, you pay per-GB overage (very affordable) or upgrade to a higher bandwidth tier. For applications like streaming, CDN edges, or backup targets, contact sales to discuss 100 TB+ or dedicated 10 Gbps unmetered plans. Is there a money-back guarantee? We offer a 7-day satisfaction guarantee for new customers on standard configurations. If the server does not meet your expectations within 7 days of delivery, we refund the monthly fee (setup fees are non-refundable). Custom configurations and managed services are not eligible for the guarantee. How does the Loyalty Gift work, and is there a catch? Rent any server marked with the Loyalty Gift badge for 12 consecutive months without interruption, and the physical hardware is yours to keep. No catch, just reward for loyalty. You can either continue the service (we will keep hosting it) or take the server home when you eventually cancel. Important: only the base configuration is gifted, any upgrades you purchased (extra RAM, drives, NICs) remain DreamServer property. Also, no warranty or support is provided after you pick up the hardware. What backup options are available? Dedicated servers do not include automatic backups (you have root access and full control). We strongly recommend implementing your own backup strategy: rsync to a second server, snapshots if using ZFS or LVM, or our optional managed backup service that stores daily incrementals to off-site storage. For VPS and VDS customers, free backup is available on request. Where are the servers physically located? All DreamServer dedicated servers are hosted in our own datacenter in Bucharest, Romania, within EU jurisdiction. Our facility features redundant power with UPS and generator backup, N+1 cooling, multi-carrier fiber uplinks, and on-site staff for remote-hands operations. Our datacenter is connected to DSIX Internet Exchange (AS58218) and multiple Tier 1 upstreams. Can I transfer my existing data from another provider? Absolutely. You have root access from day one and can rsync, scp, or use any migration tool to transfer data. For larger migrations (multiple TB), we can ship a pre-configured USB drive to your origin location, or coordinate direct connections if your old provider is on DSIX. Our NOC can assist with DNS cutover planning to minimize downtime. Do you provide support for configuring my server? Unmanaged support is included: we handle hardware issues, network connectivity, and infrastructure problems 24/7. OS-level configuration (installing applications, tuning databases, hardening security) is your responsibility, but we offer optional managed services starting at fixed monthly fees for Linux/Windows administration, control panel setup (cPanel, Plesk, Hestia), security patching, and monitoring. Ask sales for a quote tailored to your needs. Show More Questions ============================================================================== # Game Dedicated Servers | High-Frequency CPU, 128-Tick, Anti-DDoS | DreamServer URL: https://dreamserver.ro/en/dedicated-servers/gameservers/ (RO: https://dreamserver.ro/ro/dedicated-servers/gameservers/) Game Dedicated Servers | High-Frequency CPU, 128-Tick, Anti-DDoS | DreamServer Home › Dedicated Servers › Game Servers High-Frequency Gaming Hardware • AS57050 Dedicated Game Servers in Romania Deploy low-latency dedicated game servers engineered for competitive multiplayer hosting. High-frequency CPUs (Intel i7-3770, i7-4790, i9-10900K, AMD Ryzen 9 3900X), Cisco Nexus vPC active-active networking, free DSIX peering with direct access to major Romanian ISPs, and RTBH DDoS mitigation on our BGP uplinks. Purpose-built for 128-tick Counter-Strike 2, Minecraft (Paper/Forge/Fabric), GTA SA-MP & open.mp, FiveM, Rust, ARK, Valheim, Garry's Mod and every modded community stack you can run on Linux or Windows Server. 128-Tick Ready Free DSIX Peering RTBH DDoS Mitigation AS57050 Hosting Since 2009 See Game Server Plans Contact Sales Game Server Network Architecture Every game server is dual-homed through Cisco Nexus switches over active-active vPC uplinks, so both ports forward traffic in parallel and a link or switch failure is absorbed without a single dropped packet. The fabric is engineered for sub-millisecond intra-datacenter latency , line-rate 10 Gbps throughput and symmetric forwarding, which is exactly what 128-tick FPS servers, real-time MMOs and competitive battle-royale lobbies need. Paired with free DSIX peering to every major Romanian ISP, your players reach the server on the shortest possible path, tick after tick. Game Servers with Dual-Port Active-Active vPC and Cisco Nexus Ultra-Low-Latency Switches Included with Every Game Server Peer for Free at DSIX, Low Ping to Every Romanian ISP Every dedicated game server ships with a free port to the DSIX Internet Exchange (AS58218). That means direct BGP peering with major Romanian ISPs , regional content networks, and hosting providers: no transit hops, no extra cost, and no bandwidth cap. Your players connect over the shortest possible path, cutting ping spikes and jitter during 128-tick action. <5 ms Typical ping from Romanian ISPs 10–25 ms Balkans & Central Europe 0 € DSIX peering fee, free forever Explore DSIX & Members See Game Server Plans Game Server Plans High-frequency dedicated game servers with Cisco Nexus vPC active-active networking, optimized for competitive gaming, modded servers, and always-on game hosting. Full root access, your choice of OS, and 24/7 engineering support included. 🚫 Sold Out All units of this server have been rented and it is currently out of stock. HyperCore i9 Intel i9-10900K 10 Cores / 20 Threads 128 GB RAM NIC: Intel X710-DA 2x10 Gbps Active-Active 20 TB /mo 20 IPv4 | 20 IPv6 128 GB OS SSD 5x SATA + 3x NVMe DC: DreamServer , Bucharest Setup: €30 €150 /month Sold Out 🚫 Sold Out All units of this server have been rented and it is currently out of stock. Ryzen Fury AMD Ryzen 9 3900X 12 Cores / 24 Threads 128 GB RAM NIC: Intel X710-DA 2x10 Gbps Active-Active 20 TB /mo 20 IPv4 | 20 IPv6 128 GB OS SSD 5x SATA + 3x NVMe DC: DreamServer , Bucharest Setup: €30 €140 /month Sold Out 🎉 Discount This server is available at a substantial discount. 🎁 Loyalty Gift Receive the server as a gift after 12 consecutive months of uninterrupted rental. Includes only the base configuration (128 GB OS SSD + minimum RAM). i7 4790 Intel i7 4790 4 Cores / 8 Threads 32 GB RAM NIC: Fujitsu D2735 2x1 Gbps Active-Active 10 TB /mo 20 IPv4 | 20 IPv6 128 GB OS SSD 4x SATA + 1x NVMe DC: DreamServer , Bucharest Setup: €30 €100 €70 /month Order Now 🎁 Loyalty Gift Receive the server as a gift after 12 consecutive months of uninterrupted rental. Includes only the base configuration (128 GB OS SSD + minimum RAM). ⚡ Limited Only 1-2 units remain in stock. Availability is limited. i7 3770 Intel i7 3770 4 Cores / 8 Threads 32 GB RAM NIC: Fujitsu D2735 2x1 Gbps Active-Active 10 TB /mo 20 IPv4 | 20 IPv6 128 GB OS SSD 4x SATA + 1x NVMe DC: DreamServer , Bucharest Setup: €30 €90 /month Order Now 🎁 🎮 🎁 🎮 👾 🎁 🎮 🎁 👾 🎁 🎮 🎁 👾 🎮 🎁 🎮 👾 🎁 🎮 🎁 ✨ ✨ ✨ ✨ ✨ ✨ ✨ ✨ 🎁 EXCLUSIVE GAMING LOYALTY PROGRAM Rent 12 Months, Keep Your Gaming Server Forever Gaming servers marked with the Loyalty Gift badge (our i7 3770 and i7 4790 builds) are yours to keep after 12 consecutive months of uninterrupted rental. Host your community, run your competitive stack, and when you decide to stop renting, take the hardware home. No strings attached. ✅ What the Gift Includes ✓ The physical server chassis and CPU (Intel i7 3770 or i7 4790) ✓ A single 128 GB OS SSD (the one the server ships with) ✓ The full 32 GB RAM (the chassis maximum, shipped as standard) ❌ What Is Not Included ✗ Extra storage drives (HDDs, SSDs, NVMe) beyond the OS drive ✗ The Fujitsu D2735 enterprise NIC is not included ; the server ships with the motherboard onboard network port only ✗ Any other components added during the rental period ⚠ No Warranty After Handover: Once you pick up your gifted gaming server, DreamServer provides no warranty or technical support for the hardware. The server is provided as-is, free of charge, and we cannot be held liable for any subsequent hardware failure. Why High-Frequency CPUs Win Game Server Battles Counter-Strike, Minecraft, Rust, GTA SA-MP, FiveM, Garry's Mod, Valheim. Nearly every competitive game engine pins its main simulation loop to a single thread. What matters is how fast that one core runs. That is why our gaming lineup ships with CPUs chosen for raw GHz, not core count : Intel i7-3770, i7-4790, i9-10900K and AMD Ryzen 9 3900X. Tick Rate Is Single-Thread Bound Source engine (CS2, CS:GO, TF2, GMod), Minecraft, Unity and Unreal run the authoritative game loop on one core. 128-tick CS2, 20-tick Minecraft Java, 30-tick Rust: every tick must finish physics, AI and networking before the next starts. Higher GHz means more headroom to hit target tickrate consistently, even with 64+ players online. Crisp Hit Registration Every millisecond spent on input handling, hitbox traversal and lag compensation is a millisecond your players feel. A 4.9 GHz i9-10900K core processes a single tick in roughly half the time of a budget 2.4 GHz VPS. The result: fewer "I shot first" moments, less rubberbanding and a snappier feel in ranked play. Headroom for Mods & Plugins A vanilla Minecraft server is one thing. Add 40 plugins, WorldGuard, McMMO, a 128-player community and a live map renderer, and you choke a weak core fast. High-GHz chips give you the spare cycles heavy mod stacks demand (Forge, Fabric, Paper, FiveM, Oxide) without dropping TPS below 20. Built for Competitive Gaming Everything you need to run a serious game-hosting operation: 128-tick CS2 headroom, network-level DDoS mitigation, full root access, and compatibility with every popular hosting panel and mod framework. 128-Tick Ready Our i9-10900K, Ryzen 9 3900X and i7-4790 builds handle 128-tick CS2 and CS:GO comfortably. Pair with the Intel X710-DA 10 GbE NIC for multi-match hosting where tick budget and bandwidth both matter. RTBH DDoS Mitigation We offer Remotely Triggered Black Hole (RTBH) filtering on our BGP uplinks. When a destination IP gets flooded, you can announce a blackhole community to us and the attack traffic is dropped at the upstream edge before it reaches your server, keeping the rest of your infrastructure reachable. Panel & Mod Friendly Full root, any OS (Debian, Ubuntu, AlmaLinux, Windows Server). Install Pterodactyl , AMP , WISP , LinuxGSM , or your own stack. Optional pre-install for Minecraft Paper/Forge/Fabric, CS2 metamod/sourcemod, MTA:SA, SA-MP/open.mp. Fast Deploy, Real Support Servers online within hours. 24/7 engineering support from real humans, not first-line triage bots. We have hosted Romanian and international gaming communities since 2009 and we know what serious hosting customers need. Included on All Dedicated Servers RTBH DDoS Mitigation with sFlow Telemetry We operate Remotely Triggered Black Hole (RTBH) filtering on our BGP uplinks, continuously monitored via sFlow telemetry on our edge routers. When traffic to a destination IP spikes above baseline, our sFlow collector detects the anomaly in real time and triggers a blackhole route over iBGP. The blackhole community is automatically announced to our upstream Transit Providers , so the attack traffic is dropped at their network edge before it ever reaches our network, while the rest of your infrastructure stays online. Your other match servers stay online during an attack. A DDoS aimed at one IP does not take the whole game-hosting fleet down, so players on the surviving IPs keep playing without ping spikes or disconnects. You can announce a blackhole community yourself (if you operate BGP with us) or simply ask our NOC to trigger it. RTBH is effective against volumetric L3/L4 floods (UDP, SYN, amplification). Layer 7 application-layer attacks fall outside the scope of RTBH and require application-level defenses such as a WAF, rate limiting, or caching that you implement at your own application tier. Attack traffic sFlow telemetry BGP blackhole announcement Games We Optimize For From competitive FPS and survival mods to persistent open-world RPGs, our hardware is tuned for the workloads gaming communities actually run. Do not see your title? Ask us . If it runs on Linux or Windows Server, we can host it. Counter-Strike 2 & CS:GO 128-tick, metamod, sourcemod Counter-Strike 1.6 AMX Mod X, ReHLDS, classic RO scene Minecraft Java Paper, Spigot, Forge, Fabric, Bukkit Minecraft Bedrock Nukkit, PocketMine, dedicated BDS GTA SA-MP & open.mp pawn scripts, MySQL backends MTA: San Andreas Lua scripts, custom gamemodes FiveM (GTA V) txAdmin, ESX, QBCore, alt:V ready Rust Oxide/uMod plugins, Carbon, RustEdit ARK: Survival Evolved & ASA Mods, clusters, Windows-ready Valheim Dedicated headless, Valheim Plus Garry's Mod DarkRP, TTT, workshop collections Team Fortress 2 SourceMod, MvM, community servers 7 Days to Die Alpha updates, ServerTools, mods Unturned RocketMod, LDM, OpenMod Palworld Dedicated, auto-restart, saves Project Zomboid Workshop mods, 64+ player runs Satisfactory Dedicated, blueprints, SMM Terraria TShock, tModLoader, Calamity Factorio Headless, mod portal sync DayZ Chernarus, Livonia, workshop mods Squad & Post Scriptum 100-player milsim servers Space Engineers Torch, plugins, persistent worlds Mordhau Custom maps, mutators TeamSpeak 3 / Mumble Voice alongside your game server Ready to level up your server? Get your game server deployed within hours. Full root access, your choice of OS, RTBH DDoS mitigation included, and support from real engineers. Contact Us Explore DSIX Peering Recommended Add-on Protect Your Game Server with Proxmox Backup Server Whether you run Minecraft, CS2, Rust, ARK, Valheim or a custom Source/GoldSrc community, your world saves, player databases, modpacks, and server configs are irreplaceable. Pair your game server with our Proxmox Backup Server service and schedule nightly snapshots into a deduplicated, encrypted, off-host store. The lightweight backup client runs on most modern Linux distributions and can capture flat files, MariaDB/MySQL dumps, and entire disks, so a hardware failure or a botched mod update no longer means losing months of player progress. Running multiple game instances under Proxmox VE on the same machine? PBS plugs in as a native storage target on the PVE node (Proxmox VE 8 or newer recommended), uses QEMU dirty bitmaps for fast incremental backups, and unlocks Live-restore so a stalled instance can boot while its world is still streaming back. Backups are encrypted client-side with AES-256-GCM, so the server only ever sees ciphertext. Incremental & Deduplication Encrypted, compressed chunks in flight Dedup match (chunk already stored) Single stored copy, N references Incremental + Deduplication Periodic backups produce mostly duplicate data. The client sends only changed blocks; the server splits data into fixed or variable sized chunks and collapses identical ones across all hosts and snapshots. A fleet of VMs sharing one OS image stores that OS once. ZSTD Compression Zstandard handles several gigabytes per second on modern CPUs while keeping a high compression ratio. Backups stay fast and storage stays small, with no perceptible CPU pressure on the source host. End-to-end Encryption Authenticated AES-256 in Galois/Counter Mode (GCM) runs on the client, before any byte leaves the host. An optional RSA master key pair safely stores and recovers the backup key, which you can print for offline, disaster-proof storage. SHA-256 Integrity Every backup ships with a manifest (index.json) listing every file, size, and SHA-256 checksum. Schedule verification jobs to catch bit rot. The same checksums drive cross-machine deduplication, so identical OS chunks are stored once across your fleet. Granular Recovery Why restore everything when you can restore one file? Browse the snapshot catalog, pull individual files or directories from a VM image, drop into an interactive recovery shell, or Live-restore a guest that boots while data is still streaming back. Learn About Proxmox Backup Order Backup Storage Schedule nightly snapshots, restore a single world file in seconds, sleep peacefully. Frequently Asked Questions Everything you need to know before ordering a dedicated game server. Why do game servers need high-frequency CPUs instead of many cores? Most game server engines (Source/CS2, Minecraft, Unity, Unreal, Rust, SA-MP, FiveM) run the authoritative game loop on a single thread. Target tickrate (128 ticks/sec for CS2, 20 for Minecraft Java, 30 for Rust) must complete within its time budget on one core. Higher GHz directly increases tickrate headroom and reduces per-tick latency, which players feel as crisper hit registration and less rubberbanding. What games can I host on DreamServer game servers? Counter-Strike 2 / CS:GO / CS 1.6, Minecraft Java (Paper, Spigot, Forge, Fabric, Bukkit), GTA SA-MP / open.mp, MTA: San Andreas, FiveM (GTA V), Rust, ARK, Valheim, Garry's Mod, Team Fortress 2, 7 Days to Die, Unturned, Palworld, Project Zomboid, Satisfactory, Terraria, Factorio, DayZ, Squad, Space Engineers, Mordhau, and more. If it runs on Linux or Windows Server, we can host it. Do you offer DDoS mitigation for game servers? Yes. We offer Remotely Triggered Black Hole (RTBH) filtering on our BGP uplinks. When a destination IP gets flooded, you can announce a blackhole community to us and the attack traffic is dropped at the upstream edge before it reaches your server, keeping the rest of your infrastructure reachable. Can I install Pterodactyl, AMP, or my own game panel? Yes. Full root access, any OS. Install Pterodactyl, AMP, WISP, LinuxGSM, or a custom stack. We also pre-install popular stacks (Minecraft Paper/Forge/Fabric, CS2 metamod/sourcemod, MTA:SA, SA-MP/open.mp) on request at order time. Is DSIX peering really free for game servers? Yes, 100% free. Every game server includes a free port to DSIX Internet Exchange (AS58218), giving you direct peering with major Romanian ISPs and regional content networks. No setup fee, no monthly fee, no bandwidth cap. Do your servers support 128-tick CS2 / CS:GO? Yes. Our i9-10900K (4.9 GHz boost), Ryzen 9 3900X (4.6 GHz boost), and i7-4790 (4.0 GHz boost) builds handle 128-tick CS2 and CS:GO comfortably. Multiple 128-tick match servers can run concurrently on a single box with proper core pinning. What latency can players in Romania and the Balkans expect? Players on major Romanian ISPs typically see under 5 ms to our Bucharest datacenter thanks to DSIX peering. Players across the Balkans and Central Europe see 10-25 ms. Western Europe sees 30-50 ms. Latency is measured over our Cisco Nexus vPC fabric with cut-through switching. What about mod support (Forge, Fabric, FiveM, Oxide)? Full mod support. Root access lets you install any modloader or game framework: Minecraft Forge/Fabric/NeoForge/Quilt, FiveM/alt:V for GTA V, SA-MP/open.mp for GTA SA, Garry's Mod workshop content, Rust Oxide plugins. Heavy modded stacks benefit from our high-GHz CPUs. Can I run a voice server (TeamSpeak, Mumble) alongside the game server? Yes. Voice servers are lightweight and run fine alongside a game server on the same dedicated hardware. Common combos: CS2 + TeamSpeak 3 or Mumble; Minecraft + voice chat relay. Do you offer Windows Server for game hosting? Yes, Windows Server is available alongside Linux distributions (Debian, Ubuntu, AlmaLinux). Some games and tooling prefer Windows; you pick the OS at order time. Show More Questions ============================================================================== # Micro Dedicated Servers | Backup, VPN, DNS & Always-On Hosting from €200/year | DreamServer URL: https://dreamserver.ro/en/dedicated-servers/microservers/ (RO: https://dreamserver.ro/ro/dedicated-servers/microservers/) Micro Dedicated Servers | Backup, VPN, DNS & Always-On Hosting from €200/year | DreamServer Home › Dedicated Servers › Micro Servers Bare Metal from €200/year • AS57050 Micro Dedicated Servers in Romania Low-power, always-on bare metal designed for the jobs where a VPS feels flimsy and a full dedicated server is overkill. Intel Celeron N2807 or AMD G-T48E, 8 GB RAM , a 128 GB SSD on SATA adapter , and USB 3.0 / USB 2.0 ports ready for external HDDs or SSDs , ideal for cheap bulk backup storage. Perfect for backup targets, VPN endpoints (WireGuard/OpenVPN), DNS resolvers (Pi-hole, AdGuard Home), home labs, Nextcloud, Git servers, Discord/Telegram bots, uptime monitors, and any always-on service that deserves its own dedicated hardware. Low-Power Always-On USB External Storage Ready 🎁 Loyalty Gift After 12 Months AS57050 See Micro Server Plans Contact Sales Micro Server Plans All prices exclude VAT. Annual billing. Setup fee €10. Both models include the Loyalty Gift badge, after 12 consecutive months you can keep the hardware. 🎁 Loyalty Gift Receive the server as a gift after 12 consecutive months of uninterrupted rental. Includes only the chassis, CPU, 8 GB RAM, and the 128 GB OS SSD on its SATA adapter. External USB drives are your own hardware. ✅ In Stock Available for immediate provisioning, usually within 24 hours of order. Micro Intel Intel Celeron N2807 2 Cores / 2 Threads 8 GB RAM 128 GB SSD (SATA adapter) 1x 1 Gbps port 10 TB /mo 1 IPv4 | 1 IPv6 USB: 1x 3.0 + 2x 2.0 DC: DreamServer , Bucharest Setup: €10 €220 /year Order Now 🎁 Loyalty Gift Receive the server as a gift after 12 consecutive months of uninterrupted rental. Includes only the chassis, CPU, 8 GB RAM, and the 128 GB OS SSD on its SATA adapter. External USB drives are your own hardware. ✅ In Stock Available for immediate provisioning, usually within 24 hours of order. Micro AMD AMD G-T48E 2 Cores / 2 Threads 8 GB RAM 128 GB SSD (SATA adapter) 1x 1 Gbps port 10 TB /mo 1 IPv4 | 1 IPv6 USB: 3x 2.0 DC: DreamServer , Bucharest Setup: €10 €200 /year Order Now 🎁 💾 🎁 💾 🖥 🎁 💾 🎁 🖥 🎁 💾 🎁 🖥 💾 🎁 💾 🖥 🎁 💾 🎁 ✨ ✨ ✨ ✨ ✨ ✨ ✨ ✨ 🎁 EXCLUSIVE MICRO LOYALTY PROGRAM Rent 12 Months, Keep Your Micro Server Forever Both micro server models ( Micro Intel and Micro AMD ) ship with the Loyalty Gift badge. After 12 consecutive months of uninterrupted rental, the physical box is yours to keep. Take it home, plug it in anywhere, run it on your own internet, or just mount it in a closet and forget about it. ✅ What the Gift Includes ✓ The physical micro chassis and CPU (Intel Celeron N2807 or AMD G-T48E) ✓ The internal 128 GB SSD on its SATA adapter (the drive the server ships with) ✓ The full 8 GB RAM (standard, the chassis maximum) ❌ What Is Not Included ✗ External USB HDDs or SSDs attached during rental are your own hardware and will be detached before handover ✗ Power supply spares or replacement parts beyond the original shipped unit ✗ Any other components added during the rental period ⚠ No Warranty After Handover: Once you pick up your gifted micro server, DreamServer provides no warranty or technical support for the hardware. The server is provided as-is, free of charge, and we cannot be held liable for any subsequent hardware failure. Perfect for These Use Cases Micro servers shine in the quiet, reliable, always-on workloads where a VPS feels too restrictive and a full dedicated server is overkill. Attach USB drives for cheap bulk storage and you have an incredibly capable little box. Backup & Storage Server Plug external HDDs or SSDs into the USB 3.0 port (on the Intel model) for fast multi-terabyte backup targets. Run restic, borg, rsync, Duplicati, Syncthing, or Nextcloud. Offsite backup for your home lab or small business at a fraction of cloud costs. VPN & DNS Endpoint Low-power always-on bare metal is ideal for WireGuard , OpenVPN , Tailscale exit nodes, plus Pi-hole , AdGuard Home , or Unbound DNS resolvers. Romanian IP for your traffic with dedicated hardware reliability. Home Lab & Dev Run a personal Gitea/Forgejo, a Docker host for side projects, Nextcloud for family photos, Jellyfin media server, Home Assistant relay, or a small Proxmox hypervisor with a handful of LXC containers. Real bare metal, no noisy neighbours. Bots, Monitoring & Always-On Services Discord/Telegram/Matrix bots, Uptime Kuma, Grafana + Prometheus, small web honeypots, mail relays, Caddy reverse proxies, static-site builders, scheduled cron jobs, IRC bouncers (ZNC), Murmur voice servers. Quiet machines that just work. Your own bare metal for less than a euro a day Deploy a dedicated micro server in under 24 hours. No shared-hosting compromises, no virtualization overhead, no noisy neighbours. Full root access, your choice of Linux, and USB external storage ready to plug in. Order Now Try a VPS Try a VDS Included on All Dedicated Servers RTBH DDoS Mitigation with sFlow Telemetry We operate Remotely Triggered Black Hole (RTBH) filtering on our BGP uplinks, continuously monitored via sFlow telemetry on our edge routers. When traffic to a destination IP spikes above baseline, our sFlow collector detects the anomaly in real time and triggers a blackhole route over iBGP. The blackhole community is automatically announced to our upstream Transit Providers , so the attack traffic is dropped at their network edge before it ever reaches our network, while the rest of your infrastructure stays online. Your small always-on services (VPN endpoints, DNS resolvers, Git mirrors, Nextcloud, backup targets, monitoring collectors) stay reachable on every IP that is not being flooded. No heavy DDoS appliance is required on the tiny chassis itself. You can announce a blackhole community yourself (if you operate BGP with us) or simply ask our NOC to trigger it. RTBH is effective against volumetric L3/L4 floods (UDP, SYN, amplification). Layer 7 application-layer attacks fall outside the scope of RTBH and require application-level defenses such as a WAF, rate limiting, or caching that you implement at your own application tier. Attack traffic sFlow telemetry BGP blackhole announcement Recommended Add-on Pair Your Micro Server with Proxmox Backup Server Even small servers carry critical data: VPN credentials, DNS zone files, DHCP leases, internal Git repos, dev environments. Pair your micro server with our Proxmox Backup Server service . The lightweight backup client runs on most modern Linux distributions, so you can back up files, directories, and entire disks from your micro server into a centralised, deduplicated, encrypted store hosted in our datacenter. Encryption happens client-side with AES-256-GCM, before any byte leaves the box. A micro server can also act as a Proxmox VE host for one or two lightweight VMs or LXC containers. If that is your setup, PBS plugs in as a native storage target on the Proxmox VE node (Proxmox VE 8 or newer recommended), uses QEMU dirty bitmaps for fast incremental backups, and unlocks Live-restore so a guest can boot while data is still streaming back. Incremental & Deduplication Encrypted, compressed chunks in flight Dedup match (chunk already stored) Single stored copy, N references Incremental + Deduplication Periodic backups produce mostly duplicate data. The client sends only changed blocks; the server splits data into fixed or variable sized chunks and collapses identical ones across all hosts and snapshots. A fleet of VMs sharing one OS image stores that OS once. ZSTD Compression Zstandard handles several gigabytes per second on modern CPUs while keeping a high compression ratio. Backups stay fast and storage stays small, with no perceptible CPU pressure on the source host. End-to-end Encryption Authenticated AES-256 in Galois/Counter Mode (GCM) runs on the client, before any byte leaves the host. An optional RSA master key pair safely stores and recovers the backup key, which you can print for offline, disaster-proof storage. SHA-256 Integrity Every backup ships with a manifest (index.json) listing every file, size, and SHA-256 checksum. Schedule verification jobs to catch bit rot. The same checksums drive cross-machine deduplication, so identical OS chunks are stored once across your fleet. Granular Recovery Why restore everything when you can restore one file? Browse the snapshot catalog, pull individual files or directories from a VM image, drop into an interactive recovery shell, or Live-restore a guest that boots while data is still streaming back. Learn About Proxmox Backup Order Backup Storage Tight integration with Proxmox VE 8 or newer, certificate-fingerprint pinned, deployable in minutes. Frequently Asked Questions Everything you need to know before ordering a micro dedicated server. What are micro dedicated servers good for? Micro servers are low-power, always-on bare metal ideal for backup targets, VPN endpoints (WireGuard, OpenVPN), DNS resolvers (Pi-hole, AdGuard Home), Git repositories, small home-lab services, Nextcloud, uptime monitors, Discord/Telegram bots, web honeypots, and any lightweight service that benefits from running on dedicated hardware rather than a VPS. Can I attach external hard drives via USB? Yes. Both micro models have USB ports you can use for external HDDs or SSDs. The Intel model provides 1x USB 3.0 port (great for fast backup targets up to ~400 MB/s real-world) plus 2x USB 2.0. The AMD model provides 3x USB 2.0 ports. USB-attached drives are perfect for adding cheap bulk storage without paying for premium NVMe or SAS in the chassis. What is the 128 GB SSD on SATA adapter? The internal 128 GB OS drive is a standard SATA-interface SSD mounted on an adapter inside the micro chassis. It hosts your OS and core application data at full SATA speeds. For larger datasets, pair it with external USB drives. How does the Loyalty Gift work for micro servers? After 12 consecutive months of uninterrupted rental, the physical micro server is yours to keep free of charge. The gift includes the chassis, CPU, 8 GB RAM, and the 128 GB OS SSD on its SATA adapter. External USB drives you attached during the rental are your own hardware and are not part of the handover either way. No warranty or support is provided after handover. Can I run Windows Server on a micro server? Technically yes, but with 2 cores and 8 GB RAM, Windows Server is heavy for these machines. We strongly recommend Linux (Debian, Ubuntu LTS, AlmaLinux, Alpine) for best performance and stability. FreeBSD and OpenBSD also run well. Can I upgrade the RAM or CPU? No. Micro chassis ship with soldered or fixed configurations and do not support CPU/RAM upgrades. If you need more horsepower, consider our Enterprise, Blade, or Game Servers, or pair the micro with external USB storage for capacity expansion. Is this suitable for running a website? Yes, for small sites. A micro server handles personal sites, wikis, static sites, small WordPress installs, or a few Docker containers comfortably. For higher-traffic sites, database-heavy apps, or multi-tenant hosting, look at our Enterprise or Blade lines. Why yearly billing instead of monthly? Yearly billing lets us price micro servers more aggressively (effectively under 1 EUR/day) and reduces admin overhead for long-running low-cost hardware. Most customers use micro servers for always-on multi-year services anyway. Is DSIX peering included? Micro servers ship with a standard 1 Gbps port and full internet transit, but direct BGP peering with DSIX is primarily offered on our Enterprise, Blade, and Game Server lines. For micro customers in Romania, standard transit already provides sub-10 ms latency to most local ISPs. Where is the datacenter? All DreamServer dedicated servers are hosted in our own datacenter in Bucharest, Romania, within EU jurisdiction. Redundant power, N+1 cooling, multi-carrier fiber uplinks, on-site staff. What Linux distribution do you recommend for a micro server? For most always-on workloads we recommend Debian stable or Ubuntu LTS , which offer the best combination of package coverage, long support windows, and low resource usage. AlmaLinux or Rocky Linux are great if you need RHEL compatibility. For the most minimal footprint (lightweight VPN endpoints, single-purpose boxes), Alpine Linux works excellently with its musl-based toolchain and tiny base image. Can I run Docker or Podman containers on a micro server? Yes. Both Docker and Podman run well on micro servers within the 8 GB RAM budget. Typical setups handle 5-15 small containers comfortably (reverse proxy, small databases, bots, static site builders, monitoring agents). For heavier container workloads (Kubernetes control plane, many large images, production multi-tenant setups), consider our Enterprise or Blade line instead. Does RTBH DDoS mitigation apply to micro servers? Yes. Every micro server sits behind the same AS57050 network with sFlow-monitored RTBH filtering on our BGP uplinks. If a flood targets your micro IP, we (or you, if you run BGP with us) can announce a blackhole community to drop the attack at the upstream edge before it reaches our network. See the RTBH section on this page for the full flow. Can I migrate from another hosting provider to a micro server? Yes. You get full root access from day one. For data migration, use rsync, scp, tar over SSH, or any backup/restore tool your current provider supports. Our NOC can assist with cutover planning (DNS TTL lowering, staged sync, final switchover) to minimize downtime during the move. Can I send outbound SMTP or run a mail server? Outbound SMTP on port 25 is rate-limited by default to discourage spam abuse. If you run a legitimate mail server with proper MX, SPF, DKIM, DMARC and matching reverse DNS, we will unrestrict port 25 on request. We also provide PTR/rDNS configuration for all your IPs so mail acceptance from major providers works out of the box. Show More Questions ============================================================================== # DSIX Internet Exchange Romania | AS58218 | Bucharest IXP | DreamServer URL: https://dreamserver.ro/en/dsix/ (RO: https://dreamserver.ro/ro/dsix/) DSIX Internet Exchange Romania | AS58218 | Bucharest IXP | DreamServer Home › DSIX Internet Exchange Peering in Romania DSIX Internet Exchange AS58218 IX-F ID 939 Euro-IX Listed Founded 2021 While DSIX had been operating informally before, it was officially established on April 4, 2021 with the support of Arnold Nipper , Co-Founder and Chief Technology Evangelist at DE-CIX , who helped DreamServer obtain the official IXF-ID 939 in the Euro-IX IXP Database. We are deeply grateful for his guidance and trust in our vision. DSIX operates on peering LAN 185.0.0.0/24 (IPv4) and 2001:7f8:133::/64 (IPv6). What is an Internet Exchange? An Internet Exchange Point (IXP) is a physical location where different networks, ISPs, content providers, and enterprises connect to exchange traffic directly, rather than routing through expensive upstream transit providers. By peering at an IXP, networks reduce latency (traffic takes the shortest path), lower bandwidth costs (local traffic stays local), and improve redundancy (multiple peering paths available). DSIX is Romania's community-driven Internet Exchange operated by DreamServer in Bucharest. We offer free peering ports to all DreamServer customers, making it easy to join the exchange and start benefiting from direct interconnection. View Members PeeringDB Connected Members At DSIX, we believe every great connection starts with a dream. Welcome aboard, let's build faster, smarter networks together. Loading members... Four dedicated pages, one exchange Explore DSIX in Depth The operational detail that used to live on this page now has its own home. Pick the section that matches what you're trying to do. Admission How to Join Membership requirements, port-security policies, L2/VLAN rules, prohibited protocols and vendor-specific switch configs. Everything from signed contract to first BGP session. Read the admission guide Operator Tools Route Servers & Tools RS1/RS2 BIRD 2.x details, public looking glasses, the full BGP community schema and a browser-based config generator for BIRD, FRR, MikroTik RouterOS 7 and Cisco IOS. Open the operator toolbox DNS Service AS112 Service Anycast authoritative responder for reverse DNS queries on RFC 1918 and link-local ranges. Free for every DSIX member, RFC 7534 / RFC 7535 compliant, dual-stack. See AS112 addresses Required Route Collector Passive BGP listener at AS65432 that every member peers with. Powers exchange monitoring, leak detection and PeeringDB / IX-F Member Export. Required for membership. RC addresses & policy Frequently Asked Questions Everything you need to know about peering at DSIX. What is DSIX? DSIX (DreamServer Internet Exchange) is a community Internet Exchange Point in Bucharest, Romania, operated under AS58218. It allows networks to peer directly and exchange traffic locally instead of routing through expensive upstream transit providers. Is DSIX peering free? Yes. DSIX peering is free for all DreamServer dedicated server and VPS customers. No setup fee, no monthly fee, no bandwidth cap. Both 1 Gbps and 10 Gbps ports are available. What is DSIX ASN? DSIX operates under Autonomous System Number AS58218. Members peer via route servers at 185.0.0.1 and 185.0.0.254 (IPv4) and 2001:7f8:133::5:8218:1/2 (IPv6). How do I join DSIX? Order any DreamServer dedicated server or VPS, then email noc@dreamserver.ro with your ASN, PeeringDB profile, and preferred port speed. We provision new members within 24 hours. What peering policy does DSIX have? DSIX has an open peering policy via route servers. Bilateral peering is also supported between members. Does DSIX support RPKI? Yes. DSIX route servers perform RPKI ROA validation and fall back to IRR database filtering if ROA is unknown. Invalid prefixes are dropped. Where is DSIX located? DSIX is hosted in the DreamServer datacenter in Bucharest, Romania, within the European Union jurisdiction. How many members does DSIX have? DSIX currently has over 15 active members, including ISPs, hosting providers, content networks, and DNS operators. The list is updated automatically from the IX-F Member Export API. What port speeds does DSIX offer? DSIX offers 1 Gbps and 10 Gbps ports. Both speeds are free for DreamServer customers, regardless of port type. Upgrades between port speeds are free and typically completed within 24 hours. Does DSIX provide a looking glass? Yes. DSIX operates a public looking glass where you can run BGP show commands, trace routes, and view prefixes announced by members. Access is available via the DSIX portal after joining. Is IPv6 required for DSIX peering? IPv6 is strongly encouraged but not strictly required. Dual-stack members (IPv4 + IPv6) gain full benefit from modern internet traffic patterns. DSIX route servers fully support both address families. Can I do bilateral peering at DSIX? Yes. While DSIX route servers simplify peering by default, you can also establish bilateral BGP sessions directly with other members. Contact information and IPs are published in the member list and on PeeringDB. Show More Questions ============================================================================== # AS112 DNS Service | Anycast Reverse DNS at DSIX | DreamServer URL: https://dreamserver.ro/en/dsix/as112/ (RO: https://dreamserver.ro/ro/dsix/as112/) AS112 DNS Service | Anycast Reverse DNS at DSIX | DreamServer Home › DSIX › AS112 Service AS112 • RFC 7534 / RFC 7535 • Free for DSIX members AS112 DNS Service at DSIX Anycast authoritative responder for reverse DNS queries on private (RFC 1918) and link-local IP ranges. Stops reverse lookups for 10.0.0.0/8 , 172.16.0.0/12 , 192.168.0.0/16 and 169.254.0.0/16 from leaking to the global DNS, with sub-millisecond response time for every DSIX peer. Peering addresses Join DSIX first Why it exists Private-IP reverse DNS leaks, and AS112 stops them at the exchange End-user devices, hypervisors, containers and middleboxes constantly fire reverse DNS queries for private ranges: 10.0.0.1 , 192.168.1.254 , 169.254.x.y . Without a local sink, each query travels up the DNS hierarchy to the root servers, which see them as garbage traffic. AS112 is the IETF-standardised answer. A distributed anycast responder returns an authoritative NXDOMAIN for those zones, immediately and locally. At DSIX we run a compliant node so every peer's resolver gets the answer in microseconds over the peering fabric, not hundreds of milliseconds from the global root. Deploying at an IX is the recommended operational model under RFC 7534 ; the DSIX node also implements the empty-zone DNAME redirection of RFC 7535 . Prefixes handled 10.0.0.0/8 Private Class A • RFC 1918 172.16.0.0/12 Private Class B • RFC 1918 192.168.0.0/16 Private Class C • RFC 1918 169.254.0.0/16 Link-local • RFC 3927 How the Node Is Built Production-grade hardware and software, audited against the current AS112 operator guidelines. BIND 9 on Ubuntu 24.04 LTS Industry-standard DNS server on long-term-support Linux Anycast on DSIX LAN1 Reachable via BGP to every DSIX member, bilaterally or via RS RFC 7534 & RFC 7535 Full spec compliance, including DNAME empty-zone redirection Dual-stack IPv4/IPv6 Same service on both address families, no feature gap Peer with us AS112 Peering Addresses Configure a BGP session against these addresses, or rely on the DSIX route servers to push the AS112 prefixes automatically. LAN Protocol Address ASN Looking Glass LAN1 IPv4 185.0.0.252 112 View LG › LAN1 IPv6 2001:7f8:133::112 112 View LG › Best practice: peer bilaterally for direct performance, and keep the route-server session as a fallback. Maintain a permissive import filter accepting AS 112's four anycast prefixes, no others. For questions or maintenance windows contact noc@dreamserver.ro . Frequently Asked Questions Everything operators ask before turning on the service. What is AS112? AS112 is a globally standardized anycast service for reverse DNS queries of private (RFC 1918) and link-local IP ranges. It returns authoritative null responses for 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 and 169.254.0.0/16, preventing those queries from propagating onto the public internet where they cause load on root name servers and slow down operating system calls. Why do I need AS112 on my network? Even well-configured networks leak reverse DNS queries for private IPs. Without a local AS112 sink, those queries travel upstream to root and TLD servers, creating unnecessary traffic, hitting rate limits, and occasionally freezing applications that are waiting for a resolver answer. Peering with AS112 at DSIX makes the response instant and local. Is the AS112 service free? Yes, absolutely. AS112 is included at no cost with your DSIX membership. You only need to establish a BGP session with the AS112 node to start receiving service. What RFCs does DSIX AS112 implement? Our AS112 node is fully compliant with RFC 7534 (AS112 nameserver operations) and RFC 7535 (DNAME redirection of the empty zones), the two current IETF standards for the service. It also implements the pre-RFC convention of AS 112 for historical compatibility. What hardware and software runs the AS112 node? The DSIX AS112 node runs BIND 9 on Ubuntu 24.04 LTS, deployed on our own infrastructure in Bucharest, Romania. It is dual-stack (IPv4 and IPv6) and peers on the DSIX LAN1 fabric. How do I establish a BGP session with AS112? Configure your router to peer with 185.0.0.252 for IPv4 and 2001:7f8:133::112 for IPv6, both in AS 112. The node peers bilaterally with members and is also present on the DSIX route servers, so many members pick it up automatically through route-server policy. Will AS112 ever announce my prefixes or forward traffic? No. AS112 only announces the four anycast service prefixes for its own zones. It does not accept inbound prefix announcements from peers and never forwards data-plane traffic. It is a responder-only node. How do I verify AS112 is working correctly? Run a dig query for a private IP reverse record, e.g. dig -x 10.0.0.1 @your-router. If AS112 is working, you will get an SOA/NXDOMAIN response from prisoner.iana.org, blackhole-1 or blackhole-2, with sub-millisecond latency when queried through DSIX. A normal resolver without AS112 would take 100-500ms to return the same NXDOMAIN. Can I run my own AS112 node and announce the same prefixes? Yes. AS112 is explicitly designed to be anycasted by many operators worldwide. Running your own node complements rather than conflicts with the DSIX node. Check RFC 7534 for the authoritative operational guide. What happens if AS112 is down? Queries fall back to root name servers and eventually return NXDOMAIN through the normal DNS hierarchy, just slower. Service outages on AS112 therefore degrade rather than break reverse DNS on private ranges. DSIX monitors the node 24/7 and applies standard DSIX maintenance windows for any planned work. Does AS112 affect my firewall policy? Only at BGP level: you accept the four reverse-DNS prefixes from AS 112 (or via the DSIX route servers). No special dataplane firewall changes are required because traffic is standard DNS on UDP/TCP port 53. Who do I contact if I have AS112 problems? Reach out to noc@dreamserver.ro for operational issues, or open a ticket through the Client Area. For deep technical discussion about AS112 in general, the IETF DNSOP list is the global forum. Show 9 more questions ============================================================================== # How to Join DSIX | Membership Requirements & Switch Setup | DreamServer URL: https://dreamserver.ro/en/dsix/join/ (RO: https://dreamserver.ro/ro/dsix/join/) How to Join DSIX | Membership Requirements & Switch Setup | DreamServer Home › DSIX › How to Join Membership requirements, policies, switch setup How to Join DSIX A single page covering everything a new member needs: admission requirements, filtering and port-security policies, L2/VLAN rules, prohibited protocols, vendor-specific switch configurations and what happens if your port breaks house rules. Read it once, paste the vendor config, raise a ticket, peer. Apply for membership Read requirements first Before You Apply Membership Requirements DSIX follows industry-standard peering exchange requirements. Review the checklist below before requesting a peering port. ✓ Mandatory Requirements ✓ Valid public ASN Registered with RIPE NCC, ARIN, APNIC, LACNIC, or AFRINIC. ✓ At least one routable prefix Minimum /24 for IPv4 or /48 for IPv6, properly allocated by your RIR or sponsor. ✓ Up-to-date PeeringDB profile Many members now require peers to have a valid PeeringDB entry. Keep yours current. ✓ Complete RIPE DB objects aut-num, route/route6, and maintainer objects must be in place. Route servers filter based on IRR data. ✓ Valid abuse contact A working abuse-c email address registered with your RIR, monitored and responsive. ✓ BGP-capable router Hardware or software router (Cisco, Juniper, MikroTik, Bird, FRRouting, OpenBGPD, etc.) connected to the exchange. ✓ Peer with the Route Collector All new members must peer with AS65432 (the DSIX Route Collector) for administrative monitoring. ★ Recommended Best Practices ★ Open peering policy Accept peering with all DSIX members by default. Selective and mandatory policies are allowed but less efficient. ★ Publish RPKI ROAs Create Route Origin Authorizations at your RIR. Route servers prefer RPKI-valid announcements over IRR fallback. ★ Maintain an AS-SET macro Publish as-set / as-macro with all downstream ASNs you announce. Required for IRR-based filtering. ★ MANRS compliance Adopt the MANRS Actions: filter your announcements, prevent IP spoofing, maintain accurate contact info, publish routing data. ★ Dual-stack (IPv4 + IPv6) Run BGP sessions on both protocols. Modern internet services benefit significantly from native IPv6. ★ Max-prefix limits Configure max-prefix limits per peer to protect against accidental leaks. DSIX route servers enforce sensible defaults per ASN. ★ Peer with AS112 Recommended to peer with our AS112 service for anycast reverse DNS of RFC 1918 and link-local ranges. ! Port & Layer 2 Rules (Enforced) ✗ Single MAC address per port (auto-disabled if violated) ✗ No link-local protocols: STP, RSTP, MSTP, CDP, LLDP, EDP, FDP, UDLD, keepalive, MOP ✗ No broadcast or multicast storms (rate-limited and monitored) ✗ No IP redirects, proxy ARP, or directed broadcasts on the peering interface ✗ Unique VLAN per DSIX connection, not shared with other networks ✗ No announcement of the DSIX peering LAN prefix (185.0.0.0/24, 2001:7f8:133::/64) Requirements align with MANRS , RIPE , and Euro-IX best practices. New members go through a quarantine process verifying Layer 2 compliance before being activated in the production peering fabric. Policies & Security DSIX enforces strict routing and Layer 2 security policies to protect the exchange fabric. Filtering Policy 1 Drop small prefixes, longer than /24 (IPv4) and /48 (IPv6) 2 Drop all well-known martians and bogon prefixes 3 Ensure AS path length is between 1 and 64 ASNs 4 Verify peer AS matches first AS in the AS path 5 Drop prefixes where next-hop IP doesn't match peer IP (prevents hijacking) 6 Drop prefixes with transit network ASNs in the path 7 Verify origin AS is in the client's registered IRRDB AS-SET 8 RPKI Valid → Accept the prefix 9 RPKI Invalid → Drop the prefix 10 RPKI Unknown → Fall back to standard IRRDB prefix filtering RFC1997 well-known communities (NO_EXPORT) are passed through. DSIX Looking Glass Port Security Broadcast Traffic Storm Control Strict limits on broadcast traffic per port. While low-level Layer 2 broadcasts (ARP) are normal, excessive broadcast traffic indicates misconfigurations, failing hardware, or firmware issues. Broadcast frames propagate across the flat peering LAN and can disrupt all members. Frames exceeding the threshold are dropped automatically. Multicast Traffic Storm Control Multicast traffic is limited per port. Small amounts (IPv6 neighbor discovery) are expected, but excessive multicast on non-multicast ports indicates configuration issues. Frames exceeding the allowed rate are dropped. Single MAC Address per Port All traffic on a DSIX port must originate from a single MAC address registered in static Layer 2 ACLs. Frames from unregistered MACs are dropped. Planned maintenance changing MAC addresses must be communicated to DSIX operations in advance. Multiple MACs usually indicate: misconfigured routers forwarding link-local traffic, Layer 2 loops between DSIX ports, leaked frames from external networks, or faulty hardware. Continuous Monitoring: DSIX monitors all peering LANs for broadcast traffic in real-time. Unauthorized or excessive traffic triggers immediate follow-up with the source member. Switch Connectivity Guidelines Official DSIX guidelines for connecting Layer 2 equipment. Improper configuration can cause automatic port shutdowns or degraded connectivity for all members. General Policy Members may connect their DSIX port to a Layer 2 switch and forward peering traffic to a router elsewhere in their network. However, the switch must ensure only traffic from the authorized router subinterface reaches the DSIX port. Warning: If more than one MAC address is detected on a port, DSIX automated protection will immediately disable the port for a cooling-off period. Your network will be temporarily disconnected. VLAN and Traffic Isolation Each DSIX connection must operate on a unique VLAN . VLANs must not be shared between: ✗ Multiple DSIX ports belonging to the same member ✗ DSIX ports and any other non-DSIX networks Prohibited Link-Local & Discovery Traffic Members must disable all link-local and discovery protocols on DSIX-facing interfaces: STP / RSTP / MSTP CDP LLDP EDP / FDP UDLD Keepalive MOP MAC Address Policy Enforcement If multiple MAC addresses are observed on a DSIX port: ● Port automatically disabled for minimum 5 minutes ● Significant packet loss or instability until resolved Recommended Vendor Configurations Cisco Cisco IPv6 Extreme Brocade Router Interface ! Cisco IOS/IOS-XE - DSIX-facing switch interface interface GigabitEthernetx/x spanning-tree bpdufilter enable no keepalive no cdp enable udld port disable no lldp transmit no lldp receive ! For older hardware without bpdufilter: ! spanning-tree bpduguard enable ! Cisco IOS - DSIX router interface (IPv4 + IPv6) interface GigabitEthernetx/x no ip redirects no ip proxy-arp no ip directed-broadcast no mop enabled no cdp enable udld port disable ! IPv6 specific no ipv6 redirects ipv6 nd suppress-ra # Extreme Networks - disable EDP and STP disable edp ports disable stpd ports # Brocade / Foundry - disable FDP and Spanning Tree no link-keepalive ethernet x/y interface ethernet x/y no fdp enable no spanning-tree ! Cisco IOS - Recommended router interface commands interface GigabitEthernetx/x no ip redirects no ip proxy-arp no ip directed-broadcast no mop enabled no cdp enable udld port disable Best Practices ✓ Assign a dedicated VLAN per DSIX connection ✓ Disable all Layer 2 control, discovery, and maintenance protocols ✓ Use proper LACP or link redundancy, avoid creating Layer 2 loops ✓ Monitor port statistics and MAC address tables regularly ✓ Maintain out-of-band management for faster recovery New Connection Quarantine: All new DSIX ports go through a quarantine process verifying: no discovery protocols (CDP, LLDP), keepalive/MOP disabled, no spanning tree BPDUs, correct 802.1q tagging. Your port will be activated once it passes all checks. Frequently Asked Questions What members ask before and after setting up their session. Who can become a DSIX member? Any organisation that operates a registered ASN, has its own IPv4 and/or IPv6 address space, and runs a BGP-capable router reachable at our Bucharest colocation. That includes ISPs, hosting providers, content networks, corporate AS operators and research networks. Sole individuals without an ASN are not eligible. Do I need to be physically present at the DSIX datacenter? You can either colocate a router in our Bucharest facility or cross-connect from a neighbouring datacenter. Remote peering (over a transit provider's L2VPN) is supported if that provider has a presence on the DSIX fabric and can extend a VLAN to us. Ask us for the list of carriers that already do this. Is DSIX membership free? Port and membership fees depend on the port speed (1G or 10G) and on whether you own the cross-connect. A 1G port for a small member is usually free; a 10G port on dedicated optics incurs a monthly fee. The route servers, AS112, route collector and looking glasses are all included at no extra cost for every member. How long does on-boarding take from signed contract to first BGP session? Typical cases complete in 3 to 5 business days: 1-2 days for contract + port provisioning, 1 day for your team to apply the switch config and announce your first prefix, then 1-2 days for the DSIX team to validate your announcements and promote you from quarantine. See the quarantine section below for what gets checked. What is the quarantine stage? Every new port spends a short supervised window on a quarantine VLAN where our NOC watches your BGP announcements, validates that your prefixes match your IRR as-set, checks for rogue broadcast/multicast or prohibited L2 protocols, and confirms ARP/ND behaviour is clean. Once everything looks correct, the port is moved to the production LAN and RS+RC sessions come up. Do I need my own PeeringDB record before joining? Strongly recommended. The RS inbound filters bootstrap from your PeeringDB record (for max-prefix limits and for confirming your IRR as-set). You can join before updating PeeringDB, but your session will stay filtered until your PeeringDB + IRR are consistent with what you announce. What prefixes will the route servers actually accept from me? Everything your IRR as-set registers, subject to RPKI being Valid or NotFound (Invalid is dropped), subject to max-prefix limits from PeeringDB, and subject to bogon + private-ASN rejection. If you want to announce a new prefix, register it under your IRR as-set and publish a ROA; the RS will pick it up on the next refresh cycle (typically within minutes). Can I announce a default route or aggregate to DSIX? No. The DSIX peering policy explicitly forbids default (0.0.0.0/0 or ::/0) and customer-facing aggregates. Members must announce their own origin prefixes or downstream customer prefixes under proper AS_PATH and IRR documentation. What L2 protocols are prohibited on my port? Spanning Tree (STP/RSTP/MSTP), CDP/LLDP/FDP advertisements outbound, VRRP/HSRP/CARP keepalives, DHCP server, IPv6 router advertisements, DTP, VTP. These either leak our fabric onto your network or confuse other members. See the Switch Connectivity section on this page for the full list and example denies. What happens if my port sends prohibited traffic? Port security triggers alarms that are reviewed by the NOC within one business day. First incident: email notice asking you to fix it. Repeat or high-impact incident: the port is moved back to quarantine pending correction. Severe cases (e.g. rogue DHCP affecting multiple members) result in immediate shutdown with a post-mortem required before reinstatement. Do I need to announce MAC addresses or pin them? Each member port has a MAC policy that limits learned MAC addresses to what you declared on your membership form. Typically 1 MAC (your router) per port. If you run an anycast or redundant setup behind the port you declare multiple MACs up-front; unexpected MACs are flagged by the port-security system. Can I bring my own fiber? Yes, provided it terminates in the DSIX cage or an allowed neighbouring rack with our approval. We support LC/SC connectors and single-mode/multi-mode fibres depending on the optic; bring your own optics or rent ours for the port speed you signed up for. What router vendors are supported? All of them. We publish example configs for Cisco IOS, Juniper Junos, Arista EOS, MikroTik RouterOS v6 and v7, BIRD, FRR, and VyOS on this page. If your platform speaks standard BGP and supports RFC 7947 route-server semantics, it works. Vendor-specific quirks (e.g. Cisco "neighbor transparent") are documented. What is the DSIX SLA on port availability? Ports target 99.9% annual availability excluding scheduled maintenance windows (Tue 02:00-06:00 EET). Failures are handled 24/7 by the DSIX NOC. See the full SLA page for credits and incident response timelines. How do I leave DSIX? Send written notice to noc@dreamserver.ro with the planned disconnect date. Standard notice is 30 days; we wind down BGP sessions, deactivate your RC/RS configs, purge your prefixes from filter sets, and physically disconnect the port. No exit fees. Show 12 more questions ============================================================================== # Route Collector | Passive BGP Monitoring at DSIX | DreamServer URL: https://dreamserver.ro/en/dsix/route-collector/ (RO: https://dreamserver.ro/ro/dsix/route-collector/) Route Collector | Passive BGP Monitoring at DSIX | DreamServer Home › DSIX › Route Collector AS65432 • Administrative • Required for all members DSIX Route Collector A passive BGP listener at AS65432 that collects routing information from every DSIX member for monitoring, diagnostics and exchange-health reporting. Never announces prefixes, never forwards traffic, and peering with it is mandatory. RC addresses Membership requirements What a route collector does One BGP session, zero traffic impact The route collector listens to the BGP announcements of every DSIX member. It is a one-way pipe: you send UPDATEs, it receives them, and it never sends anything back. This gives exchange operations a complete, real-time view of the routing table exposed on the fabric. The collected data feeds internal dashboards that track member health, prefix counts, routing policy compliance and leak detection. Aggregate, anonymised statistics are published to PeeringDB and exported via IX-F Member Export. Individual member data stays private. Peering with the route collector is a mandatory part of DSIX membership . It costs you nothing extra and is not counted against your transit or export quotas. Service properties Never announces any prefix to you Never forwards dataplane traffic Required for every DSIX member Zero bandwidth or transit cost Minimum 90 days of history Route Collector Addresses Point your BGP config at RC1 on both address families. We peer only on LAN1. Instance Protocol Address ASN Looking Glass RC1 IPv4 185.0.0.251 65432 View LG › RC1 IPv6 2001:7f8:133::5:8218:251 65432 View LG › Required action: configure the RC session within 7 days of activating your DSIX port. If you need help with vendor-specific configuration, see the Route Servers & Tools page for ready-to-paste snippets, or open a ticket with noc@dreamserver.ro . Frequently Asked Questions Everything operators ask before turning on the service. What is a route collector? A route collector is a passive BGP listener that receives routing information from every exchange member without forwarding any traffic or announcing any prefixes. It gives the DSIX operations team a real-time view of the exchange routing table, which is invaluable for diagnostics, statistics, monitoring and troubleshooting. Why must I peer with the route collector? It is part of the DSIX membership policy. Every member must establish a BGP session with the route collector so that ops can see the full exchange table. Members who do not peer with it get warnings and, if unresolved, can be quarantined until the session comes up. Does the route collector announce any prefixes to me? No. The route collector is configured in passive/listen-only mode. It accepts all your announcements and stores them for analysis, but never originates or re-announces any prefix back to you. Your BGP input queue from the RC will always be empty. Does the route collector forward data-plane traffic? No. It is a pure control-plane listener with no packet-forwarding path. Your traffic never goes through it. Only BGP UPDATEs travel over the session. What do you use the collected data for? Monitoring peering health (counting prefixes per member), detecting route leaks or accidental full-table announcements, producing aggregate traffic and routing reports, supporting incident investigations, and feeding PeeringDB / IX-F Member Export. We do not share individual member route data with third parties. Is the route collector the same as the route server? No, they are completely separate services with different purposes. Route servers (RS1/RS2) actively redistribute your announcements to other members so they can build BGP sessions without meshing bilaterally. The route collector is administrative only: it stores data, never redistributes. What are the route collector addresses? RC1 runs on 185.0.0.251 (IPv4) and 2001:7f8:133::5:8218:251 (IPv6), both in AS65432. You peer with it over the DSIX LAN1 fabric just like any other BGP session. Do I need special filters on the RC session? On your export side, announce the same prefixes you announce to the route servers (i.e. your normal DSIX export policy). On your import side, accept nothing, or configure a soft-fail since the RC never announces. Most members just use import-policy: reject or leave the default empty prefix-list. How long does the data persist? We store BGP table snapshots and UPDATEs for at least 90 days for correlation and incident response. Real-time data is always available in our internal dashboards. Long-term summaries feed the public PeeringDB and IX-F Member Export records. Can I access the route collector data directly? Upon request, DSIX operations can share per-member prefix lists, looking-glass snapshots or routing history with the member in question (your own routes, for your own ASN). Cross-member visibility is not shared; aggregate exchange statistics are public via PeeringDB. What happens if my RC session drops? The route collector alerts our ops team automatically. We will contact you through the registered NOC e-mail to investigate. Prolonged absence (more than a few days without explanation) can trigger quarantine under the DSIX connectivity policy. Show 8 more questions ============================================================================== # Route Servers, Looking Glasses, BGP Communities & Config Generator | DSIX URL: https://dreamserver.ro/en/dsix/route-servers/ (RO: https://dreamserver.ro/ro/dsix/route-servers/) Route Servers, Looking Glasses, BGP Communities & Config Generator | DSIX Home › DSIX › Route Servers & Tools AS58218 • BIRD • RPKI + IRRDB validation DSIX Route Servers & Peering Tools Two independent route servers, public looking glasses for every RC and RS instance, a standards-based BGP community schema, and a browser-based configuration generator that spits out ready-to-paste snippets for BIRD, FRR, MikroTik and Cisco. Everything you need to peer at DSIX without writing a single line of BGP from scratch. Generate my config BGP communities AS58218 · Bird v2 · RPKI + IRRDB DSIX Route Server Simplify your peering, connect to two route servers instead of managing individual BGP sessions with every member. Should I use the Route Server? The DSIX route server cluster is designed for: ✓ Small to medium members who don't have time or resources to manage individual peering relationships ✓ Larger members with an open peering policy where managing sessions with smaller peers isn't worth the effort ✓ Anyone who wants instant peering with all current and future DSIX members automatically Rule of thumb: if you don't have a specific reason NOT to use the route server, you should use it. Redundant Design Two independent physical servers (RS1 + RS2). Full IPv4 and IPv6 support. If one server fails, the other continues providing BGP connectivity seamlessly. RPKI + IRRDB Filtering Inbound prefix filtering using RPKI ROA validation with IRRDB fallback. Only prefixes you've registered publicly are announced to peers. Invalid RPKI = dropped. Bird v2 on Ubuntu 24.04 BIRD Internet Routing Daemon v2, the industry standard for IXP route servers. Battle-tested at exchanges worldwide, running on Ubuntu LTS 24.04. Route Server Addresses Instance IPv4 IPv6 ASN RS1 185.0.0.1 2001:7f8:133::5:8218:1 58218 RS2 185.0.0.254 2001:7f8:133::5:8218:2 58218 Looking Glasses Inspect BGP routing tables and check prefix filtering status across all DSIX infrastructure. Production Route Servers RS1 IPv4 185.0.0.1 RS2 IPv4 185.0.0.254 RS1 IPv6 2001:7f8:133::5:8218:1 RS2 IPv6 2001:7f8:133::5:8218:2 AS112 & Route Collector AS112 IPv4 185.0.0.252 AS112 IPv6 2001:7f8:133::112 RC1 IPv4 185.0.0.251 RC1 IPv6 2001:7f8:133::5:8218:251 If a route server is filtering a prefix, the looking glass will show a warning symbol under State/PfxRcd. Click "Details" to see the filter reason. BGP Communities Control prefix distribution to specific peers using standard and large BGP communities. Standard Communities (16-bit) Action Community Block prefix to a peer 0:peer-as Announce to a specific peer 58218:peer-as Block prefix to all peers 0:58218 Announce to all peers 58218:58218 Large Communities (32-bit) Action Community Block prefix to a peer 58218:0:peer-as Announce to a specific peer 58218:1:peer-as Block prefix to all peers 58218:0:0 Announce to all peers 58218:1:0 Prepend once to peer 58218:101:peer-as Prepend twice to peer 58218:102:peer-as Prepend three times to peer 58218:103:peer-as Note: If your router supports large BGP communities, use those instead of standard 16-bit communities, especially since many DSIX members use 32-bit ASNs. Do not mix standard and large communities, choose one or the other. Configuration Generator Generate a complete BGP configuration for Route Servers, AS112, and Route Collector. Your ASN * Your IPv4 Address * Your IPv6 Address (optional) IPv6 Prefix to Announce (optional) Bird v2/v3 Cisco IOS Juniper MikroTik FRRouting OpenBGPD Select a platform and fill in your ASN Copy Frequently Asked Questions What members ask before and after setting up their session. Why do IXPs use route servers instead of a full mesh? A full-mesh topology needs N*(N-1)/2 BGP sessions between N members. At 20 members that is 190 sessions; at 100 members it is 4,950. Route servers collapse the mesh into 2*N sessions (every member peers with RS1 and RS2). Each member then receives routes from every other member through the RS, without having to negotiate and maintain hundreds of bilateral sessions. This is how essentially every modern IXP scales, and it is defined by RFC 7947. Should every DSIX member peer with the route servers? Unless you have a specific reason not to, yes. The route server is free, fully automated and gives you instant visibility of every current and future DSIX member. Members who run a selective peering policy typically peer with the RS and filter inbound on their side using standard DSIX BGP communities. What filtering do the DSIX route servers enforce? We validate every inbound prefix against RPKI (reject Invalid , accept Valid , accept NotFound ) and cross-check the origin ASN against the member's registered IRR as-set. We also apply bogon filters, maximum-prefix limits per member, and enforce the DSIX peering policy (no default route, no private ASNs, no private IPs). A prefix that fails any of those is silently dropped. Why two route servers instead of one? Redundancy. RS1 and RS2 run on independent hardware with independent upstream power and cooling. A software bug or hardware failure on one does not interrupt peering on the other. Members should configure a BGP session to both: when RS1 becomes unreachable, RS2 keeps paths flowing without a single dropped session. What software do you run on the route servers? BIRD on Ubuntu 24.04 LTS. BIRD is the de-facto standard on European IXPs (AMS-IX, DE-CIX, LINX, FranceIX all run it). BIRD gets active upstream maintenance, has clean config-file semantics and supports everything modern IX operators need: RPKI ROV, large communities, role-based multiprotocol sessions, generalised filters. Do you add a next-hop-self, or is the peer's next hop preserved? We preserve the original next hop. Route servers are transparent on DSIX, so the next-hop you receive for prefix X points directly at the member that announced it, not at the RS. Your forwarding traffic therefore goes peer-to-peer across the L2 fabric, not through the route server. What is the AS path on routes received via the RS? Since DSIX uses the standard transparent RS behaviour, the RS ASN (58218) is removed from the AS_PATH. You receive each prefix with the originating member's AS as first hop, exactly as if you had a direct session with them. This is what RFC 7947 mandates and it avoids accidentally treating the RS as an AS hop. Can I use BGP communities to control what the RS announces to other members? Yes, that is exactly what the community schema on this page is for. Tag a prefix with 0:AS to prevent it being announced to a specific AS, 0:58218 to blackhole a specific member group, 58218:AS to announce only to a specific AS, and so on. Large communities are supported on the same semantics. What address families do the route servers support? Full IPv4 and IPv6, each on a separate BGP session. Follow industry convention and keep IPv4 and IPv6 as two distinct sessions (one per AFI). Mixed-AFI on the same TCP connection is not recommended. Are the looking glasses public or member-only? Public. Anyone can query our looking glasses to inspect the DSIX table without a login. They are a useful tool for prospective members to validate their own announcements before joining, and for troubleshooting BGP problems. Internally we use the same LG during incident response. What does the Config Generator actually produce? You provide your ASN, IPv4 address, optionally IPv6 address and announced prefix, and pick your router platform. The generator prints a complete BGP snippet: session definitions for RS1+RS2 across IPv4 and IPv6, prefix filters pointing at your IRR as-set, RPKI validator hooks where the platform supports it, and community policy comments. BIRD 2, FRR, MikroTik RouterOS 7 and Cisco IOS are supported today. Can I customise the config before using it? Absolutely. The generator is a starting point, not a finished production config. We deliberately keep it minimal and well-commented so you can adapt it to your naming conventions, timers, RPKI validator endpoint and filter strategy. Most members paste it in, adjust 2-3 values and reload. Do the route servers accept BGP communities like BLACKHOLE ? Yes. We honour the well-known RFC 7999 65535:666 community and apply RTBH propagation to the prefix across the DSIX fabric. DSIX-specific communities for blackholing a prefix only against a single member are documented in the communities table. Why would an RPKI-Valid prefix still be dropped? Most common cause: the prefix is announced by an origin ASN different from the one authorised in the ROA. We accept Valid and NotFound , reject Invalid . A prefix that has a ROA, but the announcing AS does not match, is Invalid. Fix the ROA or announce from the correct AS. How often do you roll the RS software? Ubuntu package updates are applied weekly during the standard DSIX maintenance window (Tuesday 02:00-06:00 EET). Bird major upgrades are announced at least 14 days in advance via the DSIX members list and noc@dreamserver.ro . Minor config changes (new communities, filter adjustments) are applied with a shorter notice. Show 12 more questions ============================================================================== # LIR Services | IPv6 Lease, ASN, Sponsoring, Managed LIR & BGP | DreamServer URL: https://dreamserver.ro/en/lir-services/ (RO: https://dreamserver.ro/ro/lir-services/) LIR Services | IPv6 Lease, ASN, Sponsoring, Managed LIR & BGP | DreamServer Home › LIR Services RIPE NCC LIR Member • AS57050 • MANRS Participant Internet Resources, Managed by Experts DreamServer is a Local Internet Registry (LIR) and member of Réseaux IP Européens (RIPE NCC). We lease IPv6 subnets, register ASNs, sponsor existing resources, and operate BGP networks on your behalf. Every request is handled by certified network engineers, every RIPE policy requirement is taken care of, and every object in the RIPE Database, mnt-by , inet6num , aut-num , route6 , RPKI ROA, is created and maintained for you. View Services & Pricing Talk to an Engineer About the LIR What a Local Internet Registry Does, and How DreamServer Fits In A Local Internet Registry (LIR) is an organisation that has been allocated blocks of internet number resources, IPv4, IPv6 and ASNs, by a Regional Internet Registry. In our region the RIR is the RIPE NCC , and an LIR is the party responsible for sub-allocating those resources to customers and keeping every record in the RIPE Database accurate. DreamServer operates its own LIR under AS57050 . From our own RIPE IPv6 /29 allocation we lease prefixes down to /40 , we register new 32-bit ASNs, we sponsor resources belonging to other organisations, and we run fully managed LIR setups for companies that want the resources without the RIPE paperwork. Because RIPE NCC has fully exhausted its IPv4 free pool back in 2019 and is now operating only on a waiting list, we do not lease IPv4 space . We guide our clients onto IPv6 with dual-stack migration plans, so your network stays future-proof rather than stuck bidding for shrinking IPv4 blocks on the grey market. Every resource we hand over is production-ready: RPKI-signed , mnt-by object created under your organisation , reverse DNS delegated, route6 filters in place. No waiting for the LIR; provisioning is typically instant once payment clears. RIPE NCC Accredited LIR AS57050 • Operating since 2012 IPv6 /29 RIPE allocation MANRS participant (routing security) RPKI ROA signing & validation Own mnt-by object created for you Reverse DNS (rDNS) delegation Instant activation on payment Certified engineers (BGP, RPKI, security) EU datacenter, Bucharest, Romania Professional Certifications Our team consists of RIPE NCC certified professionals, with expertise in IPv6 network design, BGP security, RIPE Database management, and Local Internet Registry operations. We provide reliable, high-quality services to help organizations plan, implement, and secure their networks according to globally recognized best practices. Local Internet Registry Proficient in managing Internet number resources, including requests, distributions, registrations, and stakeholder coordination. Verify Certification IPv6 Fundamentals Certified to plan and implement IPv6 networks, calculate subnets, create addressing plans, and transition from IPv4 to IPv6. Verify Certification RIPE Database Certified in RIPE Database operations, including searching, interpreting, updating, and managing IP assignments and routing policies. Verify Certification BGP Security Qualified to assess BGP security risks, implement route validation with RPKI, and secure Internet routing against hijacks and leaks. Verify Certification IPv6 Security Expert in designing secure IPv6 networks, analyzing threats, and applying advanced strategies to protect against emerging vulnerabilities. Verify Certification AS57050 RIPE NCC LIR since 2020 MANRS 4/4 All four operator actions RPKI 100% ROA signed on every allocation 24/7 NOC abuse & routing incident response How LIR Services Work From request to allocation, we handle the entire process with RIPE NCC on your behalf. A Fully Managed Path, Ticket to Allocation You open a ticket describing what you need: an IPv6 allocation, an ASN, an IPv4 PI block or sponsoring for an existing resource. From there our LIR team takes over. We validate the request against current RIPE NCC policy, draft the justification and prepare every database object you need: inetnum , aut-num , route/route6 , as-set , abuse-c . The official submission goes through our maintainer, so you never touch the RIPE Portal, the request queue or the clarification back-and-forth. Once RIPE allocates the resource, we sign the RPKI ROAs , delegate reverse DNS and hand the resource over production-ready. The whole flow typically completes in 5–7 business days end-to-end. If RIPE comes back with feedback or your request needs corrections, we close both loops shown on the flowchart on your behalf. You only hear from us when the resource is signed, routed and ready to announce. Need IP resources or LIR services? Contact us to discuss your requirements. We will guide you through the process and handle all RIPE NCC interactions on your behalf. Contact Us Email Us Services & Pricing Five production-grade services delivered under our RIPE NCC membership, with transparent pricing where possible and custom scoping where it matters. At a glance: which service for which need Service Best for You own Typical ticket time From IPv6 Lease You need IPv6 without running your own LIR Sub-allocation under AS57050 Same-day, often instant 5 €/yr ASN Registration Building an ISP, CDN, hosting or corporate AS Your own 32-bit ASN + /40 IPv6 5-7 business days 100 €/yr LIR Sponsoring Existing resources, moving from another sponsor Your existing resources, intact 3-5 business days 100 €/yr Managed LIR Organisation without in-house LIR expertise Turnkey LIR operations Scoped at kickoff Custom BGP Services You have the resources, need the routing expertise Advisory & ops on your AS Scoped per engagement Scope-based Instant activation IPv6 Subnet Lease Lease a /40 IPv6 prefix from our own RIPE /29 allocation. Goes live the moment payment clears, we create the inet6num and mnt-by under your organisation in the RIPE Database and push the RPKI ROA same minute. 65,536 × /56 sub-allocations RPKI ROA + route6 included Reverse DNS delegation LOA generation on request from 5 € / year /48 to /32 · 5 sizes, setup free Learn more › Provider Independent IPv6 Request PI A Provider Independent IPv6 assignment registered directly to your organisation with RIPE NCC, not carved from our pool, so it stays yours and portable across upstreams. Sponsored under our LIR: we draft the RIPE justification, create the inet6num with status ASSIGNED PI , set mnt-by and push the RPKI ROA. Registered to your org, fully portable ASSIGNED PI /48, independent of any provider Sponsoring LIR + annual RIPE compliance RPKI ROA + route6 included 100 € / year Provider Independent IPv6 + 100 € one-time RIPE application fee Order now › Best value • ASN + /40 IPv6 bundle ASN Registration Your own 32-bit Autonomous System Number registered with RIPE NCC, ready for BGP announcements. Bundle includes a /40 IPv6 prefix, aut-num object, as-set , route6 filters and RPKI configuration done by our engineers. 32-bit ASN (AS####) IPv6 /40 included RIPE justification drafted for you Routing policy + RPKI configured 100 € / year ASN + IPv6 /40 + 100 € one-time RIPE application fee Learn more › Zero downtime LIR Sponsoring Already own IPv6 prefixes or an ASN under another LIR that is closing, transferring or charging too much? We take over sponsorship under our RIPE NCC membership, mnt-by updated to DreamServer, RPKI continued, annual compliance handled, routing never touched. Seamless sponsorship transfer RIPE Database object updates RPKI ROA continuity Annual RIPE NCC audit support from 100 € / year per sponsored resource Exact price depends on resource type & size Learn more › Managed LIR You keep your own RIPE NCC membership and ownership, we do everything else. RIPE Portal administration, database object maintenance, sub-allocation management, annual compliance, RPKI infrastructure, audit preparation and first-line customer support for your downstream clients. Full RIPE Portal operation Sub-allocations to your customers Annual audit representation RPKI signer + validator hosting Custom pricing Based on LIR size & scope Learn more › Certified engineers BGP Network Services Professional BGP design and operation by engineers certified in BGP operations & security, RPKI deployment and RIPE routing policy. Multi-homing, route filtering, community tagging, MANRS implementation, traffic engineering and 24/7 monitoring for your ASN. Multi-homing & transit design Prefix filters & route policies RPKI validator deployment MANRS onboarding & audit Scope-based quote Certified engineers, see below Learn more › Policies & Compliance The concrete commitments every LIR service inherits from us. Written in plain terms, enforced by default. MANRS Participant All four operator actions: prefix filtering, anti-spoofing, coordination, global validation. RPKI ROA by default Every IPv6 allocation ships with a signed ROA for the origin you run BGP from. No extra ticket. IRR under AS-DREAMSERVER Your as-set sits inside the DreamServer AS-SET, filters propagate to upstreams and IX route servers. 24/7 abuse & incident response abuse-c mailbox monitored around the clock, route leak and hijack response from the NOC. Non-exclusive sponsorship You keep ownership of your RIPE objects. No lock-in clauses, transfer to another sponsor at any time. 4h response on RIPE tickets RIPE-facing tickets (updates, ROA rotation, transfer requests) get first response within four business hours. Frequently Asked Questions Each service has its own dedicated FAQ. Pick the topic that matches your question. IPv6 Lease FAQ › ASN Registration FAQ › LIR Sponsoring FAQ › Managed LIR FAQ › BGP Services FAQ › ============================================================================== # ASN Registration | Own 32-bit AS Number + /40 IPv6 Bundle | DreamServer LIR URL: https://dreamserver.ro/en/lir-services/asn-registration/ (RO: https://dreamserver.ro/ro/lir-services/asn-registration/) ASN Registration | Own 32-bit AS Number + /40 IPv6 Bundle | DreamServer LIR Home › LIR Services › ASN Registration ASN + /40 IPv6 bundle • BGP-ready in 5-7 business days ASN Registration Own a 32-bit Autonomous System Number registered at RIPE NCC, ready for BGP announcements across any transit provider or internet exchange. The bundle includes a /40 IPv6 prefix, aut-num , as-set , RPKI ROA and a first-draft routing policy, everything a new ASN needs to start peering. Order ASN bundle How does it work? Total cost year one 200 € setup + first year 100 € one-time RIPE fee + 100 €/year ongoing 32-bit ASN registered at RIPE NCC IPv6 /40 included RIPE justification drafted for you aut-num , as-set , route6 published RPKI ROA signed and deployed Initial routing policy drafted When you need your own ASN Three signals that mean it is time to stop using your provider's AS 1. Two or more upstream transits. The moment you want redundancy across carriers, you need a single ASN that announces the same prefix to all of them. Otherwise traffic gets fragmented, BGP communities become meaningless and RPKI cannot protect you. 2. Peering strategy at IXPs. Internet exchange route servers only accept announcements from members with their own ASN and a matching RPKI ROA. Peering at DSIX, DE-CIX, AMS-IX or any other IX requires your AS number, period. 3. Regulatory or contractual independence. Some customers, insurers or regulators require that you operate your own AS and keep it independently routable. Without an ASN you are a sub-tenant of your upstream; with one you are a peer on the global routing table. Signals you do NOT need an ASN yet You run a handful of servers on a single provider, their ASN announces your traffic already. You do not have a plan to BGP-announce prefixes. An ASN without announcements is a paper certificate. Your use case is better served by CDN/Anycast or cloud load balancers. Unsure? Ask us for a 10-minute fit check before ordering, we would rather talk you out of a bad ASN decision than sell you one that sits idle. Your ASN, sponsored and BGP-ready Open a ticket with a short description of your routing plan and we will draft the RIPE justification today. Start my ASN request Email us Everything inside the 100 €/year bundle One price, one sponsor, one contact. Every object a new AS needs to peer, route and survive RPKI filtering. 32-bit ASN registered at RIPE A 4-byte AS number assigned to your organisation by RIPE NCC. Full ownership; you remain the sole admin-c and tech-c, we simply sponsor under our LIR. Bundled IPv6 /40 The /40 prefix that would cost 12 €/year standalone is included at no extra charge. Enough for 65,536 customer /56 s and ready to announce from day one. Justification drafted by us RIPE requires a written case showing you will multi-home or peer with a unique routing policy. We draft it for you, based on a short intake questionnaire, and submit it through our LIR account. aut-num object published Created with your admin-c, tech-c, abuse-c and a sensible initial routing policy (import/export from upstream and peers). Visible on the global RIPE DB the moment RIPE approves the ASN. as-set and route filters An as-set in the naming convention RIPE expects ( AS-YOURASN ) plus route6 objects authorising your announcement. Required by IXP route servers, MANRS filters and Cloudflare's validator. RPKI ROA + validator help We sign the ROA for your prefix, origin-validate against MANRS recommendations, and deliver router snippets for Cisco, Juniper, Arista, MikroTik, VyOS and BIRD if you want to run your own validator. Interactive preview of the Client Area The RIPE ASN Management Panel, Click Through Every Tab Once your ASN is live, this self-service panel is yours. Every tab below actually switches, exactly like the real thing. Click AS-SET , Details & Contacts , IRR Policy , BGP Config or any other tab to see what you manage from your account. dreamserver.ro/client/clientarea.php?action=productdetails&id=... AS57050 EXAMPLE-NET Active RIPE DB RIPEstat Maintainer EXAMPLE-MNT Organisation ORG-EX12-RIPE Route Objects 2 AS-SET Members 3 Route Objects AS-SET Details & Contacts BGP Status IRR Policy BGP Config WHOIS Route Objects (IRR) Register the prefixes you announce in the RIPE routing registry. Upstreams and IX route servers use these to validate your BGP announcements. IP Prefix (CIDR) Address Family Create Route Object Origin AS: AS57050 (automatic) Active Route Objects Prefix Type Origin Status 212.81.56.0/24 route AS57050 active Delete 2a10:fa80:12::/48 route6 AS57050 active Delete AS-SET Management An AS-SET groups your ASN with your downstream customers. Upstreams build prefix filters from it. It is always created under your own ASN. Current AS-SET: AS57050:AS-CUSTOMERS Members one per line AS57050 AS64500 AS64501 Your own ASN (AS57050) is always included. Max: 50 members. Update Members Delete AS-SET Details & Contacts Live in RIPE The fields currently on your aut-num. Edit and Save to change them. admin-c and tech-c must point to a person or role that already exists. descr one line per entry EXAMPLE-NET Autonomous System admin-c JD1503-RIPE tech-c JD1503-RIPE Save Details to RIPE Revert to current Abuse contact (abuse-c) abuse-c AR2201-RIPE abuse-c is stored on your organisation object (ORG-EX12-RIPE), not on the aut-num, and can only be changed by that organisation's maintainer. Your Contacts Handle Created JD1503-RIPE 2026-06-14 10:22 Use Edit Delete BGP Visibility & Announced Prefixes Live data from RIPE RIS route collectors. Check whether your ASN is seen in the global routing table. Check BGP Visibility ✓ Visible. Your ASN is seen in the global routing table. IPv4 visibility 287 / 325 RIS peers IPv6 visibility 291 / 321 RIS peers Announced prefixes 1 v4 · 1 v6 First seen 2026-06-15 Routing Policy Live in RIPE The policy currently published for AS57050. Edit the RPSL statements, one per line, and Save to update it in the RIPE DB. import IPv4 from AS174 accept ANY from AS58218 accept AS58218 export IPv4 to AS174 announce AS-SELF to AS58218 announce AS-SELF mp-import IPv6 afi ipv6.unicast from AS174 accept ANY mp-export IPv6 afi ipv6.unicast to AS174 announce AS-SELF Save Policy to RIPE Revert to current Generate policy lines from peers Build RPSL import/export from a peer list, then insert it straight into the boxes above. Peers ASN type, one per line AS174 upstream AS58218 peer AS64500 customer Generate BGP Configuration Generator Ready-to-paste BGP configuration for your router platform, built from your peer list. BIRD 2.x FRRouting MikroTik Cisco IOS-XR # BIRD 2.x BGP Configuration for AS57050 protocol bgp upstream_dreamserver { local as 57050; neighbor 212.81.56.1 as 174; # Replace IP ipv4 { import all; export filter export_own; }; } ! FRRouting BGP Configuration for AS57050 router bgp 57050 bgp router-id 212.81.56.10 neighbor 212.81.56.1 remote-as 174 neighbor 212.81.56.1 description DreamServer-upstream ! address-family ipv4 unicast network 212.81.56.0/24 exit-address-family exit # MikroTik RouterOS v7 BGP for AS57050 /routing bgp template add name=default as=57050 router-id=212.81.56.10 /routing bgp connection add name=upstream remote.as=174 \ remote.address=212.81.56.1 \ local.role=customer templates=default !! Cisco IOS-XR BGP for AS57050 router bgp 57050 bgp router-id 212.81.56.10 neighbor 212.81.56.1 remote-as 174 address-family ipv4 unicast route-policy ACCEPT-ALL in route-policy EXPORT-OWN out ! ! RIPE WHOIS Lookup Look up your own RIPE DB objects. Queries are restricted to your ASN and related objects. Lookup aut-num: AS57050 as-name: EXAMPLE-NET org: ORG-EX12-RIPE import: from AS174 accept ANY export: to AS174 announce AS-SELF admin-c: JD1503-RIPE tech-c: JD1503-RIPE status: ASSIGNED mnt-by: RIPE-NCC-END-MNT mnt-by: DreamServer mnt-by: EXAMPLE-MNT source: RIPE Read-only preview. All names, handles and numbers shown are fictional. Your real panel is populated live from the RIPE Database. What you manage from the panel The moment your ASN is delivered, every object it needs is editable from your DreamServer account. No RIPE Portal logins, no email tickets to change a contact or a route object. Route Objects (IRR) Create or delete route and route6 objects for every prefix you announce, so upstreams and IX route servers accept your BGP advertisements. Origin AS is filled in for you. AS-SET Build and maintain your customer cone ( AS57050:AS-CUSTOMERS ) so providers can filter your downstreams. It is always namespaced under your own ASN, so you cannot touch anyone else's. Details & Contacts Edit descr , admin-c and tech-c on your aut-num, see the abuse-c , and create or manage RIPE person contacts, with existence checks so a handle never fails silently. BGP Status Live visibility from RIPE RIS route collectors: how many peers see your ASN over IPv4 and IPv6, which prefixes are announced, and when it was first and last seen. IRR Policy Read and edit the import / export / mp-import / mp-export policy published on your aut-num, or generate the RPSL from a simple peer list and drop it straight into the boxes. BGP Config Copy-paste BGP configuration for BIRD, FRRouting, MikroTik RouterOS and Cisco IOS-XR, generated from your peer list so your first session takes minutes. WHOIS Look up your ASN and its related objects straight from the RIPE Database, without leaving the panel or learning the whois command line. Typical timeline 5 to 7 business days from intake to first BGP session The RIPE NCC side usually takes three to five business days; the rest is documentation and post-allocation automation on our end. DAY 1 Intake & justification We collect your legal entity info, intended upstreams, peering plans and target IPv6 address. Draft the RIPE justification email the same day. DAY 2 Submission to RIPE We submit the ASN request through our LIR Portal. Any RIPE clarification goes back via our support queue, you do not see the ticket thread. DAY 3-5 RIPE review RIPE Registration Services reviews the case. Typical SLA is 5 business days; often they approve within 2-3 if the justification is tight. DAY 5-6 Objects & RPKI aut-num , as-set , route6 created. RPKI ROA signed against your new ASN. mnt-by delivered. DAY 7 Peer & announce Credentials handed over. First BGP session established with your upstream, first prefix seen on a looking glass. Pair with A fresh ASN benefits from professional BGP setup and ongoing monitoring. Or if you already own an ASN elsewhere, move the sponsorship over. BGP Services Multi-home, RPKI, MANRS LIR Sponsoring Move an existing ASN to us IPv6 Lease Standalone subnets from 5 €/yr ASN Registration FAQ Everything we get asked about registering, pricing and using a new AS number. What exactly is an ASN? An Autonomous System Number is a globally unique 32-bit integer that identifies a routing domain on the internet. Every BGP announcement on the default-free zone carries an AS_PATH made of ASNs. Owning one means you can independently originate prefixes and run your own routing policy instead of sitting inside your provider's AS. 32-bit vs 16-bit ASN, which will I get? RIPE has been assigning only 32-bit (4-byte) ASNs for new requests since 2011. 16-bit ASNs are fully exhausted for new assignments. 32-bit ASNs look like AS213123, AS206499, etc. Every modern BGP stack transparently handles 32-bit ASNs, including Cisco IOS 12.0(32)S13+, Juniper Junos 9.1+, Arista EOS, MikroTik 6+, BIRD, FRRouting, etc. Do I have to become a RIPE NCC member myself? No. We sponsor the ASN under our existing LIR membership. You keep full ownership (admin-c, tech-c, legal control) and the ASN is yours, but the annual RIPE NCC membership fee and portal work belongs to us. This is the whole point of LIR sponsorship. What justification does RIPE need for a new ASN? RIPE wants to see evidence that you will run a unique routing policy, which in practice means multi-homing (two or more transits) or peering at an IX. We write the justification for you based on a short questionnaire, intended upstreams, target prefixes, geographic scope, expected peering stance. Typical submissions are 10-15 lines of prose. What does the 100 EUR application fee cover? That is the one-time RIPE NCC resource fee for a new ASN, paid from our LIR account on your behalf. RIPE issues us one invoice per assignment; we pass it through at cost. Nothing on top, nothing hidden. Can I bring my own IPv6 instead of taking the bundled /40? Yes. If you already own IPv6 (for example PI space or a block from another LIR that we can sponsor), we register the ASN without the bundled /40 and apply a 12 €/year discount. Contact us for the custom quote. Is RPKI mandatory these days? It is not formally mandatory but it is effectively required. Without an RPKI ROA your prefix will be marked invalid by any RPKI-enforcing validator, which means Cloudflare, most tier-1 transit providers and the major IX route servers will drop the announcement. We sign ROAs for every prefix we deliver. How do I connect the new ASN to my hardware? We send you ready-to-paste BGP configuration snippets for the most common platforms (Cisco, Juniper, Arista, MikroTik, VyOS, Cumulus, BIRD, FRR). Typical first session is 10-15 minutes of config on your router plus matching configuration on the upstream or IX side. Can I peer at DSIX with this ASN? Absolutely. DSIX (AS58218) is our own internet exchange and new ASNs under our LIR are welcome on the fabric. We pre-configure filters on the route servers and can run the first BGP session on the same day the ASN is assigned. What happens if I want to leave DreamServer later? The ASN stays yours. Sponsorship at RIPE NCC is non-exclusive; you can transfer the sponsorship to another LIR or become your own RIPE member at any time. We remove our mnt-by , update the org attribute and hand over the resource with zero routing impact. Can I get multiple ASNs? Yes, but RIPE policy now requires a stronger justification for additional ASNs, typically a genuinely different routing policy, geographic region, or operational reason (for instance separating content from transit). We have experience drafting multi-ASN justifications. Do you support 2-byte (16-bit) legacy ASN transfers? Yes. If you own a legacy 2-byte ASN under another LIR and want to transfer the sponsorship to us, we handle the RIPE paperwork. The ASN keeps its number, we simply take over the sponsoring role. See our LIR Sponsoring page. Can you advertise my prefix through your own network too? Yes. If you want DreamServer AS57050 to accept your prefix as a customer cone, we can transit your announcement as an upstream. Ask us for a transit quote, it stacks cleanly on top of the ASN registration and is often how new ASNs get their first BGP session live. Show 10 more questions ============================================================================== # BGP Network Services | Multi-Homing, RPKI & MANRS by Certified Engineers | DreamServer URL: https://dreamserver.ro/en/lir-services/bgp/ (RO: https://dreamserver.ro/ro/lir-services/bgp/) BGP Network Services | Multi-Homing, RPKI & MANRS by Certified Engineers | DreamServer Home › LIR Services › BGP Services Certified engineers • MANRS participant • 24/7 NOC BGP Network Services Design, deployment and operation of BGP for your ASN, from the first session with your upstream to multi-transit, multi-IX, RPKI-enforcing production networks. Delivered by engineers credentialed by RIPE NCC in LIR operations, BGP Operations & Security, Advanced IPv6 and RIPE Database administration, with verifiable badges on every operator. Discuss your BGP project What we do Engagement models Project-based: fixed scope (multi-homing, RPKI deployment, IX onboarding) Retainer: monthly hours pool for ongoing BGP operations 24/7 NOC: full outsourced BGP monitoring and incident response Every engagement is quoted on scope. Send us a short brief and we return a fixed-fee proposal within three business days. What we deliver Pick a project, pick a retainer, or hand us the whole BGP operation. Every engagement is quoted on scope. Multi-homing design Two-transit, three-transit and hybrid transit+peering designs. Failover sizing, AS-path preferences, local-pref, MED strategies for balanced or cost-optimised traffic. Prefix filters & policy IRR-based prefix-list generation, max-prefix limits, private ASN stripping, bogon filtering, leak protection. Policies that survive the next "oh no, we leaked everything" headline. RPKI deployment Delegated or hosted CA, ROA signing, validator deployment (Routinator, Fort, StayRTR), RTR sessions to your routers, alerts on ROA drift. MANRS onboarding Four-action compliance: prefix filtering, anti-spoofing, coordination, global validation. We prepare the evidence, submit the application and help you stay compliant. IX onboarding Port provisioning at DSIX, DE-CIX, AMS-IX, France-IX, LINX, etc. PeeringDB record setup, bilateral peering outreach, route server sessions. Traffic engineering AS-path prepending strategies, community tagging, selective de-aggregation, time-of-day policies, anycast planning, ECMP and BGP-PIC optimisations. 24/7 NOC & monitoring BMP-based route monitoring, RPKI drift alerts, prefix hijack detection, looking glass access, incident playbooks, out-of-hours call escalation. Vendor support Cisco IOS/IOS-XE/NX-OS, Juniper Junos, Arista EOS, MikroTik RouterOS v6 & v7, VyOS, BIRD 2.x, FRRouting. Config snippets, audits, migrations. Incident response & forensics Route-leak and hijack triage, coordination with upstream NOCs and the global BGP community, RIPE Atlas and looking-glass correlation, written post-mortem with corrective actions and remediation timelines. Professional Certifications Our team consists of RIPE NCC certified professionals, with expertise in IPv6 network design, BGP security, RIPE Database management, and Local Internet Registry operations. We provide reliable, high-quality services to help organizations plan, implement, and secure their networks according to globally recognized best practices. Local Internet Registry Proficient in managing Internet number resources, including requests, distributions, registrations, and stakeholder coordination. Verify Certification IPv6 Fundamentals Certified to plan and implement IPv6 networks, calculate subnets, create addressing plans, and transition from IPv4 to IPv6. Verify Certification RIPE Database Certified in RIPE Database operations, including searching, interpreting, updating, and managing IP assignments and routing policies. Verify Certification BGP Security Qualified to assess BGP security risks, implement route validation with RPKI, and secure Internet routing against hijacks and leaks. Verify Certification IPv6 Security Expert in designing secure IPv6 networks, analyzing threats, and applying advanced strategies to protect against emerging vulnerabilities. Verify Certification BGP Services FAQ Common questions about our BGP consulting and operations. Do I need my own ASN to hire you? Not to talk to us. If you already have an ASN, we go straight to design and implementation. If you do not, we start with the ASN Registration bundle and roll the BGP design into the same engagement. Which router platforms do you support? Cisco IOS, IOS-XE and NX-OS; Juniper Junos; Arista EOS; MikroTik RouterOS v6 and v7; VyOS; BIRD 2.x; FRRouting. If your platform is not listed, ask, we have probably touched it. For hardware-specific optimisations (BGP-PIC, ECMP, FIB scaling) we have deep experience on Cisco Nexus and MikroTik CCR. Can you work with our existing NOC team? Yes, that is the norm. Most engagements are co-managed: we own the BGP-specific work, your NOC owns the day-to-day network. We publish a clear RACI at onboarding and run joint retros after major changes. Do you take 24/7 pager duty on our behalf? On a managed contract, yes. Our NOC holds the pager for BGP-impacting events (session flaps, RPKI invalidity, prefix hijacks) and follows an escalation runbook agreed with you. Non-BGP incidents we triage and forward to the right contact. How fast can you respond to a BGP emergency? For managed customers on our 24/7 tier, typical ack time is under 15 minutes for critical events. We can join a bridge within 30 minutes, push config changes via the runbook, and file RFO documentation within 48 hours. Can you audit our existing BGP configuration? Yes. A one-time audit covers: prefix filters, max-prefix limits, RPKI signing status, as-set consistency, IRR registration accuracy, community schema hygiene, fallback design. Delivered as a report with prioritised recommendations and config deltas. Do you help with route leak incidents (ours or inbound)? Yes. For outbound leaks from your AS we triage, roll back and write the RFO. For inbound (someone leaking you) we coordinate with the offending AS through NOC email and RIPE abuse contacts, file with the incident response community if needed. Can you run our RPKI infrastructure? Yes. We deploy and operate Delegated RPKI CAs, ROA signing pipelines, and HA validators (Routinator, Fort, StayRTR) feeding RTR sessions to your routers. With monitoring and alerting on ROA drift, validator disagreement and RTR health. Do you help us join MANRS? Yes. We prepare the MANRS application evidence across the four operator actions (prefix filtering, anti-spoofing, coordination, global validation), submit it and keep you compliant through the annual review cycle. Do you peer with us? Through DSIX (AS58218), our own internet exchange, we peer with any ASN that meets the open policy. We can also arrange direct BGP sessions with AS57050 if your traffic pattern benefits from it. Show More Questions Also useful ASN Registration Get your ASN first DSIX Internet Exchange Peer with us for free Managed LIR LIR ops on top of BGP Send us the brief, get a fixed-fee BGP proposal Describe your network: ASN, prefixes, current transits/peers, target design. We return a scoped proposal within three business days. Start a conversation Email us ============================================================================== # IPv6 Subnet Lease | Rent a /40 from a RIPE /29 | DreamServer LIR URL: https://dreamserver.ro/en/lir-services/ipv6-lease/ (RO: https://dreamserver.ro/ro/lir-services/ipv6-lease/) IPv6 Subnet Lease | Rent a /40 from a RIPE /29 | DreamServer LIR Home › LIR Services › IPv6 Lease From a RIPE-Allocated IPv6 /29 pool IPv6 Subnet Lease Lease an IPv6 prefix from our own RIPE allocation at any of five sizes, /48 through /32 , and start announcing it the same minute payment clears. We carve the block, create the inet6num and a dedicated mnt-by under your organisation, publish the RPKI ROA and delegate reverse DNS. All before your coffee cools. See all sizes & prices Talk to an engineer Starting at 5 € / year for an IPv6 /48 , up to /32 at 150 €/yr Free setup, no activation fee Dedicated mnt-by object for you RPKI ROA + route6 included Reverse DNS (rDNS) delegation Letter of Authorization on request IPv4 is gone, IPv6 is the answer Why lease IPv6 now instead of chasing IPv4 on the grey market RIPE NCC drained its last IPv4 /22 pool in November 2019. What is left for new players is a waiting list that drips out recovered /24 prefixes and a secondary market where per-address pricing has climbed from under one dollar a decade ago to 30-60 USD per address today and keeps rising. IPv6 is the opposite story. There are enough addresses for every grain of sand on Earth, several times over . Major mobile networks, cloud providers and residential ISPs are already IPv6-enabled, so a significant chunk of real-world internet traffic is native IPv6. Google's own IPv6 adoption metric has been over 40% for two years. At 5 € per year for a /48 or 12 € per year for a /40 (256 end-site subnets), an IPv6 lease from our LIR is dramatically cheaper than buying a single IPv4 address on the grey market. Dual-stack now, go IPv6-only later. How big is a /40, really? Your lease /40 Customer subnets ( /56 ) 65,536 End-site subnets ( /48 ) 256 LAN subnets ( /64 ) 16,777,216 Host addresses per /64 1.8 × 10¹⁹ A typical IPv6 best practice is to give each residential customer a /56 and each enterprise site a /48 . A single /40 covers a serious ISP-scale footprint before you even think about requesting more. Instant activation explained From payment confirmation to announced prefix in minutes Because we operate the LIR ourselves, there is no third party to wait for. Our automation reacts to your payment confirmation and walks through the entire RIPE Database workflow before you refresh your tab. STEP 1 Order & pay Pick a subnet from the store, confirm your organisation details, pay by card, bank, PayPal or Bitcoin. STEP 2 Prefix carved Automation picks the next free block from the RIPE /29 and marks it ALLOCATED for your org (so you can further sub-assign to your own customers). STEP 3 Objects created inet6num , org , mntner and route6 pushed to the RIPE Update API. STEP 4 RPKI & rDNS ROA signed against your ASN and published via the RIPE CA; reverse DNS delegated. READY Announce & go Welcome email with your prefix, maintainer password and managed RPKI portal link. Start announcing. Five sizes, one pool Pick the IPv6 Size That Fits Your Network Every tier is carved directly from our RIPE /29 allocation and ships with the same production-grade tooling. Only the room to grow changes between a homelab /48 and an ISP-scale /32 . ASSIGNED PA IPv6 /48 Single end-site: homelab, startup or one office. € 5 / year Setup free Capacity 1 × /48 end-site assignment 65,536 × /64 LAN segments For your own end-site, no further sub-assignment Included with every tier Dedicated mntner object inet6num under your org Full RPKI / ROA management route6 object published Reverse DNS in self-service panel LOA on request Order /48 ALLOCATED-BY-LIR IPv6 /44 Multi-site separation: a /48 per office, tenant or environment. € 10 / year Setup free Capacity 16 × /48 sub-allocations Per-site, per-tenant or per-environment isolation Sub-assign to your downstream end users Included with every tier Dedicated mntner object inet6num under your org Full RPKI / ROA management route6 object published Reverse DNS in self-service panel LOA on request Order /44 Most popular ALLOCATED-BY-LIR IPv6 /40 Distributed cloud or mature multi-site infrastructure. € 12 / year Setup free Capacity 256 × /48 sub-allocations Dozens of downstream customers, distributed cloud Sub-assign /48 or /56 to your customers Included with every tier Dedicated mntner object inet6num under your org Full RPKI / ROA management route6 object published Reverse DNS in self-service panel LOA on request Order /40 ALLOCATED-BY-LIR IPv6 /36 Regional backbone or multi-tenant platform with years of headroom. € 50 / year Setup free Capacity 4,096 × /48 sub-allocations Hundreds of downstream customers, regional reach Sub-assign to ISPs and hosting resellers Included with every tier Dedicated mntner object inet6num under your org Full RPKI / ROA management route6 object published Reverse DNS in self-service panel LOA on request Order /36 Sold out ALLOCATED-BY-LIR IPv6 /32 Full LIR-scale: hosting platforms, CDNs, downstream ISPs. € 150 / year Setup free Capacity 65,536 × /48 sub-allocations ISP/CDN scale, unlimited downstream layers Sub-assign any prefix size /40 to /64 Included with every tier Dedicated mntner object inet6num under your org Full RPKI / ROA management route6 object published Reverse DNS in self-service panel LOA on request Notify me when available Everything that goes into your lease Not just a prefix on paper. Every database object is created, every cryptographic artefact is signed and every DNS record is delegated before you receive your credentials. inet6num object The canonical record in the RIPE Database describing your /40 : prefix, assignment status, org, descr, country, admin-c and tech-c references. Dedicated mnt-by We create an mntner object under your organisation and use it as the mnt-by on all your resource objects. You keep cryptographic control through your own credentials. RPKI ROA signed Route Origin Authorisation published for your announcing ASN. Validators on the global internet accept your BGP announcement as legitimate and route-server filters let it through. route6 object IRR registration linking your /40 to your origin ASN. Required for strict prefix filtering at many transit providers and internet exchanges. Reverse DNS (rDNS) Your ip6.arpa zone is either delegated to your nameservers or hosted on our authoritative DNS for free. PTR records can be managed from the client portal. LOA on request Signed Letter of Authorization generated on DreamServer letterhead for peering, transit or hosting provider on-ramps. Issued in under one business day, free for lease customers. Interactive preview of the Client Area The IPv6 RIPE Management Panel, Click Through Every Tab Every tab below actually switches, exactly like the real self-service panel. Click ROA / RPKI , Reverse DNS , inet6num , Config Gen , WHOIS or any other tab to see the real interface you get after ordering. dreamserver.ro/client/clientarea.php?action=productdetails&id=... 2a10:fa80:aaaa::/40 EXAMPLE-LTD Active Prefix Length /40 Maintainer MNT-EXAMPLE Route Objects 2 ROAs 3 Reverse DNS 1 Reverse Zone a.a.a.a.0.4.b.6.b.0.a.2.ip6.arpa RIPE DB View Route6 ROA / RPKI Reverse DNS inet6num Objects Sub-alloc Route6 Objects Route6 objects register your prefix in the RIPE routing registry (IRR). BGP peers use this to validate your announcements. 2 / 10 used Prefix Origin AS Status Created Actions 2a10:fa80:aaaa::/40 AS213123 Active 2026-04-08 10:42 View Delete 2a10:fa80:aaaa:1000::/44 AS213123 Active 2026-04-12 15:08 View Delete + Create Route6 Object Prefix Your full allocation or a more-specific prefix Origin ASN * AS number originating this prefix Create route6 ROA / RPKI Management Route Origin Authorizations (ROAs) cryptographically validate that your AS is authorised to announce your prefix. Protects against BGP hijacking. 3 / 10 used Prefix Max Length ASN Status Created Actions 2a10:fa80:aaaa::/40 /48 AS213123 Active 2026-04-08 10:44 Delete 2a10:fa80:aaaa:1000::/44 /48 AS213123 Active 2026-04-12 15:10 Delete 2a10:fa80:aaaa::/40 /40 AS65001 Active 2026-04-14 09:21 Delete + Create ROA Prefix * Must be within 2a10:fa80:aaaa::/40 Max Length * Set equal to prefix length for exact match only Origin ASN * Create ROA Reverse DNS Delegation Configure reverse DNS (PTR records) by delegating the ip6.arpa zone to your nameservers. Your reverse zone: a.a.a.a.0.4.b.6.b.0.a.2.ip6.arpa Zone Nameservers Status Actions a.a.a.a.0.4.b.6.b.0.a.2.ip6.arpa ns1.example.com ns2.example.com Active Edit Delete + Update Reverse DNS Delegation Zone Nameservers * ns1.example.com ns2.example.com One nameserver per line. Minimum 2 required. Update Delegation inet6num Object View and edit your inet6num object in the RIPE database. Current RIPE DB Values inet6num 2a10:fa80:aaaa::/40 netname EXAMPLE-NET descr Example Ltd. IPv6 allocation country RO org ORG-EXML1-RIPE admin-c JD1234-RIPE tech-c JD1234-RIPE status ALLOCATED-BY-LIR mnt-by MNT-EXAMPLE source RIPE Update Fields Prefix Description Remarks Update inet6num View in RIPE DB → RIPE Database Objects All RIPE DB objects associated with your allocation. Type Key Handle Status Actions inet6num 2a10:fa80:aaaa::/40 EXAMPLE-NET Active View RIPE → organisation ORG-EXML1-RIPE Example Ltd. Active View RIPE → mntner MNT-EXAMPLE MNT-EXAMPLE Active View RIPE → role JD1234-RIPE J. Doe Active View RIPE → route6 2a10:fa80:aaaa::/40 AS213123 Active View RIPE → route6 2a10:fa80:aaaa:1000::/44 AS213123 Active View RIPE → Sub-allocations Organise your address space by splitting it into smaller blocks. This is local bookkeeping, no changes are made in RIPE. 3 entries Subnet Label Description Status Actions 2a10:fa80:aaaa:0::/48 Web Servers Public-facing web cluster Used Edit Delete 2a10:fa80:aaaa:1::/48 Mail SMTP / IMAP / MX Used Edit Delete 2a10:fa80:aaaa:100::/56 Staging Reserved for staging env Reserved Edit Delete + Add Sub-allocation Subnet * Must be within 2a10:fa80:aaaa::/40 Label Status Free Used Reserved Add Sub-allocation Calculator Config Gen RPKI Check BGP Status LOA WHOIS Log Subnet Calculator Split your allocation into sub-prefixes. Base Prefix Split into /48 (256 subnets) /44 (16 subnets) /56 (65,536 subnets) Calculate Splitting 2a10:fa80:aaaa::/40 produces 256 /48 subnets. calculator.output # First 5 of 256 subnets 2a10:fa80:aaaa:0000::/48 → first: 2a10:fa80:aaaa:: last: 2a10:fa80:aaaa:ffff:ffff:ffff:ffff:ffff 2a10:fa80:aaaa:0001::/48 → first: 2a10:fa80:aaaa:1:: last: 2a10:fa80:aaaa:1:ffff:ffff:ffff:ffff:ffff 2a10:fa80:aaaa:0002::/48 → first: 2a10:fa80:aaaa:2:: last: 2a10:fa80:aaaa:2:ffff:ffff:ffff:ffff:ffff 2a10:fa80:aaaa:0003::/48 → first: 2a10:fa80:aaaa:3:: last: 2a10:fa80:aaaa:3:ffff:ffff:ffff:ffff:ffff 2a10:fa80:aaaa:0004::/48 → first: 2a10:fa80:aaaa:4:: last: 2a10:fa80:aaaa:4:ffff:ffff:ffff:ffff:ffff ... 251 more BGP Config Generator Generate ready-to-use BGP configuration snippets for your router. Prefix Your ASN * Peer ASN Peer IP Generate BIRD 2 FRR MikroTik Cisco IOS bird.conf # BIRD 2.x IPv6 BGP to AS6939 router id 213.214.215.216; protocol static { ipv6 { table master6; }; route 2a10:fa80:aaaa::/40 blackhole; } protocol bgp peer_he6 { local as 213123 ; neighbor 2001:470:1f0a::1 as 6939 ; ipv6 { import filter { reject; }; export filter { if net = 2a10:fa80:aaaa::/40 then accept; reject; }; }; } frr.conf ! FRRouting IPv6 BGP router bgp 213123 bgp router-id 213.214.215.216 no bgp default ipv4-unicast neighbor 2001:470:1f0a::1 remote-as 6939 ! address-family ipv6 unicast network 2a10:fa80:aaaa::/40 neighbor 2001:470:1f0a::1 activate neighbor 2001:470:1f0a::1 prefix-list PL-OUT out neighbor 2001:470:1f0a::1 prefix-list PL-IN in exit-address-family ! ipv6 prefix-list PL-OUT seq 5 permit 2a10:fa80:aaaa::/40 ipv6 prefix-list PL-IN seq 5 deny any RouterOS # MikroTik RouterOS 7.x /routing bgp template add name=peer-he6 as= 213123 router-id=213.214.215.216 \ output.filter-chain=bgp-out input.filter-chain=bgp-in /routing bgp connection add name=he6 template=peer-he6 remote.as= 6939 \ remote.address= 2001:470:1f0a::1 /routing filter rule add chain=bgp-out rule="if (dst in 2a10:fa80:aaaa::/40 ) { accept }" add chain=bgp-out rule="reject" add chain=bgp-in rule="reject" IOS ! Cisco IOS / IOS-XE router bgp 213123 bgp router-id 213.214.215.216 no bgp default ipv4-unicast neighbor 2001:470:1f0a::1 remote-as 6939 address-family ipv6 network 2a10:fa80:aaaa::/40 neighbor 2001:470:1f0a::1 activate neighbor 2001:470:1f0a::1 prefix-list PL-OUT out neighbor 2001:470:1f0a::1 prefix-list PL-IN in exit-address-family ! ipv6 prefix-list PL-OUT seq 5 permit 2a10:fa80:aaaa::/40 ipv6 prefix-list PL-IN seq 5 deny any RPKI Validation Check Verify that your prefix has valid RPKI / ROA status. Queries the RIPE RPKI validator in real-time. Prefix Origin ASN * Check RPKI Valid The ROA for 2a10:fa80:aaaa::/40 authorises AS213123 with max-length /48. Global RPKI validators will accept announcements from this AS. RIPE Validator: Valid Cloudflare: Valid NTT: Valid Last checked: 42 seconds ago BGP Routing Status Check if your prefix is visible in the global BGP routing table. Data from RIPE RIS. Prefix Check BGP Status Visible Globally Announced by AS213123 , seen by 234 / 240 RIPE RIS collectors. Origin AS: AS213123 Most common path: AS6939 AS213123 Route collectors: 234 / 240 see it First seen: 14 days ago Communities: 6939:8100 6939:9002 Last update: 3 minutes ago Letter of Authorization (LOA) Generate a PDF letter authorising an AS to announce your prefix. Required by most transit providers and IXPs. Prefix Origin ASN * Company / Org * Authorised party Valid until Generate LOA (PDF) ✓ Ready: LOA-2a10fa80aaaa-AS213123.pdf WHOIS Lookup Search the RIPE database for any object. Lookup RIPE WHOIS % Information related to '2a10:fa80:aaaa::/40' inet6num: 2a10:fa80:aaaa::/40 netname: EXAMPLE-NET descr: Example Ltd. IPv6 allocation country: RO org: ORG-EXML1-RIPE admin-c: JD1234-RIPE tech-c: JD1234-RIPE status: ALLOCATED-BY-LIR mnt-by: ro-dreamserver-1-mnt mnt-by: MNT-EXAMPLE created: 2026-04-08T10:41:22Z last-modified: 2026-04-08T10:41:22Z source: RIPE route6: 2a10:fa80:aaaa::/40 origin: AS213123 mnt-by: MNT-EXAMPLE source: RIPE Activity Log Last 20 operations performed on this allocation. Older entries are available in the admin panel. Date Action Object Result Details 2026-04-14 09:21 create_roa roa 2a10:fa80:aaaa::/40 ✓ OK AS65001 /40 2026-04-12 15:10 create_roa roa 2a10:fa80:aaaa:1000::/44 ✓ OK AS213123 /48 2026-04-12 15:08 create_route6 route6 2a10:fa80:aaaa:1000::/44 ✓ OK origin AS213123 2026-04-09 11:02 update_rdns rdns a.a.a.a.0.4.b.6.b.0.a.2.ip6.arpa ✓ OK ns1, ns2.example.com 2026-04-08 10:44 create_roa roa 2a10:fa80:aaaa::/40 ✓ OK AS213123 /48 2026-04-08 10:42 create_route6 route6 2a10:fa80:aaaa::/40 ✓ OK origin AS213123 2026-04-08 10:41 provision inet6num 2a10:fa80:aaaa::/40 ✓ OK ALLOCATED-BY-LIR, mnt-by MNT-EXAMPLE Showing last 7 entries Who Leases IPv6 from Our LIR A /40 covers more than most people think. Here are the most common profiles we provision every month. Hosting providers Dedicated-server or VPS providers that run out of their upstream's IPv6 allocation and need independent, RIPE-registered space to assign to end customers. A /40 gives every customer their own /56 with room for 65,000+ customers. Enterprises & datacenters Organisations that need portable IPv6 space independent of any transit provider, typically to support multi-homing or avoid renumbering when they change upstreams. Own mnt-by keeps the block yours forever. VPN, CGNAT & IoT operators Operators who need clean, dedicated address space separate from their transit provider's pool, often to avoid reputation spillover or to isolate customer traffic into its own routable blocks with proper abuse-c contacts. The RIPE rules, in plain English What you can do with leased IPv6, and where IPv6 is governed by RIPE NCC, the registry that runs IP allocation for Europe, the Middle East and parts of Central Asia. Here is what their policy means for you in practice, no lawyer-speak. Eligibility Who can lease IPv6 Almost anyone with a real network to put it on. No revenue threshold, no minimum ASN size, no business plan to defend. ✓ Companies (SRL, SA, GmbH, Ltd.) and freelancers (PFA) ✓ NGOs, public bodies, universities ✓ Individuals running their own AS or home BGP lab ✓ Hosting, ISP, VPN, CGNAT, IoT, edge operators RIPE calls you the "End User" or "End Site". The technical use case is the only real gate. Where you can use it RIPE service region RIPE NCC covers over 75 countries : all of Europe, the Middle East and parts of Central Asia. That is where the prefix is meant to live. ✓ Romania, EU, UK, Switzerland, Norway, Balkans: fully in scope ✓ Israel, UAE, Turkey, Saudi Arabia, Kazakhstan: in scope ⚠ PoPs in US/Asia for an EU-based operation: tolerated as long as part of the deployment stays in the RIPE region × Pure North America, Latin America, Asia-Pacific or Africa deployment: go to ARIN, LACNIC, APNIC or AFRINIC instead Official RIPE service region: ripe.net/about-us/what-we-do/ripe-ncc-service-region/ . Usage rights Sub-divide for your customers Your prefix is registered as ALLOCATED-BY-LIR , the friendly status. You can freely sub-divide it. ✓ Sub-assign /48 to business customers ✓ Sub-assign /56 to residential customers ✓ Single /64 per LAN (smallest legal subnet) ✓ Announce from your own ASN, we publish the RPKI ROA ✓ Use on bare-metal, VPS, dedicated, colocation, tunnels Don't do this Acceptable use limits Hard lines that trigger blackhole filtering on the affected /48 , then full revocation. × Spam, phishing, malware C2, DDoS-for-hire, CSAM × BGP hijacking or announcing prefixes you do not own × Sponsoring another organisation's IPv6 as if you were their LIR (only DreamServer holds the RIPE sponsorship) × Chopping subnets smaller than /64 (breaks SLAAC) × Ignoring abuse reports for more than 24h RIPE Database Keep contact data fresh Your prefix is a public record. We maintain the objects, but you keep the data accurate. • We create inet6num + route6 + mntner + org + abuse-c • You notify us in 14 days if company name, address or contact changes • Sub-assignments must reflect the actual end-customer , not your own data • Reply to abuse-c messages within 24 hours Lease model How ownership works Your block is sub-allocated from our 2a10:fa80::/29 RIPE allocation. The relationship is between you and us. ✓ One annual fee covers LIR work + RIPE NCC overhead + RPKI + rDNS ✓ Block stays yours as long as the lease is active and rules are respected ⚠ Stop paying or stop replying = we reclaim the prefix into our pool, you renumber out ⚠ Leaving us: PA sub-allocations are not portable, you renumber to another provider's block • Need portability? Take your own RIPE membership and we sponsor your PI /64 Single LAN, smallest legal subnet, SLAAC works only on /64 /56 Residential customer, 256 LANs per home /48 Business end-site, the RIPE default for enterprises /40 - /32 ISP and hosting reseller tiers, lets you carve thousands of customer blocks Want the full legal text? All the above is summarised from official RIPE NCC policy. The complete obligations are mirrored into Section 17 of our Terms and Conditions . RIPE-738 IPv6 policy RIPE-637 PI contract RIPE-548 End User Agreement Often paired with Most IPv6 customers also need an ASN or BGP configuration. Here is the rest of the LIR menu. ASN Registration 100 €/yr incl. /40 IPv6 LIR Sponsoring Move existing resources in BGP Services Multi-home, RPKI, MANRS IPv6 Lease FAQ The most common questions we get about leasing IPv6 from our LIR. What exactly is an IPv6 /40? A /40 is a block of 2&sup8;⁸ IPv6 addresses, which is 16,777,216 /64 subnets , 65,536 /56 customer subnets or 256 /48 end-site subnets . In IPv6 practice the smallest routable unit on a LAN is a /64 ; the /56 and /48 boundaries are the recommended residential and enterprise customer sizes. Where does the prefix come from? From our own RIPE NCC allocation of 2a10:fa80::/29 . We are an accredited RIPE NCC member operating under AS57050 , listed in the public RIPE NCC member directory . Your sub-allocation is registered as ALLOCATED-BY-LIR (not ASSIGNED ) in the RIPE Database, which gives you the right to further sub-assign /48 blocks to your own downstream customers. How fast is activation, really? Instant for card, PayPal and Bitcoin payments (under two minutes from confirmation to credentials delivery). Bank transfers activate the moment funds land in our account, which is usually same-day for SEPA and next-day for SWIFT. There is no human in the loop and no third-party LIR to wait for. Who is listed as mnt-by on the database object? You are. We create a dedicated mntner object under your organisation, configure a strong shared password and store the credentials in your Client Area. You keep cryptographic control over edits, so even if you leave our LIR the maintainer survives the move. Is RPKI included? Yes. We publish the Route Origin Authorisation through the RIPE NCC hosted RPKI service, signed against the origin ASN you specify at order time. Validators on the global internet accept your announcement and strict route-server filters (MANRS, RIPE route collectors, Cloudflare, Google) let it through. Can I use the lease under my own ASN? Yes, that is the most common use case. Provide your ASN at order time and we publish the ROA against it. If you do not have an ASN yet, pair the IPv6 lease with our ASN Registration bundle and we register one for you in about 5-7 business days. How does reverse DNS work on IPv6? IPv6 reverse DNS lives under the ip6.arpa zone, with every hex nibble forming a label. For a /40 that is 10 nibbles of prefix. You can either delegate the whole /40 to your own nameservers, or host the zone on our authoritative DNS for free and manage PTR records through the Client Area. Can I split the /40 into smaller customer blocks? Yes, freely. The /40 is yours to sub-allocate as you see fit. You can assign /48 to business customers, /56 to residential customers, /64 to individual LANs, whatever fits your addressing plan. You do not need to notify us or RIPE for internal sub-allocations below the assigned block. What if I need a bigger block later? Under RIPE policy you can request an expansion once 50% of your /40 has been documented as assigned. We handle the RIPE paperwork and typically extend your block to /36 or /32 without renumbering. We simply add adjacent space. If you eventually outgrow our allocation, we help you apply for your own RIPE membership. Can I leave and take the prefix with me? The /40 itself is assigned from our LIR allocation, so it cannot be transferred to another LIR. However, moving your services to another IPv6 block is straightforward with IPv6's renumbering features (Router Advertisements, DHCPv6-PD) and we assist with any migration. If your intent is to own portable space long-term, ask us about PI (Provider Independent) assignments, which can be transferred. Do you support multi-year contracts or one-time purchases? IPv6 is leased on an annual basis, starting at 5 €/year for a /48 up to 150 €/year for a /32 , renewed automatically. We do not sell permanent transfers of our LIR-assigned space because RIPE policy ties sub-allocations to the sponsoring LIR. For transferable resources ask us about PI assignments or RIPE membership. Can I peer at DSIX and other IXPs with this block? Absolutely. Once RPKI is live and route6 is published, IXP route servers accept your announcement. We provide a free port to our own DSIX Internet Exchange (AS58218) for any ASN announcing prefixes from our LIR. For remote IXPs, our LOA gets you onboarded wherever you peer. Do you handle abuse-c and abuse reports? The abuse-c on your inet6num object points to your role object by default, so abuse reports go directly to you. If you prefer, we can list our own NOC as abuse-c and forward reports to you. Useful during the first weeks while you set up your abuse handling process. What is the difference between ALLOCATED and ASSIGNED in my RIPE object? These are distinct status values in the RIPE Database. ALLOCATED-BY-LIR means we, as the sponsoring LIR, have allocated the block to your organisation for further distribution: you are allowed to carve it into smaller pieces and sub-assign them to your own downstream customers or services. ASSIGNED (typically ASSIGNED PA at the /48 boundary) is the end-of-chain status meaning the block is used directly by an end user and cannot be re-assigned. Every DreamServer lease is registered as ALLOCATED-BY-LIR , so you always have the freedom to sub-assign further without asking us or RIPE for permission. Does the lease include IPv4? No. RIPE NCC exhausted its IPv4 free pool in 2019 and we deliberately stay out of the IPv4 grey market, where per-address pricing has climbed 10-30x over the last decade. The only sustainable path for new networks is IPv6, possibly paired with NAT64/DNS64 or an IPv4 proxy tier provided by your upstream. Can I use the leased IPv6 with AWS, Azure or Google Cloud? Not directly inside their managed VPCs: cloud providers allocate IPv6 from their own ranges. The lease fits natively when you run bare-metal, dedicated or colocated infrastructure on our side or any datacenter that lets you BGP-announce customer prefixes. You can also extend the block into cloud VMs through IPsec/WireGuard/GRE tunnels, giving hybrid deployments a single consistent IPv6 addressing plan. How do I confirm my IPv6 setup actually works end-to-end? After the route is live, the in-panel tools give you three independent checks: RPKI Check shows Valid/Invalid at multiple global validators, BGP Status queries RIPE RIS to count how many route collectors see your announcement, and WHOIS confirms inet6num + route6 are public. Externally, test-ipv6.com , bgp.tools and any looking glass (Hurricane Electric, Cloudflare) are the standard sanity checks. What firewall basics should I know specifically for IPv6? Every IPv6 address is public: there is no NAT to hide behind, so default-deny inbound at the edge is mandatory. Always permit ICMPv6 types 1, 2, 3, 4, 128, 129 and 133-137 (they carry Path MTU Discovery and Neighbour Discovery; blocking them breaks connectivity). Filter fc00::/7 ULA at the internet edge. We ship starter firewall policies for Cisco IOS, Juniper, MikroTik, nftables and pf on request. Can I request a specific prefix or a vanity IPv6 block? The automation assigns the next free /40 from our /29 pool by default, but if you have a business reason for a specific prefix (continuity with a previous announcement, a memorable pattern, or internal addressing conventions), open a ticket at order time. Subject to availability we reserve the requested block at no extra charge. How do you handle DDoS attacks targeting my leased IPv6? Volumetric L3/L4 attacks are handled by our RTBH (Remotely Triggered Black Hole) infrastructure. See the SLA page for detection and trigger SLAs. Customers who also use DreamServer dedicated servers or VPS get RTBH automatically. For customers who announce the lease from their own network but peer with us at DSIX, we can still apply blackhole community tags on the affected /48 or /128 upstream. Layer 7 application attacks require a WAF or scrubbing tier on your side. Show 15 more questions × Join the waiting list Get notified the moment an IPv6 /32 subnet is back in stock. Email address * Name (optional) Company (optional) Website Notify me Double opt-in: we email you a confirmation link. You are added only after you confirm, and we send a single email when the block is available. No spam, unsubscribe anytime. ============================================================================== # LIR Sponsoring | Transfer Your IPv6 or ASN to DreamServer | RIPE LIR URL: https://dreamserver.ro/en/lir-services/lir-sponsoring/ (RO: https://dreamserver.ro/ro/lir-services/lir-sponsoring/) LIR Sponsoring | Transfer Your IPv6 or ASN to DreamServer | RIPE LIR Home › LIR Services › LIR Sponsoring Zero downtime • No renumbering • No lock-in LIR Sponsoring Your current LIR is closing, charging too much or not answering tickets? Move the sponsorship of your existing IPv4 and IPv6 prefixes or ASN to DreamServer's RIPE NCC LIR in a single coordinated change. Your announcements stay on the routing table, your RPKI ROAs stay signed, only the mnt-by , org and sponsoring attributes change in the database. Order now How it works Starting at 100 € / year per sponsored resource (IPv4, IPv6 prefix or ASN) No RIPE transfer fee on our side RPKI continuity preserved Annual RIPE audit handled Cancel anytime, move back out Full ownership retained Why customers switch sponsors Four reasons your current LIR has become a liability The LIR is closing. RIPE NCC membership is a recurring cost; smaller LIRs that have run out of customers sometimes wind down operations. If your sponsor closes without arranging a hand-over, your resources can end up in limbo. Pricing has drifted. Annual sponsorship fees of 200-400 € per resource are common. If you are paying far above market rate for administrative work your current LIR has automated, it is time to re-shop. Operational neglect. Delayed RPKI ROA updates, ignored abuse-c rotations, late audit responses or no support during routing emergencies, any of these signal that your LIR is not investing in the infrastructure your resources depend on. Strategic concentration. You already run services on DreamServer infrastructure or peer with us at DSIX, and consolidating LIR administration simplifies your vendor footprint and support loop. What stays the same ASN number and every IPv4 or IPv6 prefix stay identical Your BGP announcements never pause Admin-c, tech-c and legal ownership stay with you RPKI ROAs remain published without interruption Existing peering relationships stay in place Only the mnt-by , org and sponsoring attributes at RIPE change. Your routers and peers never notice. The sponsorship transfer, step by step Standard transfers close in 3 to 5 business days. The only part that depends on a third party is RIPE NCC confirming the sponsor change. 1 Resource inventory You send the list of resources (ASN, IPv4 and IPv6 prefixes) and your current sponsor's contact. We draft a migration plan and quote. 2 Sponsor letter We issue a sponsor agreement under your legal entity and contact the outgoing LIR to release the resources. Most LIRs release within a week. 3 RIPE update Sponsorship changed in the RIPE Portal, mnt-by rotated to our maintainer, org attribute updated, abuse-c refreshed. 4 RPKI migration ROAs re-signed under our CA (same ASN, same prefix, new certificate). Dual validity window while old ROAs are revoked so nothing is ever invalid. 5 Closed out Credentials delivered, handover documented, first annual invoice issued. Old LIR loses write access. Your routing never blinked. Interactive preview of the Client Area The RIPE ASN Management Panel, Click Through Every Tab Once your ASN is live, this self-service panel is yours. Every tab below actually switches, exactly like the real thing. Click AS-SET , Details & Contacts , IRR Policy , BGP Config or any other tab to see what you manage from your account. dreamserver.ro/client/clientarea.php?action=productdetails&id=... AS57050 EXAMPLE-NET Active RIPE DB RIPEstat Maintainer EXAMPLE-MNT Organisation ORG-EX12-RIPE Route Objects 2 AS-SET Members 3 Route Objects AS-SET Details & Contacts BGP Status IRR Policy BGP Config WHOIS Route Objects (IRR) Register the prefixes you announce in the RIPE routing registry. Upstreams and IX route servers use these to validate your BGP announcements. IP Prefix (CIDR) Address Family Create Route Object Origin AS: AS57050 (automatic) Active Route Objects Prefix Type Origin Status 212.81.56.0/24 route AS57050 active Delete 2a10:fa80:12::/48 route6 AS57050 active Delete AS-SET Management An AS-SET groups your ASN with your downstream customers. Upstreams build prefix filters from it. It is always created under your own ASN. Current AS-SET: AS57050:AS-CUSTOMERS Members one per line AS57050 AS64500 AS64501 Your own ASN (AS57050) is always included. Max: 50 members. Update Members Delete AS-SET Details & Contacts Live in RIPE The fields currently on your aut-num. Edit and Save to change them. admin-c and tech-c must point to a person or role that already exists. descr one line per entry EXAMPLE-NET Autonomous System admin-c JD1503-RIPE tech-c JD1503-RIPE Save Details to RIPE Revert to current Abuse contact (abuse-c) abuse-c AR2201-RIPE abuse-c is stored on your organisation object (ORG-EX12-RIPE), not on the aut-num, and can only be changed by that organisation's maintainer. Your Contacts Handle Created JD1503-RIPE 2026-06-14 10:22 Use Edit Delete BGP Visibility & Announced Prefixes Live data from RIPE RIS route collectors. Check whether your ASN is seen in the global routing table. Check BGP Visibility ✓ Visible. Your ASN is seen in the global routing table. IPv4 visibility 287 / 325 RIS peers IPv6 visibility 291 / 321 RIS peers Announced prefixes 1 v4 · 1 v6 First seen 2026-06-15 Routing Policy Live in RIPE The policy currently published for AS57050. Edit the RPSL statements, one per line, and Save to update it in the RIPE DB. import IPv4 from AS174 accept ANY from AS58218 accept AS58218 export IPv4 to AS174 announce AS-SELF to AS58218 announce AS-SELF mp-import IPv6 afi ipv6.unicast from AS174 accept ANY mp-export IPv6 afi ipv6.unicast to AS174 announce AS-SELF Save Policy to RIPE Revert to current Generate policy lines from peers Build RPSL import/export from a peer list, then insert it straight into the boxes above. Peers ASN type, one per line AS174 upstream AS58218 peer AS64500 customer Generate BGP Configuration Generator Ready-to-paste BGP configuration for your router platform, built from your peer list. BIRD 2.x FRRouting MikroTik Cisco IOS-XR # BIRD 2.x BGP Configuration for AS57050 protocol bgp upstream_dreamserver { local as 57050; neighbor 212.81.56.1 as 174; # Replace IP ipv4 { import all; export filter export_own; }; } ! FRRouting BGP Configuration for AS57050 router bgp 57050 bgp router-id 212.81.56.10 neighbor 212.81.56.1 remote-as 174 neighbor 212.81.56.1 description DreamServer-upstream ! address-family ipv4 unicast network 212.81.56.0/24 exit-address-family exit # MikroTik RouterOS v7 BGP for AS57050 /routing bgp template add name=default as=57050 router-id=212.81.56.10 /routing bgp connection add name=upstream remote.as=174 \ remote.address=212.81.56.1 \ local.role=customer templates=default !! Cisco IOS-XR BGP for AS57050 router bgp 57050 bgp router-id 212.81.56.10 neighbor 212.81.56.1 remote-as 174 address-family ipv4 unicast route-policy ACCEPT-ALL in route-policy EXPORT-OWN out ! ! RIPE WHOIS Lookup Look up your own RIPE DB objects. Queries are restricted to your ASN and related objects. Lookup aut-num: AS57050 as-name: EXAMPLE-NET org: ORG-EX12-RIPE import: from AS174 accept ANY export: to AS174 announce AS-SELF admin-c: JD1503-RIPE tech-c: JD1503-RIPE status: ASSIGNED mnt-by: RIPE-NCC-END-MNT mnt-by: DreamServer mnt-by: EXAMPLE-MNT source: RIPE Read-only preview. All names, handles and numbers shown are fictional. Your real panel is populated live from the RIPE Database. What you manage from the panel The moment your ASN is delivered, every object it needs is editable from your DreamServer account. No RIPE Portal logins, no email tickets to change a contact or a route object. Route Objects (IRR) Create or delete route and route6 objects for every prefix you announce, so upstreams and IX route servers accept your BGP advertisements. Origin AS is filled in for you. AS-SET Build and maintain your customer cone ( AS57050:AS-CUSTOMERS ) so providers can filter your downstreams. It is always namespaced under your own ASN, so you cannot touch anyone else's. Details & Contacts Edit descr , admin-c and tech-c on your aut-num, see the abuse-c , and create or manage RIPE person contacts, with existence checks so a handle never fails silently. BGP Status Live visibility from RIPE RIS route collectors: how many peers see your ASN over IPv4 and IPv6, which prefixes are announced, and when it was first and last seen. IRR Policy Read and edit the import / export / mp-import / mp-export policy published on your aut-num, or generate the RPSL from a simple peer list and drop it straight into the boxes. BGP Config Copy-paste BGP configuration for BIRD, FRRouting, MikroTik RouterOS and Cisco IOS-XR, generated from your peer list so your first session takes minutes. WHOIS Look up your ASN and its related objects straight from the RIPE Database, without leaving the panel or learning the whois command line. Interactive preview of the Client Area The IPv4 and IPv6 RIPE Management Panel, Click Through Every Tab The moment your IPv4 or IPv6 prefix moves under our sponsorship, this self-service panel becomes yours. Every tab below actually switches, exactly like the real thing. Click ROA / RPKI , Reverse DNS , inetnum / inet6num , WHOIS or any other tab to see the interface you manage for every sponsored prefix, IPv4 or IPv6. dreamserver.ro/client/clientarea.php?action=productdetails&id=... 2a10:fa80:aaaa::/40 EXAMPLE-LTD Active Prefix Length /40 Maintainer MNT-EXAMPLE IPv4 Prefix 185.72.40.0/24 IPv6 Prefix 2a10:fa80:aaaa::/40 Route Objects 3 ROAs 4 Reverse DNS 1 Reverse Zone a.a.a.a.0.4.b.6.b.0.a.2.ip6.arpa RIPE DB View Routes ROA / RPKI Reverse DNS inetnum / inet6num Objects Sub-alloc Route / Route6 Objects Route and route6 objects register your IPv4 and IPv6 prefixes in the RIPE routing registry (IRR). BGP peers use them to validate your announcements. 3 / 10 used Prefix Origin AS Status Created Actions 2a10:fa80:aaaa::/40 AS213123 Active 2026-04-08 10:42 View Delete 2a10:fa80:aaaa:1000::/44 AS213123 Active 2026-04-12 15:08 View Delete 185.72.40.0/24 AS213123 Active 2026-04-09 09:15 View Delete + Create Route / Route6 Object Prefix Your full allocation or a more-specific prefix Origin ASN * AS number originating this prefix Create route6 ROA / RPKI Management Route Origin Authorizations (ROAs) cryptographically validate that your AS is authorised to announce your prefix. Protects against BGP hijacking. 4 / 10 used Prefix Max Length ASN Status Created Actions 2a10:fa80:aaaa::/40 /48 AS213123 Active 2026-04-08 10:44 Delete 2a10:fa80:aaaa:1000::/44 /48 AS213123 Active 2026-04-12 15:10 Delete 2a10:fa80:aaaa::/40 /40 AS65001 Active 2026-04-14 09:21 Delete 185.72.40.0/24 /24 AS213123 Active 2026-04-09 09:17 Delete + Create ROA Prefix * Must be within 2a10:fa80:aaaa::/40 Max Length * Set equal to prefix length for exact match only Origin ASN * Create ROA Reverse DNS Delegation Configure reverse DNS (PTR records) by delegating the in-addr.arpa (IPv4) or ip6.arpa (IPv6) zone to your nameservers. Your reverse zones: 40.72.185.in-addr.arpa and a.a.a.a.0.4.b.6.b.0.a.2.ip6.arpa Zone Nameservers Status Actions a.a.a.a.0.4.b.6.b.0.a.2.ip6.arpa ns1.example.com ns2.example.com Active Edit Delete 40.72.185.in-addr.arpa ns1.example.com ns2.example.com Active Edit Delete + Update Reverse DNS Delegation Zone Nameservers * ns1.example.com ns2.example.com One nameserver per line. Minimum 2 required. Update Delegation inetnum / inet6num Objects View and edit your inet6num object in the RIPE database. IPv6 inet6num (2a10:fa80:aaaa::/40) inet6num 2a10:fa80:aaaa::/40 netname EXAMPLE-NET descr Example Ltd. IPv6 allocation country RO org ORG-EXML1-RIPE admin-c JD1234-RIPE tech-c JD1234-RIPE status ALLOCATED-BY-LIR mnt-by MNT-EXAMPLE source RIPE IPv4 inetnum (185.72.40.0/24) inetnum 185.72.40.0 - 185.72.40.255 netname EXAMPLE-NET descr Example Ltd. IPv4 PA assignment country RO org ORG-EXML1-RIPE admin-c JD1234-RIPE tech-c JD1234-RIPE status ASSIGNED PA mnt-by MNT-EXAMPLE source RIPE Update Fields Prefix Description Remarks Update inet6num View in RIPE DB → RIPE Database Objects All RIPE DB objects associated with your allocation. Type Key Handle Status Actions inet6num 2a10:fa80:aaaa::/40 EXAMPLE-NET Active View RIPE → inetnum 185.72.40.0/24 EXAMPLE-NET Active View RIPE → organisation ORG-EXML1-RIPE Example Ltd. Active View RIPE → mntner MNT-EXAMPLE MNT-EXAMPLE Active View RIPE → role JD1234-RIPE J. Doe Active View RIPE → route6 2a10:fa80:aaaa::/40 AS213123 Active View RIPE → route6 2a10:fa80:aaaa:1000::/44 AS213123 Active View RIPE → route 185.72.40.0/24 AS213123 Active View RIPE → Sub-allocations Organise your address space by splitting it into smaller blocks. This is local bookkeeping, no changes are made in RIPE. 3 entries Subnet Label Description Status Actions 2a10:fa80:aaaa:0::/48 Web Servers Public-facing web cluster Used Edit Delete 2a10:fa80:aaaa:1::/48 Mail SMTP / IMAP / MX Used Edit Delete 2a10:fa80:aaaa:100::/56 Staging Reserved for staging env Reserved Edit Delete + Add Sub-allocation Subnet * Must be within 2a10:fa80:aaaa::/40 Label Status Free Used Reserved Add Sub-allocation Calculator Config Gen RPKI Check BGP Status LOA WHOIS Log Subnet Calculator Split your allocation into sub-prefixes. Base Prefix Split into /48 (256 subnets) /44 (16 subnets) /56 (65,536 subnets) Calculate Splitting 2a10:fa80:aaaa::/40 produces 256 /48 subnets. calculator.output # First 5 of 256 subnets 2a10:fa80:aaaa:0000::/48 → first: 2a10:fa80:aaaa:: last: 2a10:fa80:aaaa:ffff:ffff:ffff:ffff:ffff 2a10:fa80:aaaa:0001::/48 → first: 2a10:fa80:aaaa:1:: last: 2a10:fa80:aaaa:1:ffff:ffff:ffff:ffff:ffff 2a10:fa80:aaaa:0002::/48 → first: 2a10:fa80:aaaa:2:: last: 2a10:fa80:aaaa:2:ffff:ffff:ffff:ffff:ffff 2a10:fa80:aaaa:0003::/48 → first: 2a10:fa80:aaaa:3:: last: 2a10:fa80:aaaa:3:ffff:ffff:ffff:ffff:ffff 2a10:fa80:aaaa:0004::/48 → first: 2a10:fa80:aaaa:4:: last: 2a10:fa80:aaaa:4:ffff:ffff:ffff:ffff:ffff ... 251 more BGP Config Generator Generate ready-to-use BGP configuration snippets for your router. Prefix Your ASN * Peer ASN Peer IP Generate BIRD 2 FRR MikroTik Cisco IOS bird.conf # BIRD 2.x IPv6 BGP to AS6939 router id 213.214.215.216; protocol static { ipv6 { table master6; }; route 2a10:fa80:aaaa::/40 blackhole; } protocol bgp peer_he6 { local as 213123 ; neighbor 2001:470:1f0a::1 as 6939 ; ipv6 { import filter { reject; }; export filter { if net = 2a10:fa80:aaaa::/40 then accept; reject; }; }; } frr.conf ! FRRouting IPv6 BGP router bgp 213123 bgp router-id 213.214.215.216 no bgp default ipv4-unicast neighbor 2001:470:1f0a::1 remote-as 6939 ! address-family ipv6 unicast network 2a10:fa80:aaaa::/40 neighbor 2001:470:1f0a::1 activate neighbor 2001:470:1f0a::1 prefix-list PL-OUT out neighbor 2001:470:1f0a::1 prefix-list PL-IN in exit-address-family ! ipv6 prefix-list PL-OUT seq 5 permit 2a10:fa80:aaaa::/40 ipv6 prefix-list PL-IN seq 5 deny any RouterOS # MikroTik RouterOS 7.x /routing bgp template add name=peer-he6 as= 213123 router-id=213.214.215.216 \ output.filter-chain=bgp-out input.filter-chain=bgp-in /routing bgp connection add name=he6 template=peer-he6 remote.as= 6939 \ remote.address= 2001:470:1f0a::1 /routing filter rule add chain=bgp-out rule="if (dst in 2a10:fa80:aaaa::/40 ) { accept }" add chain=bgp-out rule="reject" add chain=bgp-in rule="reject" IOS ! Cisco IOS / IOS-XE router bgp 213123 bgp router-id 213.214.215.216 no bgp default ipv4-unicast neighbor 2001:470:1f0a::1 remote-as 6939 address-family ipv6 network 2a10:fa80:aaaa::/40 neighbor 2001:470:1f0a::1 activate neighbor 2001:470:1f0a::1 prefix-list PL-OUT out neighbor 2001:470:1f0a::1 prefix-list PL-IN in exit-address-family ! ipv6 prefix-list PL-OUT seq 5 permit 2a10:fa80:aaaa::/40 ipv6 prefix-list PL-IN seq 5 deny any RPKI Validation Check Verify that your prefix has valid RPKI / ROA status. Queries the RIPE RPKI validator in real-time. Prefix Origin ASN * Check RPKI Valid The ROA for 2a10:fa80:aaaa::/40 authorises AS213123 with max-length /48. Global RPKI validators will accept announcements from this AS. RIPE Validator: Valid Cloudflare: Valid NTT: Valid Last checked: 42 seconds ago BGP Routing Status Check if your prefix is visible in the global BGP routing table. Data from RIPE RIS. Prefix Check BGP Status Visible Globally Announced by AS213123 , seen by 234 / 240 RIPE RIS collectors. Origin AS: AS213123 Most common path: AS6939 AS213123 Route collectors: 234 / 240 see it First seen: 14 days ago Communities: 6939:8100 6939:9002 Last update: 3 minutes ago Letter of Authorization (LOA) Generate a PDF letter authorising an AS to announce your prefix. Required by most transit providers and IXPs. Prefix Origin ASN * Company / Org * Authorised party Valid until Generate LOA (PDF) ✓ Ready: LOA-2a10fa80aaaa-AS213123.pdf WHOIS Lookup Search the RIPE database for any object. Lookup RIPE WHOIS % Information related to '2a10:fa80:aaaa::/40' inet6num: 2a10:fa80:aaaa::/40 netname: EXAMPLE-NET descr: Example Ltd. IPv6 allocation country: RO org: ORG-EXML1-RIPE admin-c: JD1234-RIPE tech-c: JD1234-RIPE status: ALLOCATED-BY-LIR mnt-by: ro-dreamserver-1-mnt mnt-by: MNT-EXAMPLE created: 2026-04-08T10:41:22Z last-modified: 2026-04-08T10:41:22Z source: RIPE route6: 2a10:fa80:aaaa::/40 origin: AS213123 mnt-by: MNT-EXAMPLE source: RIPE Activity Log Last 20 operations performed on this allocation. Older entries are available in the admin panel. Date Action Object Result Details 2026-04-14 09:21 create_roa roa 2a10:fa80:aaaa::/40 ✓ OK AS65001 /40 2026-04-12 15:10 create_roa roa 2a10:fa80:aaaa:1000::/44 ✓ OK AS213123 /48 2026-04-12 15:08 create_route6 route6 2a10:fa80:aaaa:1000::/44 ✓ OK origin AS213123 2026-04-09 09:17 create_roa roa 185.72.40.0/24 ✓ OK AS213123 /24 2026-04-09 09:15 create_route route 185.72.40.0/24 ✓ OK origin AS213123 2026-04-09 11:02 update_rdns rdns a.a.a.a.0.4.b.6.b.0.a.2.ip6.arpa ✓ OK ns1, ns2.example.com 2026-04-08 10:44 create_roa roa 2a10:fa80:aaaa::/40 ✓ OK AS213123 /48 2026-04-08 10:42 create_route6 route6 2a10:fa80:aaaa::/40 ✓ OK origin AS213123 2026-04-08 10:41 provision inet6num 2a10:fa80:aaaa::/40 ✓ OK ALLOCATED-BY-LIR, mnt-by MNT-EXAMPLE Showing last 9 entries Related services Managed LIR Keep your LIR, outsource ops ASN Registration Register a new ASN instead BGP Services Operate the network too Leaving your current LIR does not have to hurt Send us the resource list and we draft the migration plan the same day. Order now Email us LIR Sponsoring FAQ Common questions about moving sponsorship between LIRs. Will my BGP announcements go dark during the transfer? No. The transfer is a pure database operation. Your routers keep announcing the same prefixes with the same ASN throughout the process; RIPE database attributes change in the background. Most customers do not even know a change happened until they look at the updated whois output. Does RPKI keep working during the transfer? Yes. We use a dual-valid window: new ROAs are signed and published under our CA before the old LIR revokes theirs. At no point is your prefix without at least one valid ROA, so validators on the global internet never see a gap. What does the outgoing LIR have to do? They need to sign a release of the resource to the new sponsor. It is a standard RIPE NCC workflow and most LIRs handle it routinely. If they drag their feet, we have templates and can coordinate with them or escalate to RIPE NCC if necessary. Is there a RIPE transfer fee? Not for sponsorship changes, those are free. There is a transfer fee only for full resource ownership transfers between organisations, which is a different workflow. If your situation requires an ownership transfer as well, we quote the RIPE fee at cost. Why is 100 EUR/year the starting price? Aren't some LIRs charging 200-400? Because modern LIR automation made the per-resource marginal cost small. We maintain the RIPE membership fee regardless, so sponsoring one more /40 or ASN adds minimal work, abuse-c rotations, ROA updates, the annual audit reply. Pricing reflects that reality. Can I sponsor multiple resources at a discount? Yes. Bulk sponsoring of 3+ resources under the same organisation qualifies for volume discounts. Send us the inventory and we quote a flat annual fee for the bundle. Can I ever leave you too? Of course. Sponsorship is non-exclusive and non-locked. If another sponsor offers better terms, or you decide to become your own RIPE NCC member, we remove our mnt-by , transfer the sponsorship agreement to the new party and hand over cleanly. No exit fees. Will you support me at the annual RIPE audit? Yes. Annual audit correspondence is part of every sponsorship. We answer RIPE Registry Services' questions about your resource usage, produce assignment documentation if sub-allocations are involved, and escalate to you only if a question needs your direct input. What if the old LIR has stopped responding? RIPE NCC has an established process for abandoned LIRs. We can co-petition RIPE to recover the sponsorship if the outgoing LIR is non-responsive for more than the policy window. It adds a few weeks but the resources are never lost. Do you sponsor PI (Provider Independent) assignments? Yes. PI IPv6 and PI ASN sponsorship follow the same workflow as PA sponsorship. PI resources come with slightly different RIPE obligations (no sub-assignment), which we handle. Can you sponsor legacy (pre-RIPE-policy) resources? Yes. Legacy resources (those allocated before RIPE's current policy framework) can be brought under sponsorship if you wish, or left outside of it. We advise on the trade-offs; many legacy holders benefit from a sponsor for compliance and audit support without any policy downside. Show 8 more questions ============================================================================== # Managed LIR | Operate Your RIPE NCC LIR on Autopilot | DreamServer URL: https://dreamserver.ro/en/lir-services/managed-lir/ (RO: https://dreamserver.ro/ro/lir-services/managed-lir/) Managed LIR | Operate Your RIPE NCC LIR on Autopilot | DreamServer Home › LIR Services › Managed LIR For organisations that want to keep their own LIR Managed LIR You keep the RIPE NCC membership, the legal ownership and the General Meeting voting rights. We handle everything else: portal administration, database object maintenance, sub-allocations to your downstream customers, annual audit responses, RPKI infrastructure, abuse reports and first-line support. Your LIR stays yours, but your team stops running it on the side. Request a scoped quote What's in scope? Pricing model Custom, scope-based We price per LIR size, resource count, number of sub-allocations and support tier. Typical engagements run from a few hundred EUR/year for small LIRs to enterprise contracts for multi-resource ones. Fixed annual fee, no hourly billing Month-to-month & annual contracts No handover fee when you leave NDA-friendly engagement Who is this for When keeping your own LIR matters, but operating it does not Hosting providers and ISPs that need PA sub-allocations to downstream customers and want to present as an independent LIR, without hiring a full-time RIPE operator. Enterprises with large portable holdings , /29 IPv6, multiple ASNs, legacy PI, where RIPE membership is easier to justify than delegating to a third-party sponsor, but dedicated in-house operations are overkill. Organisations under regulatory pressure that need the direct RIPE NCC contractual relationship (for due diligence, audit trail, KYC continuity) but do not want the operational burden of maintaining RPKI CAs, audit responses and sub-allocation documentation in-house. Acquiring companies that have inherited a dormant LIR from an M&A and need it kept compliant until strategic decisions (merge, wind down, continue) are made. What you keep as the LIR RIPE NCC membership & legal ownership General Meeting voting rights Full control of downstream relationships Brand: your LIR name in WHOIS, not ours Strategic decisions (sub-allocation policies, pricing) Professional Certifications Our team consists of RIPE NCC certified professionals, with expertise in IPv6 network design, BGP security, RIPE Database management, and Local Internet Registry operations. We provide reliable, high-quality services to help organizations plan, implement, and secure their networks according to globally recognized best practices. Local Internet Registry Proficient in managing Internet number resources, including requests, distributions, registrations, and stakeholder coordination. Verify Certification IPv6 Fundamentals Certified to plan and implement IPv6 networks, calculate subnets, create addressing plans, and transition from IPv4 to IPv6. Verify Certification RIPE Database Certified in RIPE Database operations, including searching, interpreting, updating, and managing IP assignments and routing policies. Verify Certification BGP Security Qualified to assess BGP security risks, implement route validation with RPKI, and secure Internet routing against hijacks and leaks. Verify Certification IPv6 Security Expert in designing secure IPv6 networks, analyzing threats, and applying advanced strategies to protect against emerging vulnerabilities. Verify Certification What we take off your hands Every Managed LIR engagement is scoped individually, but these are the workstreams we cover most of the time. RIPE Portal operation We operate your RIPE Portal with delegated credentials: submit updates, handle Resource Transfer, respond to RIPE NCC correspondence, keep billing and org details current. Database object maintenance All your inetnum , inet6num , aut-num , org , mntner , person , role and abuse-c objects are kept up to date and cross-referenced. Sub-allocations to your customers PA assignments, customer inet6num creation, SWIP-style updates, assignment windows tracked against your RIPE policy justification. RPKI signer + validator hosting Delegated CA under your organisation, ROA signing pipeline, HA validators for your network, router config snippets, ROA audit on changes. Annual audit response We prepare the Assisted Registry Check file, justify assignments, supply sub-allocation documentation, and answer RIPE Registration Services questions in your name. Abuse contact & first-line support Staffed abuse-c mailbox with triage and escalation playbook. Optional first-line support for your downstream customers, branded as your LIR. Get a scoped Managed LIR proposal Share your resource inventory and operational requirements. We return a fixed annual quote and a draft runbook within three business days. Request proposal Email us Not sure Managed LIR is the right fit? LIR Sponsoring We become your sponsor BGP Services Network operation on top All LIR Services See the full menu Managed LIR FAQ Common questions from operators evaluating managed LIR operations. How is Managed LIR different from LIR Sponsoring? With Sponsoring we become the RIPE NCC sponsor of your resources, you do not have your own LIR. With Managed LIR, you remain the LIR (with membership, voting rights, ownership) and we operate the backend on your behalf. Sponsoring is simpler and cheaper; Managed LIR keeps you independent and visible on RIPE. Whose name appears in WHOIS and on the RIPE member list? Yours. Your LIR name remains the sponsoring party on all your resources, and your organisation stays on the public RIPE NCC member list . We operate as a delegated administrator, invisible on public records. Do we have to give you RIPE Portal credentials? You grant us a delegated admin role in the Portal with a limited permission scope. You can see every action we take in the audit log and revoke the delegation at any time. We do not need your root credentials. Can you co-exist with our in-house network team? Yes. Most engagements are co-managed: we handle the RIPE administrative surface, your team runs the network. We publish a clear RACI at onboarding so there is no ambiguity about who does what. What happens during the annual RIPE audit? We lead. We prepare the Assisted Registry Check file, compile assignment documentation, respond to RIPE Registration Services questions in your name and escalate to you only when a question requires your direct input (strategy, legal entity changes). Audits typically close in 2-3 days of calendar time. How is pricing determined? We scope based on four factors: number of resources under the LIR, number of sub-allocations (customers you assign to), support tier desired (business hours vs. 24/7), and whether you want abuse-c mailbox handling. We quote a fixed annual fee, not hourly billing. Can you run our RPKI Delegated CA? Yes. We deploy and operate a Delegated RPKI CA under your organisation, sign ROAs in a HA pipeline, and optionally provide two validator instances for your routers. This keeps your ROAs under your root of trust rather than RIPE's hosted service. What if we want to move to another provider or bring ops in-house? We hand over cleanly: RIPE Portal delegation revoked, RPKI CA migrated to your chosen host, runbooks delivered. Since you own the LIR, there is nothing to transfer contractually, only the operational relationship ends. No exit fee. Do you support white-label downstream billing? Optionally. We can invoice your downstream customers in your name for the sub-allocations they hold, or leave billing entirely to your side. We find most LIRs prefer to keep billing in-house and only delegate the RIPE Database operations. Is there a minimum LIR size for Managed LIR? No hard minimum. We engage with LIRs that have as little as a single IPv6 /29 and one ASN, and with LIRs running thousands of sub-allocations. The pricing model scales accordingly. How long does Managed LIR onboarding take? A fresh engagement typically takes 5-10 business days. We collect your legal entity info, sign the delegated admin agreement, inventory existing resources, audit current RIPE objects for gaps, migrate RPKI keys if you want us to host the CA, and document the handover runbook. Your routing never changes during onboarding. How do sub-allocations to our own customers work? You open a ticket (or API call) with the customer details and prefix size. We create the inet6num with status ASSIGNED PA , set up mnt-by and mnt-domains , register the customer organisation and role objects, and hand back the RIPE whois link. Turnaround is under 2 hours during business hours. Who handles abuse reports for our prefixes? Your choice. Option A: your team keeps the abuse-c mailbox and we only maintain its registration. Option B: we operate a monitored abuse mailbox with triage, auto-ack, and escalation rules that match your content policy. Most LIRs with more than 50 downstream customers take option B. What is the SLA on RIPE Database operations? Standard tier: 4 business hours for creates and updates, 8 business hours for new sub-allocations, 1 business day for LIR Portal operations that require RIPE review. Business-critical tier: 1 hour for emergency updates, 24/7 coverage, named contact. SLA is written into the contract. How do you secure our LIR Portal access? Every operator uses hardware-backed MFA (YubiKey or equivalent) and least-privilege RIPE roles. Access is logged in both the RIPE audit trail and our internal SIEM. On your side, the delegation can be revoked instantly from your Portal dashboard; revocation takes effect in under 60 seconds. Can you run reverse DNS and delegations for our prefixes? Yes. We host authoritative reverse DNS ( ip6.arpa ) for your allocations on anycast infrastructure and delegate sub-ranges to your downstream customers on request. Reverse updates are API-driven, so automation in your portal can trigger changes in seconds. Do you maintain our AS-SET and route objects? Yes. We keep as-set , route and route6 objects current as your customer base changes. Every onboarded downstream gets added, every removed one gets deleted promptly. Since IXP route servers and tier-1 transits filter off these objects, keeping them fresh prevents silent dropped announcements. Is support available in Romanian and English? Both. Our operations team handles tickets, phone calls and incident bridges in either language without handoff delay. Contracts can be executed in Romanian, English, or dual-language at no extra cost. How are fees invoiced and what payment terms apply? Annual sponsorship fees invoiced in EUR, net 30, by bank transfer or card. For Managed LIR contracts over 36 months, we offer a 5% discount paid upfront or a quarterly installment schedule. All invoices are legal-entity compliant for Romanian and EU VAT rules. What happens to our resources if DreamServer shuts down? The contract mandates a 90-day continuity window during which we transfer the RPKI CA, delegation, runbooks and downstream contacts to a successor operator of your choosing. Because you own the LIR membership directly with RIPE NCC, no resource is ever at risk of being re-allocated; operational ownership can move to another provider in days, not months. Show 17 more questions ============================================================================== # Our Network | AS57050 Live Topology | DreamServer URL: https://dreamserver.ro/en/network/ (RO: https://dreamserver.ro/ro/network/) Our Network | AS57050 Live Topology | DreamServer Home › Our Network LIVE TOPOLOGY Our Network AS57050 · DREAMSERVER-SRL Announced prefixes, BGP neighbours and internet-exchange presences pulled directly from RIPEstat on every page load. RIPE NCC member and LIR, MANRS participant, dual-stack IPv4/IPv6. Announced prefixes — Loading... BGP neighbours — Loading... Internet exchanges 6 Across 3 countries Peering policy Open PeeringDB verified Geographic footprint PoPs and Interconnections Primary datacenter in Bucharest, Romania. European peering presence at Frankfurt and Dusseldorf for low-latency reach into major content and transit networks. DSIX · Bucharest (HQ) LOCIX Frankfurt LOCIX Dusseldorf BGP.Exchange DUS 4b42 IX Zurich SBIX Zurich Route table Announced Prefixes Live from the global default-free zone. Every prefix is RPKI-signed against AS57050 and carries an IRR route/route6 object. Prefix Family Loading prefixes... BGP neighbours Peers & Transit Derived from RIPE RIS route collectors. Tabs switch between upstreams (we take transit from), peers (bilateral), and downstreams (customers of our AS cone). Upstreams Peers Downstreams IX Fabric Loading neighbours... Why these numbers? Upstreams, peers and downstreams come from RIPE RIS route collectors, which only see neighbours whose announcements propagate outward. Many bilateral sessions inside an IX fabric never show up there. IX Fabric pulls the full member rosters of every exchange we participate in from PeeringDB (~660 networks across all 6 exchanges) so you can see every AS we can potentially peer with. Cross-check with bgp.he.net or bgp.tools for independent views. Peering fabric Internet Exchanges Direct presences at four route-server-enabled exchanges and partnerships at two community IXes via DSIX. Open peering policy across the board. OPERATED BY US DSX DSIX Bucharest, Romania AS58218 · 10 Gbps 185.0.0.2 / 185.0.0.253 2001:7f8:133::5:7050:1/2 FRA LOCIX Frankfurt Frankfurt, Germany 1 Gbps · RS 185.1.166.169 2001:7f8:f2:e1:a5:57:50:1 DUS LOCIX Dusseldorf Dusseldorf, Germany 1 Gbps · RS 185.1.155.195 2a10:fa80:701:0:a5:57:50:1 BGX BGP.Exchange Dusseldorf, Germany 1 Gbps · RS · IPv6-only 2a10:fa80:1000:46::189 SBX SBIX Zurich Lupfig, Switzerland 1 Gbps 185.1.135.130 2001:7f8:d9:1::deda:1 4IX 4b42 Internet Exchange Zurich, Switzerland 1 Gbps 185.1.125.58 2001:7f8:d0::deda:1 Peer with AS57050 Request a bilateral session on any shared IX, or pick up our routes from DSIX / LOCIX route servers. noc@dreamserver.ro → RIPE Atlas probes 6 devices across 3 countries, live on RIPE Atlas. Ping, traceroute and DNS run continuously from our network, and everything below is free to explore on RIPE, no account needed. anchor software hardware See what these probes measure Every probe has a public page on RIPE Atlas with its built-in ping & traceroute results, uptime and connection history, all free to view, no login. Anyone with their own free RIPE Atlas account can also run measurements from these probes using RIPE's credits, not ours. ◎ All our probes on RIPE free Open the fleet on atlas.ripe.net: status, results, history. ⚓ Anchor #7686 free Our full RIPE Atlas anchor, a target for measurements worldwide. ▷ Run your own measurement Ping / traceroute / DNS from these probes. Needs a free RIPE account (your credits). Verify our live topology Everything on this page is cross-verifiable on independent third-party routing registries. Click through to audit our AS57050 announcement in real time. RIPEstat bgp.he.net bgp.tools PeeringDB MANRS RIPE NCC LOCIX Frankfurt Euro-IX IXPDB ============================================================================== # Privacy Policy & GDPR Compliance | EU Hosting | DreamServer Romania URL: https://dreamserver.ro/en/privacy/ (RO: https://dreamserver.ro/ro/privacy/) Privacy Policy & GDPR Compliance | EU Hosting | DreamServer Romania Home › Privacy & GDPR Privacy Policy & GDPR S.C. DreamServer S.R.L. is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Romanian data protection legislation. Last updated: April 2026. Supplements the Terms and Conditions . Jump to section General 1. Data Controller 2. Definitions & Scope What We Collect 3. Categories of Data 4. Cookies & Tracking How We Process 5. Legal Basis for Processing 6. Purposes of Processing 7. Data Retention 8. Data Sharing & Recipients 9. International Transfers Service-Specific 10. Dedicated Servers 11. Virtual Servers (VPS & VDS) 12. Domain Registration & WHOIS 13. LIR & RIPE Database 14. DSIX Internet Exchange 15. Client Hosted Content Your Rights 16. Your GDPR Rights 17. How to Exercise Rights 18. Complaints to ANSPDCP Security & Final 19. Data Security Measures 20. Breach Notification 21. Data Processing Agreement 22. Changes to This Policy 23. Contact 1. Data Controller The data controller for personal data processed through dreamserver.ro, the client area, and all services listed in the Terms and Conditions is: S.C. DreamServer S.R.L. VAT ID: 29975003 CIF: RO36208038 EUID: ROONRC.J2012003481409 Registered office: Str. Mircea Vulcanescu, Nr. 2, Et. 7, Ap. 25, Sector 1, Bucharest, Romania For any questions regarding the processing of your personal data, or to exercise your GDPR rights, contact our data-protection point of contact at gdpr@dreamserver.ro . 2. Definitions & Scope This Privacy Policy applies to personal data (as defined in Art. 4 GDPR) that S.C. DreamServer S.R.L. (the "Provider") processes in connection with the operation of dreamserver.ro, the Client Area at dreamserver.ro/client/, and all Services (Dedicated Servers, VPS, VDS, Domain Registration, LIR Services, DSIX, Reseller) described in the Terms and Conditions. Key GDPR roles used in this Policy: Data Controller : the party that determines the purposes and means of processing. The Provider is the Controller for all data it processes about its Clients and website visitors. Data Processor : the party that processes data on behalf of a Controller. For Client-hosted content (data that Clients store on their servers/VPS/VDS), the Client is the Controller and the Provider is the Processor . See Article 15 and Article 21 (DPA). Data Subject : the identified or identifiable natural person to whom the personal data relates. 3. Categories of Data We Collect We collect and process the following categories of personal data: Category Examples Source Identity data Full name, company name, VAT number, national ID number (where required by Romanian fiscal law for invoicing) You, at order time Contact data Email address, phone number, postal address You, at order time Billing data Payment method details (card last 4 digits), bank account IBAN, transaction history, invoices You + payment processor Account data Client Area username, hashed password, 2FA tokens, session cookies, login timestamps You, the Client Area Technical data IP addresses (yours, visiting our site and Client Area), server and web logs, user-agent strings, support ticket content Our infrastructure Communication data Emails you send us, support tickets, phone conversation notes, WhatsApp messages, chat transcripts You Service data Chosen plan, server hostname, domain names, IP addresses assigned, DSIX port details, ASN, abuse-c You + our systems Website data Pages visited on dreamserver.ro, referrer, browser type, operating system (via server logs only, not third-party tracking) Server logs We do not collect any special category data (health, political opinions, religious beliefs, biometric data) because our services do not require it. 4. Cookies & Tracking What is a cookie? A cookie is a small text file that a website places on your browser (PC, phone, or tablet) when you visit it. Cookies allow the site to recognize you on subsequent visits, remember your preferences (such as preferred language), and keep you signed in to authenticated areas. Cookies are used by the vast majority of websites to make browsing smoother. They cannot contain viruses or executable code, they cannot read data from your computer, and they are not "spyware". You can delete them at any time from your browser settings. Types of cookies by purpose Strictly necessary : required for the site to work (session, authentication, language preference). No consent is required under GDPR and the ePrivacy Directive. Functional / preference : remember choices you made (layout, region). Analytics : measure aggregated site usage (page views, traffic sources). Marketing / advertising : track users across sites to deliver personalized ads and retarget visitors. These require explicit consent under Romanian Law 506/2004 and GDPR. Third-party cookies : set by external domains when the site embeds content from them (e.g., social media share buttons, video players, ad networks). Types of cookies by duration Session cookies : deleted automatically when you close the browser. Persistent cookies : stored on your device for a fixed duration or until you delete them; allow the site to remember you on future visits. Cookies used on dreamserver.ro We use only strictly necessary cookies required for the proper functioning of the site and the Client Area: Cookie Purpose Type Duration lang Remembers your preferred language (EN/RO) Preference (necessary) 1 year lang_map Maps incoming legacy paths for language redirection Session Browser session WHMCS auth cookies Authentication and CSRF protection in the Client Area at /client/ Session Session / until logout What we do NOT use Third-party advertising or retargeting cookies (no Google Ads, Meta Pixel, LinkedIn Insight, TikTok Pixel, etc.). Cross-site user tracking. Third-party analytics platforms that identify individual users (no Google Analytics, Hotjar, Matomo Cloud, etc.). Social media embed cookies (no Facebook "Like" pixel, no embedded YouTube players on the main pages, etc.). Why no consent banner? Because dreamserver.ro uses exclusively cookies classified as strictly necessary , the ePrivacy Directive (2002/58/EC and its 2009/136 amendment) and Romanian Law 506/2004 do not require prior consent or a consent banner. We still inform you explicitly through this section, in line with the transparency principle of GDPR (Art. 12). How to control or delete cookies You can block or delete cookies at any time through your browser settings. Instructions for the most common browsers: Chrome : Settings → Privacy and Security → Cookies and other site data Firefox : Settings → Privacy & Security → Cookies and Site Data Safari : Preferences → Privacy → Manage Website Data Edge : Settings → Cookies and site permissions Note: disabling strictly necessary cookies may prevent you from signing in to the Client Area or using certain parts of the site. 5. Legal Basis for Processing We process your personal data only on one of the following legal bases under Art. 6 GDPR: Contract performance (Art. 6(1)(b) GDPR) : processing necessary to provide the Services you ordered, manage your account, process payments, deliver technical support, and maintain the service lifecycle. Legal obligation (Art. 6(1)(c) GDPR) : processing required to comply with Romanian tax and accounting legislation (invoice retention for 10 years), RIPE NCC registration policies, RoTLD registry rules, and responses to valid legal orders from Romanian or EU authorities. Legitimate interest (Art. 6(1)(f) GDPR) : processing necessary for network security, abuse detection and mitigation (including RTBH DDoS triage), fraud prevention, and defending our legal interests in case of disputes. We balance our legitimate interests against your rights and freedoms; you may object at any time. Consent (Art. 6(1)(a) GDPR) : where applicable, for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing. 6. Purposes of Processing Your personal data is used only for the following purposes: Provisioning and managing your hosting services, servers, virtual servers, domains, IP resources, and DSIX peering. Processing payments, issuing invoices (in Romanian and English), and fulfilling Romanian fiscal obligations. Providing technical support and responding to Client Area tickets, email, and phone inquiries. Maintaining network security, including monitoring for attacks, abuse, spam, and AUP violations. Triggering RTBH DDoS mitigation when sFlow telemetry detects volumetric anomalies (see SLA § 7 ). Complying with legal obligations (tax reporting, law enforcement requests, RIPE/RoTLD/ICANN policies). Sending service-related notifications: maintenance windows, SLA-affecting incidents, security alerts, billing reminders, policy updates. Improving our services and infrastructure through aggregated, anonymized analytics derived from server logs. 7. Data Retention We retain your personal data only for as long as necessary for the purposes listed above: Category Retention period Basis Account data Duration of the service agreement + 30 days after closure Contract + short transition window Billing & invoice data 10 years from the end of the fiscal year of the transaction Romanian accounting law Support tickets 3 years after last message Service improvement + dispute defense Server & web access logs 12 months Security & forensics Email correspondence 3 years after last interaction Business continuity Abuse / incident reports 5 years Legal & regulatory RIPE database records Lifetime of the assigned resources (managed by RIPE NCC) RIPE policy WHOIS / domain registrant data Lifetime of the registered domain + registry-required retention (typically 1-2 years after deletion) Registry policy (RoTLD/ICANN/EURid) Client-hosted content on servers / VPS / VDS Until the Client deletes it, or 7 days after service termination (per Terms § 24) Contract After the retention period expires, data is securely deleted or anonymized using industry-standard methods (cryptographic erasure for encrypted data, multi-pass overwrite or secure disposal for hardware). 8. Data Sharing & Recipients We do not sell your personal data. We share data only with the following categories of recipients, and only as necessary for the stated purposes: Domain registries : RoTLD (for .ro), ICANN-accredited registries (for gTLDs), EURid (for .eu), and other TLD registries. WHOIS data is transmitted as required by each registry's policies. Payment processors : for secure card processing (the Provider does not store full card numbers). Bank transfer data is exchanged with our Romanian banking partner. RIPE NCC : for IP address, ASN, and prefix registration. Contact details are published in RIPE Database objects (inetnum, inet6num, aut-num, abuse-c) as required by RIPE policy. GDPR-compliant redaction of personal data is applied where possible. PeeringDB : for DSIX members and LIR clients, the ASN and technical contact may be published (by the Client) on peeringdb.com. Legal authorities : when required by a valid Romanian or EU court order, law enforcement request, or regulatory mandate. We challenge overly broad requests and notify the affected Client when legally permitted. Professional advisors : accountants, auditors, and legal counsel bound by professional confidentiality. Sub-processors (infrastructure) : upstream Transit Providers, datacenter power/cooling suppliers, and hardware vendors. These receive only the minimum technical data required to deliver their services; they do not access Client personal data or hosted content. 9. International Transfers All personal data processed by the Provider is stored and processed exclusively within the European Economic Area (EEA) , specifically in our own datacenter in Bucharest, Romania. We do not transfer personal data outside the EEA unless: You explicitly request it (for example, by registering a gTLD domain whose registry is located outside the EEA, or by publishing information in WHOIS/RIPE/PeeringDB that is globally replicated). A valid legal basis under Chapter V GDPR exists (e.g., adequacy decision, standard contractual clauses, your explicit consent). 10. Dedicated Servers (Blade, Enterprise, Game, Micro) When you order a Dedicated Server, we process the data needed to provision and operate the physical hardware on your behalf. What we collect specifically Server hostname you choose, assigned IPv4/IPv6 addresses, assigned DSIX port (where applicable). Out-of-band management (iLO/IPMI/IMM/iRMC) VPN credentials we issue to you. Installed OS / ISO you selected; we do not inspect the contents of your drives. Hardware event logs (PSU failures, drive SMART warnings, temperature alerts) necessary for replacement SLA (see SLA § 6 ). What we do not access The contents of your drives, RAM, or network traffic. You have root access and we do not log into your server except (a) at your request via ticket, or (b) for emergency maintenance limited strictly to network-level intervention. 11. Virtual Servers (VPS LXC & VDS KVM) For VPS (LXC) and VDS (KVM) instances, the Provider operates the shared host and network but does not access the contents of individual containers or virtual machines. What we collect Configuration chosen (vCPU, RAM, storage, IP allocation). VM/container state metadata (start/stop times, resource usage for billing and capacity planning). Network logs at the hypervisor level (source/destination IP, byte counts), aggregated, not inspected payload. The Client, as Controller of data stored inside the VPS/VDS, is responsible for compliance with GDPR for data subjects affected by the Client's own services. A DPA is available (Article 21). 12. Domain Registration & WHOIS Domain registration requires disclosure of registrant contact details to the top-level registry (RoTLD for .ro, ICANN for gTLDs, EURid for .eu, and other country-code registries). WHOIS & GDPR Since the entry into force of GDPR and ICANN's Temporary Specification, registrant contact details are no longer published in public WHOIS for natural persons in the EEA; the public WHOIS shows only registrar and registration date. Full registrant data remains accessible to legitimate requestors (law enforcement, trademark holders proving legitimate interest). For .ro domains : registrant details are registered with RoTLD under their GDPR-compliant policy. See rotld.ro . For gTLDs (.com, .net, .org, etc.): data handling follows ICANN's GDPR-adjusted rules. For .eu : EURid follows the EU GDPR requirements natively. By registering a domain, you authorize the Provider to transmit the registrant data to the applicable registry. 13. LIR & RIPE Database When you receive IP resources (IPv4, IPv6, ASN) through our RIPE NCC Local Internet Registry, your contact details are published in the RIPE Database as required by RIPE policy. This is a mandatory requirement for the operation of the internet-number system. Published RIPE objects may include: inetnum , inet6num , aut-num , org , person/role , mntner , and abuse-c . The RIPE Database is publicly searchable. The Provider takes reasonable measures to minimize the personal data published (for example, using role objects and organizational contacts instead of individual names where possible). The full RIPE NCC privacy statement is available at ripe.net/about-us/legal/privacy-statement . 14. DSIX Internet Exchange Members of the DreamServer Internet Exchange (DSIX, AS58218) provide the following data which becomes visible to other DSIX members and, to the extent the Member chooses, to the public: ASN, AS name, NOC/peering contact email (published in DSIX member list and synchronized to PeeringDB by the Member). Peering policy (open / selective / restrictive). IPv4/IPv6 addresses assigned on the DSIX peering fabric (published in IX-F Member Export). BGP session state (established / idle) visible in the DSIX looking glass and route-server diagnostics. The Provider does not inspect the traffic content exchanged over DSIX. Traffic statistics (byte/packet counters at the switch port level) are collected for capacity planning and are anonymized before publication in aggregate graphs. 15. Client Hosted Content (Controller vs Processor) When a Client runs a website, database, mail server, application, or any other service on DreamServer infrastructure and that service processes personal data of end-users (e.g., your website's visitors, your customers, your employees), the following GDPR roles apply: The Client is the Data Controller of the data subjects whose personal data they process on their service. The Provider is the Data Processor , acting only on the Client's documented instructions (for infrastructure operation, backup, incident response at the Client's request). In this configuration, the Client is responsible for: providing privacy notices to their own data subjects, securing a lawful basis for processing, responding to data subject requests, and reporting personal data breaches to the Romanian authority where applicable. A Data Processing Agreement (DPA) is available on request to formalize this relationship (see Article 21). 16. Your GDPR Rights Under the GDPR, you have the following rights regarding your personal data: Right of access (Art. 15) : obtain a copy of all personal data we hold about you, along with information about how we process it. Right to rectification (Art. 16) : correct inaccurate or incomplete personal data. Right to erasure (Art. 17, "right to be forgotten") : request deletion of your personal data where there is no legal obligation to retain it (note: billing data is retained for 10 years under Romanian fiscal law). Right to restrict processing (Art. 18) : limit how we use your data in certain circumstances (e.g., while a correction request is being verified). Right to data portability (Art. 20) : receive your data in a structured, commonly used, machine-readable format. Right to object (Art. 21) : object to processing based on legitimate interest, including direct marketing. Right to withdraw consent : where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing. Right not to be subject to automated decision-making (Art. 22) : we do not perform automated profiling with legal effects; the only automated processing we run is technical (RTBH trigger, spam filters, log rotation). 17. How to Exercise Your Rights To exercise any of your rights, send an email to gdpr@dreamserver.ro or open a ticket in the Client Area. Include: The right you wish to exercise. Sufficient information to verify your identity (typically your registered email address and, for sensitive requests, additional ID verification). A description of the specific data or processing the request relates to. We will respond within 30 days of receiving a valid request. In complex cases this period may be extended by up to 2 additional months, with notification to you. If we cannot fulfill your request, we will provide a reasoned explanation and inform you of your right to complain. Exercising your rights is free of charge unless the request is manifestly unfounded or excessive (e.g., repetitive), in which case a reasonable fee may apply or the request may be refused. 18. Complaints to ANSPDCP You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing: Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP) Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania Website: www.dataprotection.ro Email: anspdcp@dataprotection.ro You also have the right to bring a claim before competent Romanian courts, or the courts of the EU member state where you reside or where the alleged infringement took place. 19. Data Security Measures We implement appropriate technical and organizational measures to protect your personal data, including: Encryption in transit : TLS 1.2+ with modern cipher suites on all public endpoints (dreamserver.ro, Client Area, email, control panels). Access controls : role-based permissions in internal systems; principle of least privilege. Authentication : strong password policy and optional 2FA (TOTP) in the Client Area. Network isolation : out-of-band management is reachable only through per-Client VPN, never exposed to the public internet. Logging & monitoring : access to internal systems is logged; anomaly detection via sFlow at the network edge. Physical security : on-site staff, access control, CCTV in our Bucharest datacenter. Staff training : internal data-protection awareness for all personnel with access to Client data. Secure disposal : drives removed from rotation are wiped (multi-pass overwrite) or physically destroyed before leaving the facility. 20. Breach Notification In the event of a personal data breach likely to result in a risk to the rights and freedoms of natural persons, the Provider will: Notify the Romanian supervisory authority (ANSPDCP) within 72 hours of becoming aware of the breach, as required by Art. 33 GDPR. Notify affected Clients without undue delay when the breach is likely to result in a high risk to their rights and freedoms, as required by Art. 34 GDPR. Communicate (at minimum): the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its possible adverse effects. Maintain an internal record of all personal data breaches, their effects, and remedial actions, as required by Art. 33(5) GDPR. 21. Data Processing Agreement (DPA) Where the Provider acts as a Data Processor on behalf of the Client (typically when the Client's services running on our infrastructure process personal data of end-users), a Data Processing Agreement conforming to Art. 28 GDPR is available on request. The standard DPA covers: Subject matter, duration, nature, and purpose of the processing. Categories of data subjects and types of personal data. Processor obligations (confidentiality, security measures, sub-processor engagement rules, assistance with data subject requests, breach notification to the Controller). List of authorized sub-processors (Transit Providers, PeeringDB, RIPE NCC, payment processors). Return or deletion of personal data at the end of the processing. Request a copy by emailing gdpr@dreamserver.ro . 22. Changes to This Policy The Provider may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. Material changes will be communicated: Via email to active Clients, at least 15 days before the change takes effect (mirroring the Terms § 28 notification rule). By publishing the updated version at dreamserver.ro/en/privacy/ with the "Last updated" date visible at the top and bottom of the page. Continued use of the Services after the effective date constitutes acceptance of the updated Policy. If you do not agree with a change, you may exercise your GDPR rights (Article 17) and terminate the Services under Terms § 25 . 23. Contact For any privacy-related inquiry, to exercise your GDPR rights, or to request a DPA: Privacy / GDPR email: gdpr@dreamserver.ro General email: contact@dreamserver.ro Phone: +40 773 870 363 Postal: S.C. DreamServer S.R.L., Str. Mircea Vulcanescu, Nr. 2, Et. 7, Ap. 25, Sector 1, Bucharest, Romania Last updated: April 2026. ============================================================================== # Managed Services | Server Admin, Backup, Cloud, .ro Domains | DreamServer URL: https://dreamserver.ro/en/services/ (RO: https://dreamserver.ro/ro/services/) Managed Services | Server Admin, Backup, Cloud, .ro Domains | DreamServer Home › Services Managed Services Open-source platforms operated by us on DreamServer infrastructure in Bucharest. You get the admin panel, we handle the host, updates, monitoring and backups. Four services, one team behind them From hands-on Linux server administration and consulting to fully-managed open-source platforms in our Bucharest datacenter, all from the same engineering team. Pick what you need, combine them as you grow. Server Administration & Consulting Senior Linux engineers as an extension of your team. OS hardening, web stack, databases, monitoring, backups, migrations, 24/7 on-call. Hourly, retainer or project, on hardware you already own or in our datacenter. Learn more → Proxmox Backup Server Managed off-site VM backup: content-defined deduplication, client-side AES-256 encryption, scheduled verify. You attach PBS as a datastore in your Proxmox VE cluster, we run the rest. Learn more → Nextcloud Cloud Storage Managed Nextcloud Hub at cloud.dreamserver.ro: file sync & share, collaborative editing, calendar, contacts, mail. Sub-users with quotas. No Google, no Microsoft, all under EU jurisdiction. Learn more → .ro Domain Registration ROTLD-partner registration of .ro and Romanian second-level domains. €9 per year, free transfer-in, full DNSSEC, custom nameservers and registrant management from your client area. Learn more → URL Shortener (w2.ro) Branded short links on w2.ro with per-click analytics, QR codes, custom slugs, your own domain, password-protected and expiring links, plus a REST API. Free tier, paid plans billed annually. Learn more → Need something else? If the platform you are looking for is not here, drop us a message. We run Proxmox, Kubernetes, OpenStack, databases (PostgreSQL, MySQL), WireGuard VPN and many more as managed services for B2B customers. Contact us ============================================================================== # Managed Nextcloud Hosting in Romania, from €10/TB/mo | DreamServer Cloud URL: https://dreamserver.ro/en/services/nextcloud-storage/ (RO: https://dreamserver.ro/ro/services/nextcloud-storage/) Managed Nextcloud Hosting in Romania, from €10/TB/mo | DreamServer Cloud Home › Services › Nextcloud Hosting Managed Nextcloud hosting in Romania DreamServer Cloud · Bucharest datacenter · from €10/TB/month Your private Nextcloud Hub account on cloud.dreamserver.ro . File sync & share, collaborative editing, calendar, contacts and mail, all on EU infrastructure. Desktop, mobile and web clients. Sub-users with quotas. No Google, no Microsoft. TLS in transit, encrypted at rest Bucharest datacenter, EU jurisdiction GDPR-aligned by design Configure & order See control panel Configure & order DreamServer Cloud Managed Nextcloud Hub in our Bucharest datacenter. Slide to pick the size you need. Flat €10 per TB per month, resize online any time. Storage 1 TB Total € 10.20 /mo 1 TB · 1 user · 10 groups Storage 1 TB · €10.00 / TB 1 TB 5 TB 10 TB Users 1 user · €0.10 / user 1 13 25 Groups 10 groups · €0.01 / group 10 55 100 Monthly Quarterly −5% Semi-annual −10% Annual −15% Order now € 10.20 /mo Need more than 10 TB or a custom configuration? Contact sales for a tailored plan. How it works Three steps from order to first file No infrastructure to set up on your side. You order, we provision, you sign in. 1 Order online Pick a size on the slider above and pay. Provisioning runs automatically and your account is live in a few minutes. 2 Get credentials Your control panel in the client area shows the URL, username and password. One-click copy buttons, hidden by default. 3 Sign in & invite Open Nextcloud in the browser, install the desktop and mobile apps, then create sub-users for the rest of your team. Why Nextcloud Hub An entire collaboration suite, on your own EU server Four deep-dive features that turn DreamServer Cloud into a private replacement for Google Drive, Dropbox and Microsoft 365, hosted in Bucharest, owned by your organisation. Sync everywhere One folder on every device Install the Nextcloud Desktop client on your laptop, the Nextcloud iOS or Android app on your phone, or just open the web UI in any browser. Your files appear identically everywhere, with conflict-free background sync, selective sync per folder and offline access on mobile. Native desktop clients for Windows, macOS and Linux iOS and Android apps with auto-upload of camera photos Web UI with drag-and-drop, no install required WebDAV for any third-party tool that needs raw file access Teams & quotas Sub-users, custom groups, per-user quotas Invite the rest of your team to share the same storage allocation. Create sub-users with their own login and quota, organise them into custom groups for easier sharing, and revoke access in one click when someone leaves. You are the admin of your tenant. Per-user quota: cap each sub-user inside your global allocation Custom groups for departments or projects, share to a group at once Reset, suspend or delete a sub-user with a single click Tenant-isolated, your sub-users only see each other, never the rest of the server Sharing & permissions Share with anyone, control everything Send a public link, invite a sub-user, or federate with another Nextcloud instance, all from the same dialog. Per-share you choose read-only, upload, edit or full control, set an expiry date, password-protect the link, or limit downloads to specific people. Public links with optional password and expiry date Per-user / per-group permissions: read, edit, upload, share-again Federated sharing across two Nextcloud instances over the network Full audit log: see who opened or downloaded what, and when More than just files Mail, calendar, kanban, more than just files Nextcloud Hub bundles a full collaboration suite on top of file storage. Shared calendars, address books, kanban boards in Deck, notes and tasks, full-text search across everything, plus an entire app store of optional add-ons. Replace the multi-vendor SaaS stack with one EU server. Calendar, Contacts, Mail, Notes, Tasks, Deck (kanban) Collabora Online or OnlyOffice for collaborative document editing Full-text search across files, notes, mail, calendar entries Anything from the official Nextcloud app store, installable on demand Client area preview Your Nextcloud control panel Once your account is active, every day-to-day action is one tab away in your DreamServer client area: storage usage, sub-user management, custom groups, password reset and account settings. Here is exactly what you see, populated with sample values. dreamserver.ro/client/clientarea.php?action=productdetails&id=8421 Overview Sub-Users Groups Settings Open Nextcloud → 👋 Welcome back, ana@team Your Nextcloud account is active on cloud.dreamserver.ro . Use the buttons below to jump in or manage your team. Open in browser My files NC settings Storage 💾 2.34 TB / 5 TB 46.8% used · 2.66 TB free Sub-users 👥 9 / 25 8 active, 1 disabled Custom groups 🏷️ 3 / 10 marketing, finance, project-x ⚡ Quick actions ➕ Create sub-user Add a team member to your storage 🏷️ Create group Organise sub-users into a group 🔒 Login details Use these credentials with the Nextcloud Desktop app, the iOS / Android app, or the web UI. Sign in with either the username or the email; both work. URL https://cloud.dreamserver.ro Copy Username / Email Copy Password Show Copy 💡 Tip: you can sign in with either the email or the short username. Most people prefer the email since it is easier to remember. Want to add a security key or TOTP? Two-factor authentication protects your account even if the password leaks. Enable 2FA → Reset password 👥 Recent sub-users Username Display name Storage Last login ana-bogdan Bogdan Pop 320 GB / 500 GB 2 hours ago Active ana-claudia Claudia Ionescu 110 GB / 500 GB yesterday Active ana-dan Dan Vasile 820 GB / 1 TB 5 hours ago Active ana-elena Elena Marin 1.2 TB / 1.5 TB 1 hour ago Active 🏷️ Your groups Group Members Used storage marketing 3 users 1.2 TB finance 2 users 0.5 TB project-x 4 users 2.1 TB 👤 Account info Username ana Email ana@team.example.com Display name Ana Popescu Status Active 👥 Manage sub-users Create additional user accounts that share your storage allocation. You are the admin of your group. 9 / 25 Sub-users ➕ Create sub-user Username (suffix) Will be prefixed with your username, e.g. ana-maria Display name Email Password Per-user quota Add to custom groups marketing finance project-x Create ana-bogdan Bogdan Pop ✉ bogdan@team.example.com Active 🏷️ marketing 💾 Storage 320 GB / 500 GB 🕔 Last login: 2 hours ago 🏷️ 🔑 ⏸ 🗑 ana-claudia Claudia Ionescu ✉ claudia@team.example.com Active 🏷️ finance 💾 Storage 110 GB / 500 GB 🕔 Last login: yesterday 🏷️ 🔑 ⏸ 🗑 ana-dan Dan Vasile ✉ dan@team.example.com Active 🏷️ project-x 💾 Storage 820 GB / 1 TB 🕔 Last login: 5 hours ago 🏷️ 🔑 ⏸ 🗑 ana-elena Elena Marin ✉ elena@team.example.com Active 🏷️ project-x 🏷️ marketing 💾 Storage 1.2 TB / 1.5 TB 🕔 Last login: 1 hour ago 🏷️ 🔑 ⏸ 🗑 ana-florin Florin Stan ✉ florin@team.example.com Disabled 💾 Storage 45 GB / 500 GB 🕔 Last login: 3 weeks ago 🔑 ▶ 🗑 🏷️ Manage groups Create groups to organise your sub-users (e.g. Marketing, Finance, Project-X). You are the admin of every group you create; sub-users can belong to multiple groups. 3 / 10 Custom groups ➕ Create group Group name Letters, digits and dashes only. Will be prefixed internally so it does not collide with other clients. Create 🏷️ marketing 3 users Members ana-bogdan ana-elena ana-mihai 🗑 🏷️ finance 2 users Members ana-claudia ana-vlad 🗑 🏷️ project-x 4 users Members ana-dan ana-elena ana-irina ana-radu 🗑 ⚙️ Account settings Update the password, display name and email used by your Nextcloud account. Changes apply immediately on the Nextcloud server. Username ana Email (login) ana@team.example.com Display name Ana Popescu 🔐 Change password Set a new password for signing in to Nextcloud. Use 12+ characters with mixed case, digits, and symbols. New password Show Confirm password Show Save 👤 Display name This is the name shown to other users you share files with. Display name Save ✉️ Email Used for password recovery and as an alternative login. You can sign in with either your username or your email. Email Save Pick a size and you are done Configure the Nextcloud account, order in the client area, and we onboard you in minutes. Need more than 10 TB or a custom configuration? Talk to us. Configure & order Request a quote What you get A private collaboration platform as a managed service Nextcloud Hub on DreamServer infrastructure. File sync & share, calendar, contacts, mail, Deck and an entire ecosystem of apps, all on a server we manage in our Bucharest datacenter, accessed at cloud.dreamserver.ro , under EU jurisdiction. You get the admin panel, sub-user management, custom groups, per-user quotas and password resets directly from your DreamServer client area. We handle the operating system, database, object storage, TLS certificate, daily off-site backups and all upgrades. Open formats and open source: Nextcloud is free software, the data format is plain files, you can export and migrate elsewhere any time. No vendor lock-in. Included File sync & share, versioning, trash bin Full-text search across files, mail and calendar Collabora / OnlyOffice document editing Calendar, Contacts, Mail, Deck, Notes Sub-users with per-user quotas, custom groups HTTPS access at cloud.dreamserver.ro with Let's Encrypt Daily off-site backups to Proxmox Backup Server Updates, monitoring and ticket support Service details & policy What you are signing up for, in plain terms Operational targets, payment policy and data boundaries. No surprises. Uptime target 99.9% excluding scheduled maintenance. Maintenance windows are announced in advance in the client area. Provisioning Automated after payment clears. Credentials and the full control panel show up in your client area within minutes, no manual setup on your side. Non-payment policy 5-day grace period after the invoice due date. If the invoice is not paid within that window, the account and all its files are deleted irreversibly. Pay on time or renew early. Backups Daily off-site backups to our Proxmox Backup Server with 30-day retention . Restores from any point in the retention window are part of standard support. Location & jurisdiction Bucharest datacenter, Romania. EU jurisdiction , GDPR-aligned by design. Your data never leaves the EU. Support Ticket system inside the DreamServer client area. For pre-sales questions, use the contact page . Frequently asked questions Questions we hear before signup If yours is not here, ask us on the contact page . Where is my data stored? In our Bucharest datacenter. Storage stays inside the EU at all times, no data ever leaves the union, and the underlying volumes use full-disk encryption at rest. Jurisdiction is Romania, EU and GDPR-aligned. What is the uptime target? 99.9% excluding scheduled maintenance. Maintenance windows are announced in advance in the client area so you can plan around them. What happens if I miss a payment? You get a 5-day grace period after the invoice due date. If the invoice is not paid within that window, the account and all its files are deleted irreversibly . Pay on time or renew early. How are backups handled? Daily off-site backups to our Proxmox Backup Server with 30-day retention by default. Restores from any point in the retention window are part of standard support, no surprise fee. Are there bandwidth caps or egress fees? No. Both upload and download traffic are included at the flat monthly price. Throughput is limited only by the physical link between you and our datacenter. Which clients are supported? The official Nextcloud Desktop client (Windows, macOS, Linux), the Nextcloud iOS and Android apps, plus any WebDAV client and the web browser. Can I add users for my whole team? Yes. Sub-users share your storage allocation. Create them from the client area, set per-user quotas, organise them into custom groups and reset their passwords on demand. There is also a limit on the total number of sub-users you can have, configurable per plan. Where do I sign in? All accounts share the same URL: https://cloud.dreamserver.ro . You sign in with your username (or email) and password from any browser, the desktop client or the mobile app. The server is multi-tenant, but your account and your sub-users are isolated from other tenants by Nextcloud's permission and group system. The TLS certificate is from Let's Encrypt, auto-renewed. Hosting on a customer-owned domain or a per-customer subdomain is not offered. Which Nextcloud apps are available? Files (sync & share, versioning, trash bin), Calendar , Contacts , Mail , Deck (kanban), Notes , Tasks . Collabora Online or OnlyOffice for collaborative document editing on request. Anything from the official Nextcloud app store can be installed by us on demand. How fast do you provision? Automated after payment clears, typically within minutes. You receive an email with a link to the control panel in your client area where the URL, username, password and quota are ready to use. Can I migrate from Google Drive, OneDrive or Dropbox? Yes. Use the desktop client to drag-and-drop, or the official External Storage app for read-only mounts. For larger migrations we can run rclone in our network and skip the trip through your home connection, ask us when you order. What if I need more than 10 TB? Contact us for a custom-sized account. The 10 TB cap is only on the self-serve slider, not on the product itself. Can I cancel any time? Yes. Cancel from your DreamServer client area at any billing cycle and the account is released at the end of the paid period. No long-term contract, no cancellation fee. Export your files before the end date if you want to keep them. Do you read or scan my files? No. We do not read, scan, index, monetise or train models on your data. Files at rest are encrypted with full-disk encryption; in transit they go through TLS. We only access content if you explicitly ask us to (for example to recover a corrupted file). How do I rotate or reset my password? From the client area you can change your Nextcloud password (the new one applies immediately on the server) or trigger a one-shot reset that generates a strong password and shows it once. Sub-user passwords are reset the same way from the Sub-Users tab. Does it support 2-factor authentication? Yes. TOTP (Authenticator app) is enabled by default. WebAuthn (security keys, passkeys) and U2F are available too. You can enforce 2FA on every sub-user from the Settings tab. Can I share files with people who do not have an account? Yes. Public link sharing with optional password, expiry date and download-only / upload-allowed flags. Federated sharing with another Nextcloud instance is also supported. Is there a file size limit on uploads? The default upload limit is 16 GB per file via the web UI, larger via the desktop client. We can raise both on request, the only hard cap is your remaining storage quota. Do scheduled maintenance windows interrupt sync? We schedule maintenance for low-traffic windows and announce it in the client area. The Nextcloud clients retry automatically on transient errors, so a short blip during maintenance just delays a sync rather than failing it. Show more questions ============================================================================== # Proxmox Backup Server Hosting in Romania, from €10/TB/mo | DreamServer Backup URL: https://dreamserver.ro/en/services/proxmox-backup/ (RO: https://dreamserver.ro/ro/services/proxmox-backup/) Proxmox Backup Server Hosting in Romania, from €10/TB/mo | DreamServer Backup Home › Services › Proxmox Backup Server Proxmox Backup Server hosting in Romania DreamServer Backup · Bucharest datacenter · from €10/TB/month Managed, encrypted, deduplicated off-site backup for your Proxmox VE cluster, LXC containers and bare-metal Linux hosts. We run the PBS, you plug it in as a datastore. EU jurisdiction, GDPR-aligned, AES-256 keys stay with you. AES-256 client-side encryption Bucharest datacenter, EU jurisdiction GDPR-aligned by design Configure & order See control panel Configure & order DreamServer Backup Managed Proxmox Backup Server in our Bucharest datacenter. Slide to pick the size you need. Flat €10 per TB per month, resize online any time. Storage 1 TB From € 10.00 /mo €10.00 / TB / month 1 TB 5 TB 10 TB 15 TB 20 TB 25 TB Monthly Quarterly −5% Semi-annual −10% Annual −15% Order 1  TB for € 10.00 /mo Need more than 25 TB or a custom retention? Contact sales for a custom datastore. How it works Three steps from order to first backup No agent to install, no surprises. You order, we provision, you plug it into Proxmox VE. 1 Order online Pick a size on the slider above and pay. Provisioning runs automatically and the datastore is live in a few minutes. 2 Get credentials Your control panel in the client area shows the server address, API token, fingerprint and datastore name, ready to copy with one click. 3 Plug into PVE Paste the four fields into Datacenter → Storage → Add → Proxmox Backup Server . Schedule jobs from the PVE UI like any other datastore. Why Proxmox Backup Server Built for Proxmox VE, excellent for everything else Four deep-dive features that make DreamServer Backup the short path between a running VM and a durable, encrypted, verifiable snapshot in our Bucharest datacenter. Seamless integration Native Proxmox VE integration Your DreamServer Backup datastore plugs straight into Proxmox VE’s built-in backup engine. Add it once from the web UI, schedule jobs like any local storage, restore whole VMs or individual files from the same interface you already use every day. Shows up as a regular datastore in the PVE Datacenter tree Uses the PVE scheduler you already use, no extra cron or agent A single API token and fingerprint, nothing to install on the host Works with containers, VMs and bare-metal hosts through the same client Storage efficiency Deduplication & compression Proxmox Backup Server chunks your data at the block level and stores each unique chunk exactly once. Across daily snapshots of the same VM, the shared OS pages and static files get written once, the incremental chunks grow linearly with your actual changes, not with retention length. Typical 10x to 30x space savings after a few daily snapshots Incremental-forever: only new chunks travel the network Zstd compression on every chunk, stacked on top of ZFS compression Your retention grows without blowing up the quota Security & encryption End-to-end encryption you control If you turn on client-side encryption, every chunk is encrypted with AES-256 on your Proxmox VE host before it ever leaves your network. We only store opaque ciphertext. The key stays on your side, which means a compromised backup server cannot leak your data. AES-256 encryption happens on your PVE host, not on our servers Keys stay with you. We cannot read your backups, even if we wanted to Jurisdiction: Bucharest datacenter, Romania, full EU and GDPR Lose the key, the data is gone, no backdoor, no recovery service Recovery & verification Granular recovery and automatic verification A backup only counts if you can restore it. Proxmox Backup Server runs scheduled chunk-level verification in the background so silent corruption is caught long before you actually need the backup. When recovery time comes, restore an entire VM to any PVE host, mount a snapshot as a virtual disk to browse its files, or pull out a single path through the client. Full VM restore back to any Proxmox VE host Mount a snapshot as a read-only filesystem, copy specific files Pinpoint file restore by pattern from the CLI Scheduled chunk verification catches bit rot before you need a restore Client area preview Your control panel, inside your account Once your backup datastore is active, every detail you need to plug it in shows up in your DreamServer client area: usage charts, login credentials for the PBS web UI, an Add-Storage helper for Proxmox VE, the full proxmox-backup-client CLI guide, and a filterable list of your snapshots and tasks. Here is exactly what you see, populated with sample values. dreamserver.ro/client/clientarea.php?action=productdetails&id=7342 Dashboard Web UI access Proxmox VE CLI & Token Snapshots & Activity Storage usage Used 847.2 GB of 5 TB Usage 16.5% Last backup: 2026-04-24 03:17 Active operations: ⬇ 1 read ⬆ 2 write Stats refreshed: 2026-04-24 14:32:07 Backup Count Groups Snapshots CT 12 168 Host 2 28 VM 5 70 Stats from last Garbage Collection Dedup factor 9.43x Disk 112.4 GB Referenced 1.05 TB Removed 4.2 GB Pending 0 B Chunks 28,439 Last 2026-04-24 02:01 · OK Next 2026-04-25 02:00 ZFS properties Compression 2.34x Used 112.4 GB Snapshots 4.2 GB Referenced 980.1 GB Graphs Last hour Last day Last week Last month Used space I/O throughput (read / write) ■ Read   ■ Write I/O operations per second Web UI access Copy the fields below into the PBS login form, then pick "Proxmox Backup authentication server" at Realm . Click the Login button below to open PBS in a new tab. There, enter the values copied from the window (use the Copy buttons) and make sure Realm is set to "Proxmox Backup authentication server" . Proxmox Backup Server Login User name: Copy Password: Show Copy Realm: Proxmox Backup authentication server Language: Default (English) Save User name: Login Add to Proxmox VE In Proxmox VE: Datacenter → Storage → Add → Proxmox Backup Server . Fill in the fields exactly as shown in the dialog below: Add: Proxmox Backup Server × General Backup Retention Encryption ID: Copy Nodes: All (No restrictions) Server: Copy Enable: Username: Copy Content: backup Password: Show Copy Datastore: Copy Namespace: Root Fingerprint: Copy ? Help Add The fingerprint was auto-detected. If PVE refuses to connect, copy it manually from PBS → Configuration → Certificates. Log into Proxmox VE as root@pam (or another user with Datacenter Admin rights). In the left tree click Datacenter (top node), then the Storage tab. Click Add and pick Proxmox Backup Server from the dropdown. Fill in the fields with the values above. Click Add . The storage shows up under the left Storage View , ready to receive backups from any VM / container. API token credentials Use the token for automated integration from Proxmox VE or scripts. It is not used for web login. Token ID svc7342-pbs@pbs!backup Token Secret •••••••• Show ⚠ The token has the same rights as the user, keep it secret. If you suspect exposure, rotate it from your DreamServer account or ask the admin. Use with proxmox-backup-client All examples below use proxmox-backup-client , the official PBS Linux command-line tool. Your token and repository URL are pre-filled. 1. Install the client (one-off) On any Debian/Ubuntu (or Proxmox VE / PBS) system, install the official package: apt-get install proxmox-backup-client 2. Set credentials (per session or in .bashrc) These three env vars tell the client where to connect and which token to use. Add them to ~/.bashrc or ~/.profile for persistence: export PBS_REPOSITORY="svc7342-pbs@pbs!backup@pbs.dreamserver.ro:8007:svc7342" export PBS_PASSWORD='41d8e2f0-a3c7-4bd1-8f29-6ce04a7b5c12' export PBS_FINGERPRINT='4A:B1:FC:DE:82:AB:91:73:F5:28:DC:47:E1:9A:66:BF:14:7D:C5:32:8B:94:06:A2:E8:D1:7F:3B:5C:80:6E:11' 3. First backup, a whole directory Backs up everything in a directory (with permissions, metadata, hardlinks). The name etc.pxar is arbitrary, use anything that identifies the source. proxmox-backup-client backup etc.pxar:/etc 4. Multi-source backup, several inputs in one snapshot You can combine several directories / files / DB dumps into a single snapshot. Each source becomes one "archive" inside the snapshot. proxmox-backup-client backup \ etc.pxar:/etc \ home.pxar:/home \ var-www.pxar:/var/www 5. Backup from stdin (e.g. database dump) Pipe the output of any command directly into PBS, no on-disk intermediate file. Useful for big SQL dumps. mysqldump --all-databases | proxmox-backup-client backup mysql.img:- # PostgreSQL: pg_dumpall | proxmox-backup-client backup pg.img:- 6. List snapshots and backups See what is already stored. group = type + ID combo (e.g. host/myserver ); snapshot = one point-in-time backup. # All groups (host/myserver, vm/100, ct/200, etc.) proxmox-backup-client list # All snapshots inside a group proxmox-backup-client snapshot list # Details (files) of a specific snapshot proxmox-backup-client snapshot show host/myserver/2026-04-23T04:30:00Z 7. Restore, recover files List the contents of a snapshot, then extract everything or just a specific file/directory. # List the contents of a .pxar archive in a snapshot proxmox-backup-client catalog dump host/myserver/2026-04-23T04:30:00Z # FULL restore of an archive into a directory proxmox-backup-client restore host/myserver/2026-04-23T04:30:00Z etc.pxar /tmp/restored-etc # Restore JUST a single file proxmox-backup-client restore host/myserver/2026-04-23T04:30:00Z etc.pxar /tmp/passwd-restored --pattern '/passwd' 8. Mount a snapshot, browse like a normal folder For granular recovery: mount the snapshot as a read-only filesystem and navigate with cd , ls , copy files, etc. mkdir /mnt/pbs-restore proxmox-backup-client mount host/myserver/2026-04-23T04:30:00Z etc.pxar /mnt/pbs-restore cd /mnt/pbs-restore ls -la cp /mnt/pbs-restore/passwd /tmp/ # When done: proxmox-backup-client unmount /mnt/pbs-restore 9. Verify backups (integrity) Re-reads chunks to detect corruption. Also runs automatically (see the Snapshots & Activity tab, "Verify all backups" button). # (Verify is usually triggered on the server, see the Snapshots & Activity tab) 10. Prune manually (delete old backups) Remove old backups by retention rules. Warning: irreversibly deletes, always test with --dry-run first. # Dry-run: shows what would be deleted, WITHOUT deleting proxmox-backup-client prune host/myserver \ --keep-last 7 --keep-daily 14 --keep-weekly 8 --keep-monthly 12 \ --dry-run # After review, drop --dry-run to actually delete proxmox-backup-client prune host/myserver \ --keep-last 7 --keep-daily 14 --keep-weekly 8 --keep-monthly 12 11. (Optional) Client-side encryption Data is encrypted LOCALLY before reaching PBS. Not even we (PBS admins) can read backups without the key. Generate a key once and use it for every backup. Lose the key, the data is gone forever. # Generate an encryption key (ONCE, keep it safe and off-site) proxmox-backup-client key create ~/pbs.key --kdf scrypt # ENCRYPTED backup with the key proxmox-backup-client backup etc.pxar:/etc --keyfile ~/pbs.key # ENCRYPTED restore (needs the same key + key password) proxmox-backup-client restore host/myserver/SNAPSHOT etc.pxar /tmp/etc --keyfile ~/pbs.key Full help: proxmox-backup-client --help proxmox-backup-client backup --help proxmox-backup-client restore --help man proxmox-backup-client Full official documentation: https://pbs.proxmox.com/docs/ Manual actions Trigger on-demand operations on the datastore. Each queues an async task, watch progress in "Recent activity" and in the PBS web UI. ✓ Verify all backups ♻ Run garbage collection ✓ Re-reads every chunk to detect corruption. Recently verified snapshots are skipped. ♻ Frees space used by orphaned chunks (from deleted backups). Snapshots Type: All CT VM Host Verify: All OK FAILED unverified Protected: All Protected Unprotected Type ID Last backup Size Verify Protected VM vm/100 web frontend 2026-04-24 03:17 11.4 GB ✓ OK Protect VM vm/101 api service 2026-04-24 03:18 8.2 GB ✓ OK Protect VM vm/102 postgres primary 2026-04-24 03:19 14.8 GB ✓ OK Protect VM vm/110 accounting production 2026-04-24 03:22 28.9 GB ✓ OK 🔒 Unprotect VM vm/120 staging 2026-04-24 03:24 6.1 GB ✓ OK Protect CT ct/200 reverse proxy 2026-04-24 03:25 3.4 GB ✓ OK Protect CT ct/201 mail gateway 2026-04-24 03:26 1.9 GB ✓ OK Protect CT ct/202 monitoring 2026-04-24 03:27 2.7 GB ✓ OK Protect CT ct/205 new container 2026-04-24 03:28 0.8 GB unverified Protect CT ct/210 dns 2026-04-24 03:29 1.2 GB ✓ OK 🔒 Unprotect HOST host/myserver bare-metal 2026-04-24 04:30 42.1 GB ✓ OK 🔒 Unprotect HOST host/nas storage node 2026-04-24 04:32 19.5 GB ✓ OK Protect VM vm/100 web frontend 2026-04-23 03:17 11.3 GB ✓ OK Protect VM vm/101 api service 2026-04-23 03:18 8.1 GB ✓ OK Protect VM vm/102 postgres primary 2026-04-23 03:19 14.6 GB ✓ OK Protect CT ct/200 reverse proxy 2026-04-23 03:25 3.4 GB ✓ OK Protect HOST host/myserver-legacy legacy 2026-04-23 04:30 38.4 GB × FAILED Protect VM vm/100 web frontend 2026-04-22 03:17 11.5 GB ✓ OK Protect VM vm/110 accounting production 2026-04-22 03:22 28.6 GB ✓ OK Protect CT ct/202 monitoring 2026-04-22 03:27 2.6 GB ✓ OK Protect Recent activity Worker: All backup verify garbage-collection prune Status: All Running OK Error Task Started Duration Status backup vm/110 2026-04-24 14:31 - ▶ Running backup ct/205 2026-04-24 03:28 0m 14s ✓ OK backup ct/200 2026-04-24 03:25 1m 03s ✓ OK backup vm/110 2026-04-24 03:22 4m 45s ✓ OK backup vm/100 2026-04-24 03:17 4m 12s ✓ OK verify svc7342:all 2026-04-24 02:45 18m 21s ✓ OK garbage-collection svc7342 2026-04-24 02:01 1h 17m 03s ✓ OK prune svc7342 2026-04-24 01:50 0m 08s ✓ OK backup host/nas 2026-04-23 04:32 12m 42s ✓ OK backup host/myserver-legacy 2026-04-23 04:30 2m 18s × connection reset verify svc7342:weekly 2026-04-21 02:40 22m 06s ✓ OK Pick a size and you are done Configure the datastore, order in the client area, and we onboard you in a few days. Need custom sizing beyond 25 TB or a non-standard retention? Talk to us. Configure & order Request a quote What you get Enterprise-grade backup storage, fully managed What you actually buy is a dedicated quota of off-site backup space on our Proxmox Backup Server (PBS), in our Bucharest datacenter. You do not rent or manage a server, you do not get an OS or root access. You get a backup datastore that you target from your existing Proxmox VE cluster, LXC containers or bare-metal Linux hosts. Deduplicated, encrypted, verifiable, with snapshot-level granularity. You keep the keys. Client-side encryption with AES-256, deduplication across all your backups so growth stays linear with changes, not with retention. Restore a single file, a single VM or a whole datacenter with identical latency. We operate the underlying PBS host, the storage pool, monitoring and garbage collection. That side is invisible to you. You just paste the storage credentials into Proxmox VE, schedule jobs in the PVE UI, and watch retention happen automatically. Included Client-side AES-256 encryption (keys stay on your side) Content-defined deduplication, typical 10-30x space saving Incremental-forever, only changed chunks transferred Scheduled verify (checksum validation) by our automation Off-site storage: EU-jurisdiction, Bucharest datacenter Connectivity over DSIX peering, free for members We operate the PBS host, storage pool and monitoring Service details & policy What you are signing up for, in plain terms Operational targets, payment policy and data boundaries. No surprises. Uptime target 99.9% excluding scheduled maintenance. Maintenance windows are announced in advance in the client area. Provisioning Automated after payment clears. Credentials and the full control panel show up in your client area within minutes, no manual setup on your side. Non-payment policy 5-day grace period after the invoice due date. If the invoice is not paid within that window, the datastore is deleted irreversibly. Pay on time or renew early. Redundancy & liability Primary storage on DreamServer infrastructure with an offsite copy synced at most once per month , not a realtime replica. We are not liable for data loss, keep an independent second backup for anything critical . Location & jurisdiction Bucharest datacenter, Romania. EU jurisdiction , GDPR-aligned by design. Your data never leaves the EU. Support Ticket system inside the DreamServer client area. For pre-sales questions, use the contact page . Frequently asked questions Questions we hear before signup If yours is not here, ask us on the contact page . Can you read my backups? No, if you enable client-side encryption with proxmox-backup-client . Data is encrypted with AES-256 before leaving your machine; we only store opaque chunks and the key stays with you. See the CLI tab , example 11, for the one-liner to set it up. Lose the key and the data is gone, we cannot recover it either. What is the uptime target? 99.9% excluding scheduled maintenance. Maintenance windows are announced in advance in the client area so you can plan around them. What happens if I miss a payment? You get a 5-day grace period after the invoice due date. If the invoice is not paid within that window, the datastore is deleted irreversibly . Pay on time or renew early. Are you liable for data loss? No. Your backups live on DreamServer infrastructure in our Bucharest datacenter. We maintain an offsite copy synced at most once per month , not a realtime replica, so anything written since the last offsite sync would be lost if our primary copy is destroyed. For anything business-critical, keep a second independent backup somewhere else . We are not liable for data loss. Are there egress fees or bandwidth caps? No. Ingress (your backup uploads) and restore traffic are included at the flat monthly price. Throughput is limited only by the physical link between you and our Bucharest datacenter. What Proxmox VE version do I need? Proxmox VE 8.0 or newer. For bare-metal Linux hosts, proxmox-backup-client from the official Proxmox Debian repository works on Debian 11+ and Ubuntu 22.04+. What happens if I go over quota? New backups that would exceed the datastore quota are refused by PBS. No surprise overage fees, no silently billing you more. Resize online from your client area and retry. How fast do you provision? Automated after payment clears, typically within minutes. You receive an email with a link to the control panel in your client area where credentials and all integration details are ready to copy. Can I migrate from another PBS or backup provider? If you are already on another Proxmox Backup Server, use proxmox-backup-client pull-sync from your old repository into the new one. Content-defined deduplication means only new chunks transfer, not a full re-upload of identical data. What if I need more than 25 TB? Contact us for a custom-sized datastore. The 25 TB cap is only on the self-serve slider, not on the product itself. Can I back up containers and bare-metal Linux hosts, not just VMs? Yes. The same datastore accepts Proxmox VE virtual machines, LXC containers, and bare-metal Linux hosts via proxmox-backup-client . You can mix all three in one account and even in one snapshot, no separate plans or extra fees. How do I configure retention and pruning? Retention is set on the PVE side per backup job (keep last/daily/weekly/monthly/yearly). PBS enforces it automatically: when a snapshot falls outside the rules, it gets pruned at the next garbage collection. You can also prune manually from the CLI with proxmox-backup-client prune , and we recommend a --dry-run before any large cleanup. Can I cancel any time? Yes. Cancel from your DreamServer client area at any billing cycle and the datastore is released at the end of the paid period. No long-term contract, no cancellation fee. Export your backups before the end date if you want to keep them. Do you encrypt at rest on your side as well? Yes. The underlying ZFS pool uses native encryption, so even if a disk leaves our datacenter the data on it is unreadable. This is in addition to the optional client-side AES-256 encryption you control with your own key. How do I rotate or revoke the API token? From your client area you can request a token rotation; the old token is revoked and a new one is issued immediately. If you suspect an exposure, do this first, then update PBS_PASSWORD in your scripts and the storage credentials in PVE. What backup throughput can I expect? The bottleneck is almost always your uplink and dedup hit-rate, not us. From a Romanian ISP we typically see line-rate over the 1 to 10 Gbps link the source has. The first full backup of a VM is the slowest; daily incrementals after that are tiny because deduplication only sends new chunks. How do I monitor backup status and get alerts? The PBS web UI and the dashboard inside your DreamServer client area show every snapshot, verification result and recent task with its status. PVE itself can email job results on success or failure; configure it in Datacenter → Notifications . Can I export my backups and take them elsewhere? Yes. Use proxmox-backup-client pull-sync from another PBS instance or restore the snapshots locally with proxmox-backup-client restore . The data format is fully open, your snapshots are not locked to us. How long does a restore take? It depends on the snapshot size and your downstream link. With deduplication and parallel chunk fetch, restores generally run close to the line speed between you and our datacenter. A 50 GB VM over a 1 Gbps link typically lands in well under 10 minutes. Do scheduled maintenance windows interrupt running backups? We schedule maintenance for low-traffic windows and announce it in the client area in advance. proxmox-backup-client retries on transient errors, so a short blip during maintenance usually just delays a job rather than failing it. Long restarts pause new connections until we are back. Show more questions ============================================================================== # .ro Domain Registration via ROTLD · €9/year | DreamServer URL: https://dreamserver.ro/en/services/ro-domain-registration/ (RO: https://dreamserver.ro/ro/services/ro-domain-registration/) .ro Domain Registration via ROTLD · €9/year | DreamServer Home › Services › .ro Domain Registration .ro domain registration via ROTLD Official ROTLD partner · €9 per year · free transfer-in from any other registrar · full DNSSEC, custom nameservers and registrant management DreamServer is connected directly to ROTLD , the official .ro registry. Type a name, we check it at the registry in real time, you fill in the registrant contact, pay, and the domain is created at ROTLD in seconds. Same flat EUR 9 per year for every open .ro zone, billed in a single transparent line. .ro .com.ro .org.ro .info.ro .firm.ro .store.ro .tm.ro .nom.ro .rec.ro .arts.ro .nt.ro Search We query ROTLD live, results in under a second. ROTLD partner EU jurisdiction, GDPR Free transfer-in · zero registry fee Transparent ROTLD pricing A flat annual fee, billed transparently EUR 9 per year, flat, for every open .ro second-level zone. Pay for 1 to 10 years up front; no auto-renewal without your confirmation. Annual registration / renewal € 9 /year Same flat price for .ro and every open second-level (.com.ro, .org.ro, .firm.ro, .store.ro, .tm.ro, .nom.ro, .info.ro, .rec.ro, .arts.ro, .nt.ro). Multi-year orders are billed as N years × the annual fee, paid up front. 1 year €9 2 years €18 5 years €45 10 years €90 Search and order How it works From idea to live .ro in three steps No tickets, no waiting. The whole flow is automated and lands at ROTLD in under a minute after payment. 1 Search at the registry Type the name you want, pick the TLD. We query ROTLD live and tell you whether it is free, taken or in quarantine. 2 Provide the registrant Name (or company + tax ID), postal address, email, phone. Reuse a saved registrant or fill it in once and we keep it for the next domains. 3 Pay, registered live Pay the invoice and our system pushes the create command to ROTLD via the API. The domain shows up in your client area in seconds. Why DreamServer ROTLD partner: a better price than buying direct DreamServer is an official ROTLD partner. That gives us a wholesale rate the registry does not offer to end-customers who order through rotld.ro directly. We pass the saving on to you as a flat EUR 9 per year for any open .ro zone, plus the operational advantages below over a generic global reseller. Direct API Connected directly to ROTLD Our system talks to ROTLD over the official API on every operation: search, create, renew, transfer, trade, contact-update, DNSSEC, nameservers. No reseller in the middle, no nightly batch job. The state in your client area mirrors the registry one-to-one. Sub-second registry lookups, real-time availability Domain created at ROTLD within seconds of payment Registry messages forwarded to you by email as they arrive Live API health dashboard in the Status tab Registrant management Identity, contact, trade, all under control Every .ro domain has a mandatory registrant record at ROTLD. The data you provide on registration can be corrected up to 72 hours after the domain was registered, with no cost on any field. After 72 hours the data is final. The trade procedure is the only way to change the registrant from that point on, and it is not self-service in the client area: open a support ticket and our team handles it for you. The ROTLD trade fee equals a new registration and the existing paid period of the domain is forfeited. Saved registrants reusable across all your domains Free contact correction (typos, address updates) Trades are not self-service: open a support ticket and we handle them end to end (registry trade fee applies) Individual or company registrant, both with proper WHOIS DNS & DNSSEC Custom nameservers, signed at the registry Set up to 6 nameservers per domain, register glue records for in-zone hosts (ns1.yourdomain.ro), and publish DNSSEC DS records straight at ROTLD. The registry signs the .ro zone, so once your DS is in place you have a full chain of trust from the root. Up to 6 nameservers per domain (ROTLD limit) Glue record support for in-zone NS DS records (algorithm + digest) published at ROTLD Optional DreamServer authoritative DNS, DNSSEC-signed Client area preview Your .ro domain, in your client account This is exactly the panel you see in your DreamServer client area for any .ro domain you own. A sidebar with all the registry data on the left, and a "What would you like to do today?" card grid on the right with seven actions, each landing on its own form. Click around the cards to preview each one. dreamserver.ro/client/clientarea.php?action=domaindetails&id=664 example.ro Active Registrar: ROTLD Expires: 2027-04-25 Renew now · €9 / 1 yr Domain Information Status Active Registration Date 2025-04-25 Next Due Date 2027-04-25 Days Remaining 365 Billing Cycle Annually Recurring Amount €9.00 Auto-Renew Off Registrar ROTLD Nameservers ns1.dreamserver.ro ns2.dreamserver.ro ns3.dreamserver.ro ns4.dreamserver.ro Registrant Name Acme SRL Tax ID RO12345678 Country Romania What would you like to do today? Overview Snapshot of registration, expiry and contacts. Auto Renew Toggle automatic yearly renewal. Update Registrant Edit contact details at the registry. Nameservers Set the four NS the registry publishes. DNSSEC / DS Records Publish DS records at ROTLD. NS Lookup Query A, AAAA, MX, NS, TXT records. Get Auth Code Authorisation key for transfer-out. 📊 Overview A summary of example.ro . Use the cards above to jump into any management action. Domain example.ro Status Active Registered on 2025-04-25 Expires on 2027-04-25 Auto-Renew Off Registrar ROTLD DNSSEC Signed (2 DS active) Locked No 🔄 Auto Renew When auto-renew is on, we settle the renewal invoice automatically 14 days before expiry from your account credit or default payment method. Otherwise we send the invoice and you pay it manually. Auto-renewal is currently OFF You will receive a renewal invoice 30 days before the expiry of example.ro . If unpaid by expiry, the domain enters the 60-day ROTLD renew window. Enable auto-renew Save preferences Renew now · €9 / 1 yr 📝 Update Registrant Contact ID C1234567 Correction Window Closed (more than 72 hours since registration). Only address, email and phone remain editable. 🔒 Protected Information Important: Per ROTLD regulation, every field on this form can be corrected up to 72 hours after the domain was registered , free of charge. After 72 hours the data is final and the protected fields below can no longer be edited from this panel. Changing the registrant after that is only possible via the official ROTLD trade procedure, which is not self-service: open a support ticket and we run it for you. The ROTLD trade fee equals a new registration (EUR 9) and the existing paid period of the domain is forfeited. This domain's 72-hour correction window has closed. The protected fields below can no longer be changed. Full Name Person Type CNP / Fiscal Code Registration Number ✏️ Editable Information Address Line 1 * Address Line 2 City * State / Province Postal Code Country * 2-letter ISO code (e.g. RO, DE, US) Phone * Format: +CC.NNNNNNNNN (e.g. +40.727636787) Email * Save changes 💻 Current Nameservers The authoritative nameservers ROTLD publishes for example.ro . NS1 NS2 NS3 NS4 Update Nameservers 🔍 Nameserver Lookup Query ROTLD for details about any .ro nameserver administered by this registrar. Enter the full hostname (e.g. ns1.dreamserver.ro ). Lookup 🔗 Private Nameservers (Child Hosts / Glue Records) Private nameservers let you use your own hosts as ns1.example.ro or ns2.example.ro . Each record associates a hostname with an IP address directly at the domain registry (.ro). They are required when you want to use nameservers subordinate to this domain. ✏️ Modify an existing nameserver Update the IP address(es) associated with a registered private nameserver. At least one IP (IPv4 or IPv6) is required. Nameserver .example.ro Nameserver prefix (e.g. ns1, ns2) IP address 1 IPv4 or IPv6. At least one IP is required. IP address 2 IPv4 or IPv6. Optional. Modify nameserver ➕ Register a new nameserver Create a new glue record for this domain. At least one IP address (IPv4 or IPv6) is required. Nameserver .example.ro Prefix only (e.g. ns1, ns2, dns1) IP address 1 IPv4 or IPv6. At least one IP is required. IP address 2 IPv4 or IPv6. Optional. Register nameserver 🗑️ Delete a nameserver Remove a registered private nameserver (glue record) from this domain. The operation will fail if the nameserver has the DeleteProhibited status or is still in use by other domains. Nameserver .example.ro Nameserver prefix (e.g. ns1, ns2) Delete nameserver 🔒 DNSSEC: DS Records Manage DS (Delegation Signer) records for this domain DS records link your domain to a DNSSEC-signed DNS zone, establishing a chain of trust from the parent zone (.ro) to your domain's authoritative nameservers. Up to 4 DS records can be registered per domain. ⏳ Changes may take up to 24 hours to propagate across the DNS system. 📚 Current DS Records No DS records registered. ➕ Add DS Record Key Tag Integer 0-65535 Algorithm -- Select algorithm -- 8 (RSASHA256) 13 (ECDSAP256SHA256) 14 (ECDSAP384SHA384) 15 (ED25519) Digest Type -- Select digest type -- 2 (SHA-256) 4 (SHA-384) Digest Hexadecimal string (40 or 64 characters) Select a digest type above to see the expected length. Add DS Record 🔍 NS Lookup Query DNS records for any hostname using a public resolver. Useful to verify your nameserver and DNS changes from outside. Hostname Record type A (IPv4) AAAA (IPv6) NS (nameservers) MX (mail) TXT CNAME SOA DS DNSKEY Lookup Result · A record for example.ro ; <<>> DiG resolver <<>> example.ro A ;; ANSWER SECTION: example.ro. 3600 IN A 185.203.154.10 example.ro. 3600 IN A 185.203.154.11 ;; Query time: 14 ms ;; SERVER: 1.1.1.1#53 (1.1.1.1) (UDP) ;; AD flag: yes (DNSSEC validated) 🔐 Authorization Codes Security codes required for domain transfers 🔗 Registrar Transfer Code Required when moving your domain to a different registrar (e.g., from DreamServer to another provider). This code authorizes the transfer at the registry level. Also called: Auth-Code 👤 Registrant Transfer Code Required when changing the domain owner (registrant). This is a separate code managed directly by ROTLD and cannot be retrieved through this panel. Specific to .ro domains / ROTLD Authorization code could not be retrieved. The ROTLD API does not support retrieving the authorization key via API. The domain holder must log in to https://www.rotld.ro/domadmin to obtain the authorization key. For the Registrant Transfer Code or Registrar Transfer Code , contact ROTLD directly. DreamServer cannot assist with this code. Free transfer-in Already have a .ro? Move it to DreamServer, free. If your .ro is currently with another ROTLD registrar, you can switch to us at any moment. The change of registrar is free , ROTLD does not charge a fee for an inter-registrar transfer and we do not add one either. Your current registration period and expiry date are preserved. Nothing about your domain changes except the registrar of record at ROTLD: nameservers, DNSSEC, contact details and whois stay exactly as they were. Open a ticket with the domain name and we coordinate the move with your current registrar through ROTLD. The change goes live within 1 to 3 working days, with zero downtime. Start a transfer Open a ticket What you get on transfer Zero registry fee for the registrar change at ROTLD No fee from DreamServer either, literally free Original expiry date preserved Nameservers, DNSSEC and contacts kept as-is Zero-downtime cut-over (DNS not touched) Same flat €9/year for renewals afterwards Full client area on day one (NS, glue, DNSSEC, contacts) Pair your .ro with our other managed services: private cloud storage or off-site VM backup . All Romanian TLDs Every open .ro second-level zone, same flat price ROTLD operates one premium TLD (.ro) plus a set of open second-level zones. We sell every single one at the same EUR 9 per year, with the same DNSSEC, custom NS and registrant management features. TLD Suggested for EUR / year .ro Anyone (the canonical Romanian TLD) €9 .com.ro Commercial entities, generic businesses €9 .org.ro NGOs, associations, non-profits €9 .firm.ro Trade names, business identities €9 .info.ro Informational sites, content portals €9 .store.ro E-commerce shops €9 .tm.ro Trademarks, brands €9 .nom.ro Personal names (individuals) €9 .rec.ro Recreational, hobby, leisure €9 .arts.ro Cultural and artistic projects €9 .nt.ro Network infrastructure / ISPs €9 EUR 9 per year, flat, for every open ROTLD second-level zone. Same flat fee for registration and renewal. Contact correction inside the 72-hour window is free; registrant change (trade) is not self-service and follows the official ROTLD trade procedure. ROTLD policy summary What ROTLD requires, in plain terms A condensed, plain-language summary of the ROTLD registration regulation as applied to our service. The full official document is published by ROTLD: read the official ROTLD registration regulation → Eligibility Anyone can register a .ro: individuals, Romanian companies, EU companies, foreign companies. No nationality or residency requirement. Name format 3 to 63 characters , ASCII letters / digits / hyphen, hyphen not first or last. Romanian diacritics supported via IDN (Punycode). Annual fee EUR 9 per year , flat, for every open .ro zone. Multi-year up-front (up to 10 years) is allowed. Registrant identity Mandatory: full name (or company), postal address, email, phone . Companies must provide tax ID / CUI and trade register number. 72-hour correction window after registration; after that, protected fields can only be changed via a trade (not self-service, ticket-based). Registrant change (trade) Owner change uses the official trade procedure . Not self-service: open a ticket and we run it. ROTLD trade fee equals a new registration (EUR 9) and the existing paid period is forfeited . We do not add a fee on top. Inter-registrar transfer No registry-side transfer fee. Coordinated between losing and gaining registrar via ROTLD. We release outgoing transfers free of charge . DNSSEC Supported via DS records at the registry. Algorithms 8, 13, 14, 15. Up to 4 DS records per domain . Signed by ROTLD into .ro. Nameservers Up to 6 nameservers per domain. Glue records (A and AAAA) for in-zone NS supported. Renewal & expiration 60-day renew window after expiration. After that the domain enters auto-quarantine and is eventually released to the public pool. WHOIS publication Individual registrants get a redacted WHOIS by default. Companies have their entity name published, in line with EU and Romanian law. 72-hour correction window After registration you have 72 hours to correct any field, including the protected ones (name, fiscal code, registration number), at no cost. After that the data is final ; only address, email and phone stay editable. Changes to protected fields require a trade (ticket-based). Read the regulation The full ROTLD registration regulation, in Romanian, is published on the registry website: rotld.ro/reguli-de-inregistrare . By placing an order you agree to its terms. Frequently asked questions .ro registration, FAQ If yours is not here, ask us on the contact page . Who can register a .ro domain? Anyone, anywhere in the world, individual or company. ROTLD does not impose nationality or residency requirements on registrants. You only need to provide valid contact details for the WHOIS record. How much does a .ro domain cost? EUR 9 per year , flat, for any open .ro second-level zone. Multi-year registrations (up to 10 years in one go) are billed as multiples of the annual fee, paid up front. What are the rules for the domain name itself? Minimum 3 characters, maximum 63 per label. Letters a-z, digits 0-9 and the hyphen are allowed. The hyphen cannot be the first or the last character. Romanian diacritics are also supported via IDN (Punycode). Which Romanian TLDs do you sell? .ro and the open second-level zones run by ROTLD: .com.ro , .org.ro , .firm.ro , .info.ro , .nom.ro , .rec.ro , .arts.ro , .store.ro , .tm.ro , .nt.ro . All of them register at the same EUR 9 per year. How fast is registration? Real-time. As soon as the order is paid, our system talks to ROTLD via the API and the domain is created within seconds. The confirmation arrives by email and the domain shows up in your client area immediately. Can I bring an existing .ro domain? Yes, and the transfer is free . ROTLD does not charge a registry fee for inter-registrar transfers and we do not add one either. Your current expiry date is preserved; nameservers, DNSSEC and contacts are kept as-is. Open a ticket with the domain name and we coordinate with the current registrar through ROTLD, the move usually completes in 1 to 3 working days with zero downtime. What is a domain trade? A trade is the official ROTLD process for changing the registrant of a .ro domain (typically a sale or company transfer). Both the current registrant and the new registrant must consent. Trades are not available as a self-service option in your client area. If you need one, open a support ticket with the new registrant data and our team runs the trade for you, end to end. The ROTLD trade fee equals a new domain registration (EUR 9) and the existing paid period of the domain is forfeited , the trade resets the registration. We do not charge anything on top of the ROTLD trade fee. Do you support DNSSEC? Yes. You can publish your DS records (key tag, algorithm, digest type, digest) at the registry from the DNSSEC tab in your client area. We also offer DNSSEC-signed authoritative nameservers if you do not want to run your own DNS. Can I use my own nameservers? Yes. You can set up to 6 nameservers per domain (ROTLD limit) and we also let you register glue records for in-zone nameservers (e.g. ns1.yourdomain.ro ). Add them from the Nameservers tab. Is the WHOIS record public? ROTLD publishes a redacted WHOIS for individual registrants by default (only role-based contact data shown). For company registrants the entity name is public, in line with EU and Romanian law. We do not publish your personal phone or email beyond what ROTLD mandates. Can I correct the registrant data after registration? Per ROTLD regulation, every field on the registrant record can be corrected up to 72 hours after the domain was registered , free of charge. After the 72-hour window the data is final and accepted . The protected fields (full name, fiscal code, registration number) can no longer be edited from the panel. The Update Registrant tab keeps the address, email and phone editable at any time, also free. Changing the registrant itself after the 72-hour window is only possible via the official ROTLD trade procedure , which is not self-service in your client area . Open a support ticket and our team runs the trade for you. The ROTLD trade fee equals a new registration (EUR 9) and the existing paid period of the domain is forfeited . Do you charge a transfer-out fee? No. If you want to move your domain to another registrar, contact us and we release it free of charge. ROTLD does not charge a transfer-out fee either. What happens at expiry? ROTLD allows renewal up to 60 days after expiration . After that the domain enters auto-quarantine, eventually being released back to the public pool. We send three renewal reminders (30, 15 and 5 days before expiry) and a final post-expiry reminder. Can I order multiple years at once? Yes, up to 10 years in a single registration. We collect the annual fee up front for the years you order and keep the domain registered for the full period you paid. Are IDN domains (with diacritics) supported? Yes. .ro is one of the early IDN-enabled TLDs. Names with romanian diacritics register normally; the registry stores the Punycode A-label and you can use either form in URLs and DNS. Where is the registration metadata stored? At ROTLD (the official .ro registry, operated by ICI Bucharest). Our copy lives on DreamServer infrastructure in Bucharest, Romania, EU jurisdiction. We never push registrant data outside the EU. Read more about our network and datacenter . Can I cancel a domain mid-period? Once the domain is registered the annual fee is non-refundable. You can let it expire at the end of the paid period or trade it to another holder. We do not auto-renew without your confirmation. Are there bulk discounts? For 50+ domains in a single account contact us for an enterprise quote. We have a uniform per-domain price, but can simplify billing, registrant pre-fill and DNS management on top. Show more questions ============================================================================== # Linux Server Administration & Consulting | DreamServer URL: https://dreamserver.ro/en/services/server-administration/ (RO: https://dreamserver.ro/ro/services/server-administration/) Linux Server Administration & Consulting | DreamServer Home › Services › Server Administration Linux server administration and infrastructure consulting Senior engineers in Bucharest · we run your Linux servers, dedicated servers, virtual machines and containers, and we consult on the harder questions DreamServer has been running Linux infrastructure for our own customers since 2009. We extend that team to your organisation as a managed-services and consulting provider: from a one-off hardening project to a full 24/7 on-call rotation, on hardware you already own or in our Bucharest datacenter. 15+ years operating production Linux EU-based, GDPR aligned We run our own datacenter, LIR & ISP Get a quote See pricing What we offer Four ways to work with our engineering team Mix and match: many customers start with a one-off audit, move into a monthly retainer for steady operations and call us for a project when something big lands on the roadmap. Linux server administration Day-to-day care for your Linux fleet. Patches, hardening, configuration management, backup, monitoring, on-call. Debian, Ubuntu LTS, RHEL/Alma/Rocky SSH, firewall, SELinux/AppArmor Ansible, Puppet, Salt Patching cycles & CVE response Dedicated server management End-to-end care for bare-metal servers , in our datacenter or yours: hardware, OS, services and monitoring. Hardware sizing & commissioning iLO / iDRAC / IPMI access RAID / ZFS / LVM design Remote-hands coordination Virtual server administration Operations for VMs and containers . Proxmox VE, KVM, LXC, Docker and Kubernetes, on any provider. Proxmox VE, KVM, libvirt LXC, Docker, Podman Kubernetes (k3s, k8s) Live migration & snapshots Infrastructure consulting Architecture review, capacity planning, security audits, migration plans, cost optimisation, vendor selection. Architecture & capacity reviews Security audits & remediation Cloud-to-bare-metal repatriation Disaster-recovery planning Engagement models Hourly, prepaid, retainer or project Pick the shape that fits the work. The first 30 minutes of a discovery call are free; the quote that follows is fixed and written. Hourly Pay-as-you-go €60 /hour Best for occasional one-off tasks and quick consultations. 15-minute billing increments Time-tracked report each invoice Mon-Fri 09:00-18:00 EET NDA included Start hourly Prepaid block 10 hours, 6 months €550 block EUR 55/h effective, used at any pace over 6 months. 15-minute billing increments Priority over pay-as-you-go Hours dashboard in your client area NDA + standard MSA Order block Monthly retainer 20 hours / month €950 /month EUR 47.50/h effective. Unused hours roll over one cycle. Dedicated lead engineer + backup Monthly status report and roadmap Optional 24/7 on-call add-on NDA + DPA + standard MSA Talk retainer Project Fixed scope & price Custom quote Migrations, audits, full builds. One discovery call, one written SOW. Written runbook + acceptance test Single fixed price, no surprises Optional handover to retainer NDA + DPA + project SOW Brief us Prices exclude VAT. Out-of-hours work and 24/7 on-call carry a multiplier disclosed up front. We invoice in EUR; RON invoices on request at the BNR exchange rate of the day. Free 30-minute consultation, on the phone Schedule a free 30-minute call with one of our senior engineers. Tell us what you run, what hurts and where you want to go; we share initial advice and direction on the call itself, with no obligation. Book the 30-minute call contact@dreamserver.ro Concretely What we actually do, day to day A practical, non-exhaustive list of the technical work covered by every standard engagement. Anything missing is usually a quick add to the scope. OS & security OS install, kernel and package upgrades SSH hardening, key management, MFA Firewall ( nftables , ufw ), fail2ban SELinux / AppArmor policies CVE triage and emergency patching Audit logging ( auditd , journald ) Networking IPv4 + IPv6 dual-stack, BGP if needed VPN: WireGuard, OpenVPN, IPsec Load balancing: HAProxy, Nginx, Traefik DNS: BIND, NSD, Knot, PowerDNS DDoS mitigation, rate limiting TLS / Let's Encrypt automation Databases PostgreSQL: tuning, replication, PITR MySQL / MariaDB / Percona Connection pooling (PgBouncer, ProxySQL) Redis, Memcached, Valkey OpenSearch, ClickHouse, MongoDB Schema reviews, slow-query analysis Web stack nginx, Apache, Caddy, OpenLiteSpeed PHP-FPM, Node.js, Python (uWSGI/gunicorn) HTTP/2, HTTP/3, QUIC, Brotli WAF (ModSecurity / Coraza) WordPress, Magento, Drupal hardening CDN integration (Cloudflare, Fastly) Monitoring & logs Prometheus + Grafana (alerting too) Zabbix, Nagios for legacy stacks Loki, ELK, Graylog log aggregation Synthetic checks, blackbox probes Custom dashboards per team Anomaly detection & SLO tracking Backup & DR Restic, Borg, rsnapshot, rclone Proxmox Backup Server (we run one) DB-aware backups (PITR, WAL shipping) Off-site replication, 3-2-1 plans Restore drills, RPO/RTO sign-off Disaster-recovery runbooks Containers & orchestration Docker / Podman / containerd Kubernetes, k3s, OpenShift Helm charts, Kustomize, ArgoCD Container registries (Harbor, ECR) Network plugins (Cilium, Calico) Image hardening & SBOM DevOps / IaC / CI Terraform, OpenTofu, Pulumi Ansible, Puppet, Salt, Chef GitLab CI, GitHub Actions, Drone Build pipelines, blue/green deploys Secrets (Vault, sealed-secrets, SOPS) SBOM, image signing (cosign) Email infrastructure Postfix, Dovecot, Rspamd SPF, DKIM, DMARC, BIMI Deliverability audits, IP-warmup Mailserver hardening, anti-relay SMTP relay, transactional providers Mailman / mlmmj for mailing lists Why DreamServer Senior engineers, running their own production Six concrete reasons our customers stay for years. The short version: we run our own production stack, so we know what good operations actually look like. 01 We run our own infrastructure DreamServer is a Bucharest datacenter, an ISP, an Internet exchange (DSIX) and a RIPE NCC LIR. The team you hire runs production for us first. No advice we give you is theoretical. 02 Senior engineers, on payroll No subcontracting, no rotating juniors. The engineer who onboards your account is the engineer answering your tickets six months later. If we add a person we tell you, in writing, before they touch anything. 03 EU based, GDPR aligned Romanian SRL, EU data jurisdiction, GDPR-compliant by design. We sign DPAs as a matter of course. Customer data we touch on your behalf stays in the EU unless you direct us otherwise. 04 Vendor-neutral and provider-agnostic We work on your servers wherever they live: Hetzner, OVH, AWS, Azure, GCP, your rack, our datacenter . We will tell you when we think you should move and when you should stay. 05 Written SLAs, transparent SLOs Response targets are documented in your MSA. Monthly status reports show what we did, how many hours it took, what is queued and what failed. No mystery invoices. 06 Hand-off ready any time Everything we deploy is documented in a runbook in your repo. If you decide to take it back in-house, the keys, the runbook and the contact list are already yours. We do not lock anyone in. How we work From first message to ongoing operations A predictable five-step engagement. The first two steps are free; you only commit on step three. Discovery call 30 to 60 minutes on Jitsi or your choice of meeting tool. We map what you have, what hurts and what success looks like. No pressure, no surprises. Written quote Within 2 working days you receive a written quote: scope, deliverables, time estimate, price and assumptions. Either model (hourly, retainer, project) or a hybrid. MSA + access We sign an MSA, NDA, and DPA where relevant. You grant access through dedicated service keys (read-only first when feasible) and we set up a shared issue tracker. Onboarding audit For ongoing engagements we spend 4 to 8 hours documenting what is in place, listing risks and quick wins. The audit is a deliverable even if you stop here. Recurring work From there it is normal day-to-day operations: tickets, scheduled work, monthly review. Every change is in version control; everything we do is reviewable. Frequently asked questions Server administration FAQ If yours is not here, ask us on the contact page . What exactly do you do under server administration? We take care of the day-to-day life of your Linux servers: installing the OS, applying security patches, hardening SSH and the firewall, managing the web stack (nginx, Apache), databases (PostgreSQL, MySQL/MariaDB), email, backups, monitoring with Prometheus or Zabbix, and on-call response when something breaks. We work either on servers in our own datacenter or on hardware you already own elsewhere. Do I need to host with you to use these services? No. We administer servers wherever they live: bare metal in your own rack, VPS at any cloud provider (Hetzner, OVH, AWS, Azure, GCP, Linode, DigitalOcean, etc.), or in our Bucharest datacenter. The tooling and processes are the same. Hosting with us simply removes one bill and one vendor from the chain, and gives you natural integration with our other managed services like Proxmox Backup Server , Nextcloud Hub and .ro domain registration . What Linux distributions and Unix-likes do you support? All the mainstream production-grade Linux distributions: Debian, Ubuntu LTS, Red Hat Enterprise Linux, AlmaLinux, Rocky Linux, openSUSE / SLES, plus FreeBSD on request. We also support Proxmox VE (Debian-based) for virtualization hosts and standalone containers (Docker, Podman, LXC). How do you charge? Three standard models: hourly at EUR 60/hour , prepaid blocks (10 hours for EUR 550) used over 6 months and monthly retainers (20 hours for EUR 950/month) with unused hours rolling over one cycle. Multi-server or 24/7 on-call setups are quoted per scope. Project-based engagements (a migration, a security audit, a stack rebuild) are quoted as a single fixed price after a discovery call. Do you offer 24/7 on-call? Yes, as an add-on to the monthly retainer. We integrate with your alerting (Prometheus Alertmanager, Grafana OnCall, Opsgenie, PagerDuty) and an engineer responds within 15 minutes for critical incidents and 1 hour for non-critical ones. Response SLA is set in writing; please request the standard MSA when you order. How does a typical engagement start? We open with a 30 to 60 minute discovery call : what you have, what hurts, what you want to achieve. Within 2 working days we send a written quote (scope, time estimate, deliverables, price). On acceptance we sign an MSA + NDA, you grant access (typically a service SSH key + read-only credentials at first), and we start. Most engagements finish onboarding in under a week. Will you sign an NDA and a Data Processing Agreement? Yes. NDA is standard practice and we sign one before any access is granted. For workloads that touch personal data we sign a GDPR-aligned DPA . We are an EU-based company; data we touch on your behalf stays in the EU unless you explicitly direct us otherwise. Can you migrate me from one provider or stack to another? Yes. Common projects: cloud-to-bare-metal repatriation (cost cuts), CentOS to AlmaLinux/Rocky migrations, Debian/Ubuntu major-version upgrades, MySQL to PostgreSQL, monolith to containers, on-prem to Proxmox VE . Every migration is run as a project with a written runbook, a maintenance window, a rollback plan and a written acceptance test. What about security audits and compliance? We run pragmatic security audits aligned with CIS Benchmarks and OpenSCAP profiles. The deliverable is a prioritised report (critical / high / medium / low) plus a remediation plan with effort estimates. For GDPR, ISO 27001 prep or PCI-DSS scoping we work alongside your DPO/auditor on the technical side and deliver the artefacts (logs, configs, hardening proofs). Who actually does the work? DreamServer engineers, on payroll. We do not subcontract. The same engineer handles your account through onboarding and ongoing work, with a backup engineer briefed for vacations and on-call. We also run our own datacenter , our own LIR (RIPE NCC member) and our own ISP, so the team you talk to is the team that runs production infrastructure every day. Read more about us . Do you do DevOps / IaC / CI-CD? Yes. Infrastructure-as-code with Terraform , OpenTofu, Pulumi or Ansible. CI/CD on GitLab CI, GitHub Actions, Drone, Woodpecker, Jenkins. Container registries, Helm charts, Kubernetes (k3s, k8s, OpenShift). We can either build the pipeline from scratch or take over an existing one and clean it up. Can you keep working on a server you did not build? Yes, this is the most common starting point. We do an onboarding audit on the existing setup (typically 4 to 8 hours), document what we found, list the risks and the quick wins, and then either pick up day-to-day operations or run a remediation project first. The audit alone is a useful deliverable even if you decide not to engage further. Show more questions ============================================================================== # URL Shortener on w2.ro, from €0 | DreamServer w2 URL: https://dreamserver.ro/en/services/url-shortener/ (RO: https://dreamserver.ro/ro/services/url-shortener/) URL Shortener on w2.ro, from €0 | DreamServer w2 Home › Services › URL Shortener w2 Two letters for the whole web. w2.ro · DreamServer's own short-link platform · from €0 A premium two-letter domain, bought and built for one job: turning long, ugly URLs into tiny branded links you can track. Short links, detailed click analytics, QR codes, custom domains and a full API, hosted in our Bucharest datacenter under EU jurisdiction. https://example.com/very/long/path?utm_source=… → w2.ro/aX9k2 Start free on w2.ro See pricing EU-hosted · GDPR-aligned Free plan, no card No ads on your links Features Everything a modern shortener should do w2.ro is a fast, privacy-first link platform built and run by DreamServer in our own Bucharest datacenter. Here is what you can do with it. Short & custom links Auto-generated short codes, or pick your own custom slug like w2.ro/launch. Every link is instant and permanent. Detailed analytics Total clicks plus a breakdown by country, referrer, browser and operating system over time, with the real visitor IP for accurate geolocation. QR codes Every short link gets a scannable QR code for print, packaging, slides and events, generated on the fly. Your custom domain On Pro, point your own domain at w2.ro and serve links as yourbrand.com/xxxxx. Keep your brand on every click. Password & expiry Protect a link with a password, or set it to expire automatically on a date. Perfect for time-limited campaigns and private shares. REST API Every account gets an API key and a REST API to create, edit, list and delete links and read statistics, so you can automate links from your own apps. Why shorten links Why would you want a URL shortener? A raw link like https://shop.example.com/products/42?ref=fb&utm_campaign=spring&variant=blue is long, ugly and impossible to remember or track. A short link fixes all of that. Clean, shareable links Turn a messy 120-character URL into a short one anyone can read out loud, type, or paste into a chat, email or slide without it breaking. Your brand on every link On a paid plan, links use your own domain (go.yourbrand.com/sale) instead of a random shortener. Brand trust means more clicks. Know what actually works See how many people clicked, from which country, on which device and from which channel. Compare campaigns and double down on what performs. Bridge to the offline world Every link comes with a QR code. Put it on a poster, business card, product box or TV ad and send people straight to the right page. Fit tight character limits SMS, ad copy, printed materials and social bios all have limited space. A short link leaves room for your actual message. Change the destination anytime The short link stays the same while you point it wherever you need. Fix a typo or redirect an old printed QR code without reprinting anything. How it works How a short link actually works A short link is a tiny code that points to a long URL. When someone opens it, our server looks up the code and instantly redirects them - in milliseconds - while recording the click. 1 You shorten Paste a long URL. We store it and generate a short code, so example.com/very/long/… becomes w2.ro/aX9k2 . 2 You share Share the short link or its QR code anywhere - social, email, SMS, print, ads. 3 Someone clicks Their browser asks w2.ro for that code. Our server finds the original URL behind it. 4 Instant redirect We send an HTTP redirect to the real page and log the click - country, referrer, device - for your analytics. Pricing Start free, upgrade when you grow Every plan is a yearly subscription - set it once, no monthly hassle. Plans differ by how many active short links you can keep and whether you can use your own domain. Only the top plan is unlimited. Free €0 / year 10 active links w2.ro short domain Auto short codes Click analytics QR codes Start free Starter €12 / year 50 active links Everything in Free Custom addresses (w2.ro/your-name) REST API access Full analytics history Get Starter Most popular Pro €36 / year 500 active links Everything in Starter 1 custom domain Password-protected links Expiring links Get Pro Business €96 / year 5,000 active links Everything in Pro Up to 3 custom domains Higher rate limits Bulk link management Get Business Best value Unlimited €240 / year Unlimited links Everything in Business Unlimited custom domains Priority support Best for agencies Get Unlimited Prices in EUR per year, excluding VAT where applicable. Billed yearly through your DreamServer client area. Link limits count your active short links; delete old ones to free up space, or move up a plan any time. Only the Unlimited plan removes the cap, on purpose - so a cheap plan can't be resold at scale. Need a custom volume or white-label? Talk to us . Live in under a minute 1 Create an account Sign up free on w2.ro with your email. Verify and you are in. 2 Paste a long link Drop any URL, optionally pick a custom slug, and get your short w2.ro link instantly. 3 Share & track Share the short link or its QR code, then watch the clicks roll in with full analytics. Start free on w2.ro Frequently asked questions Is there really a free plan? Yes. The Free plan gives you up to 10 active short links on the w2.ro domain, with click analytics, QR codes, at no cost and no card required. Can I use my own domain? Yes, on Pro and Business. Point your domain's DNS at w2.ro and your links become yourbrand.com/xxxxx. The Free plan uses the w2.ro domain. Where is my data stored? On DreamServer infrastructure in our Bucharest datacenter, EU jurisdiction, GDPR-aligned. We never sell your data or inject ads into your links. What happens if I stop paying? After a grace period, the account is suspended: your links are paused (visitors see an "inactive link" page, so they stop generating traffic) and you cannot create new ones - but nothing is deleted. Pay the invoice and everything reactivates instantly. If it stays unpaid, the account is terminated and the links are deleted. Is there an API? Yes, on the paid plans (Starter and up). Your account gets an API key and a REST API to create, edit, list and delete links and read their statistics. Get your first short link in 60 seconds Free to start, no credit card. Upgrade to a paid plan for more links and your own domain whenever you are ready. Start free on w2.ro ============================================================================== # Service Level Agreement (SLA) | 99.9% Uptime Guarantee | DreamServer URL: https://dreamserver.ro/en/sla/ (RO: https://dreamserver.ro/ro/sla/) Service Level Agreement (SLA) | 99.9% Uptime Guarantee | DreamServer Home › SLA Service Level Agreement Our SLA defines the availability commitments, response times, and service credit policies for all DreamServer infrastructure services: Dedicated Servers (Blade, Enterprise, Game, Micro), Virtual Servers (VPS LXC & VDS KVM), DSIX peering, LIR services, and domain registration. Last updated: April 2026. Supplements the Terms and Conditions . Jump to section Uptime Commitments 1. Uptime Guarantee (Annual) 2. Network Availability 3. Datacenter Infrastructure Service-Specific SLAs 4. Dedicated Servers 5. Virtual Servers (VPS & VDS) 6. Hardware Replacement 7. RTBH DDoS Mitigation 8. DSIX Internet Exchange 9. LIR / IP Resources 10. Domain Registration Operations 11. Scheduled Maintenance 12. Service Credit Policy 13. Support Response Times 14. Incident Communication Exclusions & Claims 15. Exclusions 16. Force Majeure 17. Credit Claim Procedure 1. Uptime Guarantee (Annual) DreamServer guarantees 99.9% annual uptime for all Dedicated Server, VPS, and VDS services. This corresponds to a maximum of approximately 8 hours 45 minutes of unplanned downtime per calendar year (roughly 43 minutes 49 seconds per month on average). Uptime is measured as the percentage of time the service is accessible via the network, calculated over a rolling 12-month window: Uptime % = ((Total Minutes − Downtime Minutes) / Total Minutes) × 100 Availability is monitored continuously from multiple geographic locations. Downtime begins when the Provider detects or is notified of a service outage and ends when the service is restored and accessible. 2. Network Availability DreamServer guarantees 99.9% annual network availability for its core network infrastructure. This covers the network path from the Client's server to the Provider's upstream transit and peering connections. Network availability is measured at the switch port level. The guarantee covers: Core routing and switching infrastructure (Cisco Nexus N3K & N9K vPC) Active-active vPC connectivity inside the fabric Upstream Transit Provider connectivity (multiple carriers) DSIX peering fabric and route server availability The network availability guarantee does not cover issues beyond the Provider's network boundary, including third-party Transit Provider internal issues, destination network problems, or wider internet routing incidents. 3. Datacenter Infrastructure All DreamServer services are hosted in the Provider's own Datacenter in Bucharest, Romania. The following infrastructure guarantees apply: Power: redundant feeds with UPS and diesel generator backup; tested monthly. Cooling: N+1 precision cooling with redundant chillers. Network uplinks: multi-carrier fiber uplinks with no single point of failure at the Provider's edge. Physical security: on-site staff, access control, CCTV, locked cabinets. 4. Dedicated Servers SLA Applies to the Blade, Enterprise, Game, and Micro server lines. Network uptime : 99.9% annually on the port to which the server is connected. Out-of-band management (iLO / IPMI / IMM / iRMC) availability : 99.9% annually, reachable through the provisioned VPN. IP connectivity : all assigned IPv4/IPv6 addresses routed from day one; rDNS updates within 24 hours of request. DSIX peering port : included and operational from day one on Blade, Enterprise, and Game lines (Article 8). RTBH DDoS mitigation : active on all lines (Article 7). 24/7 NOC : incident reception at noc@dreamserver.ro , phone +40 773 870 363 . Micro Servers ship with a 1 Gbps port and full internet transit but without a dedicated DSIX peering port by default. RTBH applies on the micro line identically to the other lines. 5. Virtual Servers SLA (VPS LXC & VDS KVM) Both lines Host network uptime : 99.9% annually. Live migration : the Provider may migrate a VPS/VDS to a different host at any time for maintenance or load balancing, typically with no or minimal visible interruption. Provisioning : automated, typically within minutes of payment confirmation. VPS (LXC) Resources (vCPU, RAM, disk) represent the guaranteed minimum; CPU may burst. Storage and RAM are not overcommitted; CPU is committed at steady state. The host kernel is shared; SLA covers host reachability, not Client-installed software inside the container. VDS (KVM) Allocated vCPU, RAM, storage are dedicated to the Client's VM. The Client may run custom kernels and raw-socket workloads. SLA covers host reachability and guest boot; the Client is responsible for their own OS uptime, updates, and services. 6. Hardware Replacement Timelines In the event of a hardware failure on a Dedicated Server, the Provider commits to the following replacement timelines, aligned with Article 11 of the Terms: Drive, RAM, NIC, PSU: replacement within 12–24 hours on business days for critical failures. Motherboard / CPU: within 24 hours of confirmed failure on business days. Migration of the workload to equivalent hardware may be offered as a faster alternative. Enclosure-level failures (blade chassis, switch, backplane): on-site engineer response within 2 hours during business hours. Business hours are Mon-Fri, 09:00-18:00 EET . Outside business hours, best-effort response is provided with guaranteed resolution by the next business day. Data on drives is preserved where technically possible. If the primary drive fails, the Client must restore from their own backups; the Provider does not maintain full-image backups of Dedicated Server drives. 7. RTBH DDoS Mitigation SLA RTBH (Remotely Triggered Black Hole) filtering is included at no cost on all Services. It is continuously monitored via sFlow telemetry on the Provider's edge routers. Automatic detection + trigger : typically within 60 seconds of a volumetric anomaly exceeding configured thresholds. Manual trigger (via NOC request) : within 15 minutes of the request during business hours, best-effort outside business hours. BGP community (self-service for BGP customers) : accepted immediately by the route collectors; propagated to upstream Transit Providers automatically. Scope : effective against volumetric L3/L4 floods (UDP, SYN, amplification, reflection). Not covered : Layer 7 application-layer attacks (HTTP floods, slowloris, application-logic abuse). These require Client-side defenses such as WAF, rate limiting, or caching. ⚠ While RTBH is active on a given IP, that IP is unreachable from the internet for the duration of the blackhole. Other IPs on the same server remain reachable. RTBH is an availability trade-off, not a scrubbing service. 8. DSIX Internet Exchange SLA DSIX (AS58218) peering infrastructure operates under the following commitments: Port availability : 99.9% annually. Route servers : two independent route servers (RS1, RS2) for redundancy; peering sessions survive a single RS failure without visible impact. Looking glass & IX-F Member Export API : 99.5% annually. Port provisioning : within 24 hours of approval for eligible ASNs. Port speed upgrade (1G → 10G): within 24 hours of request, free of charge. Peering policy changes / prefix filter updates : applied within 24 hours of IRR or RPKI update. 9. LIR Services SLA (RIPE NCC) New IP assignment from the Provider's allocation : within 24 hours of approval, subject to RIPE policy justification. PI (Provider Independent) resource request : submitted to RIPE NCC within 5 business days; RIPE processing time is outside the Provider's control. ASN request : submitted to RIPE NCC within 5 business days; RIPE processing is typically 5-10 business days. rDNS / abuse-c updates : within 24 hours of request. RIPE database record maintenance (on sponsorship): within 2 business days of the Client's written request. RPKI ROA creation / update : within 24 hours of request. 10. Domain Registration SLA Domain registration : processed within 24 hours of payment, subject to registry availability and validation. Domain renewal : processed same day if requested before the expiry date; reminder emails sent 30, 14, and 3 days before expiry. DNS updates (nameserver changes, records on DreamServer DNS): applied within 15 minutes; internet-wide propagation depends on upstream resolvers (typically 1-24 hours). Transfer-in : initiated within 24 hours of authorization code validation. Transfer-out : EPP/auth code provided within 24 hours of written request, subject to registry policy (e.g., 60-day gTLD transfer lock). Registry-side processing times (RoTLD, ICANN gTLDs, EURid, etc.) are outside the Provider's control and are excluded from this SLA. 11. Scheduled Maintenance The Provider may perform scheduled maintenance on network and server infrastructure. Scheduled maintenance windows are: Standard maintenance : Tuesday and Thursday, 02:00-06:00 EET. Emergency maintenance : any time, with minimum 1 hour advance notice when possible. Clients are notified of scheduled maintenance at least 72 hours in advance via email. Scheduled maintenance that falls within the announced maintenance window is excluded from uptime calculations . 12. Service Credit Policy If the Provider fails to meet the annual uptime guarantee, the Client is entitled to service credits applied to future invoices. Credits are calculated based on the monthly fee for the affected service: Annual Uptime Service Credit 99.0% – 99.9% 10% of one month's fee 95.0% – 98.99% 25% of one month's fee 90.0% – 94.99% 50% of one month's fee Below 90.0% 100% of one month's fee The maximum credit per SLA year per affected service is 100% of one month's recurring fee . Credits are applied to the next billing cycle and are not redeemable for cash . One-off fees (setup fees, domain registration fees, LIR fees) are not eligible for service credits. 13. Support Response Times Response times reflect the time from the Client's support request until the first substantive response from the NOC / support team. Critical (service down): initial response within 30 minutes , 24/7. High (degraded performance, partial outage): initial response within 2 hours during business hours. Normal (general inquiry, non-urgent issue): initial response within 8 business hours . Low (feature request, documentation, informational): initial response within 24 business hours . Support requests should be submitted via email to noc@dreamserver.ro or through the Client Area ticket system. Phone support for Critical incidents: +40 773 870 363 . 14. Incident Communication For incidents that affect multiple Clients, the Provider will publish status updates through: Email notifications to all affected Clients (sent from noc@dreamserver.ro ). A post-mortem report for significant incidents, sent within 5 business days of resolution, containing: incident timeline, root cause, impact assessment, and remediation measures taken. Clients are responsible for maintaining up-to-date contact information (email, phone) in their Client Area account to receive these notifications. 15. Exclusions The following events are excluded from uptime calculations and do not qualify for service credits: Scheduled maintenance performed within announced maintenance windows. Emergency maintenance in response to security incidents affecting the Provider or other Clients. Force majeure events (Article 16). Volumetric DDoS attacks targeting the Client's services (blackhole-induced unreachability while RTBH is active is considered mitigation, not downtime). Service suspension due to non-payment or violation of the Terms and Conditions . Issues caused by the Client's software, configuration, OS, or firewall rules. Client-requested reboots, maintenance, or hardware upgrades. DNS propagation delays or third-party DNS provider issues. Failures of third-party services (registries, RIPE NCC, upstream Transit Providers) not under the Provider's control. Downtime during scheduled hardware upgrades pre-approved by the Client. Layer 7 application-layer attacks and application-level issues (these are outside the infrastructure scope). 16. Force Majeure The Provider is not liable for service interruptions caused by force majeure events, including natural disasters (earthquakes, floods, fires), pandemics, power grid failures beyond the Provider's own infrastructure, government actions, war, civil unrest, terrorism, cyberattacks of unprecedented scale, failures or maintenance of upstream telecommunications providers, or disruptions of public internet routing outside the Provider's control. During a force majeure event, the Provider will use commercially reasonable efforts to minimize impact and restore service as soon as possible. Such events are excluded from uptime calculations and from service credit claims. 17. Credit Claim Procedure To claim a service credit, the Client must submit a written request via email to noc@dreamserver.ro or through the Client Area ticket system. The claim must include: The affected service (server hostname, VPS/VDS ID, domain, DSIX port, or LIR resource). Date, start time, and end time of the outage (in UTC or EET). A description of the impact and any monitoring evidence available to the Client. Claims must be submitted within 30 days of the end of the SLA year in which the outage occurred. The Provider will review the claim within 15 business days and respond with either (a) credit approval and application to the next invoice, or (b) a reasoned denial based on the Exclusions in Article 15. Credits are the Client's sole and exclusive remedy for SLA breaches, as per Article 23 of the Terms and Conditions . Last updated: April 2026. ============================================================================== # Terms and Conditions | Hosting & Servers in Romania | DreamServer URL: https://dreamserver.ro/en/terms-and-conditions/ (RO: https://dreamserver.ro/ro/terms-and-conditions/) Terms and Conditions | Hosting & Servers in Romania | DreamServer Home › Terms and Conditions Terms and Conditions These terms govern the use of all services provided by S.C. DreamServer S.R.L. By ordering or using any of our services, you agree to be bound by these terms in their entirety, alongside the applicable SLA and Privacy Policy . Last updated: 01 August 2026. Effective for all new orders and renewals from this date. Jump to section General 1. Definitions 2. Scope of Services 3. Account Registration & Obligations 4. Orders, Activation & Delivery 5. Pricing, Payment & Billing 6. Acceptable Use Policy 7. Fair Use & Resource Limits 8. Data Protection (GDPR) 9. SLA & Uptime 10. Backups & Data Responsibility Service-Specific 11. Dedicated Servers 12. Virtual Servers (VPS & VDS) 13. Remote Management & OS Installation 14. Hardware Upgrades & Modifications 15. Loyalty Gift Program 16. RTBH DDoS Mitigation 17. IP Resources & LIR 18. IP Reputation, Anti-Spam & Blacklists 19. DSIX Internet Exchange 20. Domain Registration 21. Reseller Services Legal & Final 22. URL Shortener (w2.ro) 23. Intellectual Property 24. Limitation of Liability 25. Force Majeure 26. Suspension & Termination 27. Refund Policy 28. Governing Law & Disputes 29. Modifications 30. Final Provisions 31. Contact 1. Definitions For the purposes of this Agreement, the following terms shall have the meanings set forth below: "Provider" means S.C. DreamServer S.R.L., VAT ID: 29975003, CIF: RO36208038, EUID: ROONRC.J2012003481409, with registered office at Str. Mircea Vulcanescu, Nr. 2, Et. 7, Ap. 25, Sector 1, Bucharest, Romania. "Client" means any natural person (aged 18 or older) or legal entity that registers an account with, orders, or uses services provided by the Provider. "Services" means all services offered by the Provider, including but not limited to dedicated servers, virtual servers, domain registration, LIR services, internet exchange services, reseller services, and any related products or features. "Dedicated Server" means a physical server (Blade, Enterprise, Game, or Micro) provided by the Provider and hosted in the Provider's datacenter. "Virtual Server" means a virtualized server instance, either container-based (VPS LXC) or fully virtualized (VDS KVM), provisioned on the Provider's infrastructure. "Domain" means an internet domain name registered through the Provider acting as an accredited RoTLD registrar or through third-party registries. "IP Resources" means IPv4 addresses, IPv6 prefixes, ASN numbers, and other internet number resources allocated or assigned through the Provider's RIPE NCC Local Internet Registry (LIR). "DSIX" means the DreamServer Internet Exchange peering platform, operated by the Provider under AS58218. "RTBH" means Remotely Triggered Black Hole filtering, the Provider's network-layer DDoS mitigation mechanism described in Article 16. "Datacenter" means the Provider's own datacenter facility located in Bucharest, Romania, where Services are hosted and operated. "Agreement" means these Terms and Conditions together with the applicable Service Level Agreement (SLA), Privacy Policy, and any service-specific addenda or order forms. 2. Scope of Services The Provider offers the following categories of services, all hosted and operated from its own Datacenter in Bucharest, Romania: Dedicated Servers : Blade Servers, Enterprise Servers, Game Servers, and Micro Servers, each with specifications as described on the Provider's website. Virtual Servers : VPS (LXC container-based virtualization on Proxmox) and VDS (KVM full virtualization), available in various configurations. Domain Registration : Registration, renewal, and management of .ro domain names through the Provider's accreditation with RoTLD, as well as other TLDs through partner registries. LIR Services : Allocation and assignment of IPv4/IPv6 prefixes, ASN numbers, and other IP resources through the Provider's RIPE NCC membership. DSIX Internet Exchange : Free peering access to the DreamServer Internet Exchange operating under AS58218. Reseller Services : White-label and reseller access to the Provider's infrastructure under dedicated reseller agreements. Technical specifications of each service are detailed on the corresponding product page at dreamserver.ro and in the applicable order confirmation or contract. 3. Account Registration & Client Obligations Acceptance of Terms. Your mere presence on dreamserver.ro, the act of creating an account, ordering any Service, or otherwise using the Site or Services constitutes your explicit acknowledgement that you have read, understood, and agreed to these Terms and Conditions, the applicable SLA , and the Privacy Policy in their entirety. If you do not agree with any part of this Agreement, you must not access the Site, order Services, or create an account. To use the Services, the Client must create an account through the Provider's client area at dreamserver.ro/client/. Upon registration, the Client agrees to the following obligations: Provide accurate, complete, and current personal or corporate information, including legal name, address, email, telephone number, and (where applicable) VAT identification number. Update account information promptly whenever changes occur. Be at least 18 years of age or possess legal capacity to enter into binding agreements. Maintain the confidentiality and security of account credentials. The Client is solely responsible for all activities conducted under their account. Comply with all applicable laws of Romania, the European Union, and the jurisdiction in which the Client is located. Promptly notify the Provider of any unauthorized access to or use of the Client's account. Maintain a valid abuse contact (email and, for BGP customers, abuse-c in RIPE) reachable 24/7. The Provider reserves the right to verify the identity of any Client (KYC) and to refuse or terminate accounts that contain false or misleading information. 4. Orders, Activation & Service Delivery Services are ordered through the Provider's website or client area. Each order constitutes an offer to purchase, which becomes binding upon confirmation by the Provider and receipt of payment. Standard activation timelines VPS (LXC) and VDS (KVM): automated provisioning, typically within minutes of payment confirmation. Dedicated Servers (in stock): provisioned within 24 hours of payment confirmation for standard configurations. Custom or out-of-stock configurations: may require 2–5 business days; the Provider will communicate the estimated delivery time. Domain registration: processed within 24 hours, subject to registry availability and validation requirements. LIR Services (new prefix/ASN requests): subject to RIPE NCC processing times, typically within 5 business days. DSIX port provisioning: within 24 hours of approval for eligible ASNs. Setup fees may apply to certain services and will be clearly indicated at the time of order. Setup fees are non-refundable once the service has been provisioned. 5. Pricing, Payment & Billing All prices are denominated in EUR (Euro) unless otherwise specified on the order form. Prices listed on the Provider's website are exclusive of VAT unless stated otherwise. VAT is applied at the prevailing Romanian rate for clients without a valid intra-community VAT number. Clients with a valid EU VAT number in a member state other than Romania are subject to the reverse charge mechanism. Services are billed in advance on the selected billing cycle (monthly, quarterly, semi-annually, or yearly depending on the plan). Invoices are issued electronically and delivered by email at least 7 days before the due date. Payment may be made by bank transfer (EUR or RON), credit/debit card, PayPal, or other methods available in the client area. Non-payment escalation 7 days overdue: the Provider sends a payment reminder. 14 days overdue: the Provider may suspend the affected Services. Data is preserved during the suspension period. 30 days overdue: the Provider may terminate Services and permanently delete all data associated with the Client's account. The Provider bears no liability for data loss resulting from termination due to non-payment. 6. Acceptable Use Policy The Client agrees to use all Services in full compliance with applicable Romanian and European Union legislation. The following activities are strictly prohibited : Sending unsolicited bulk email (spam) or operating open mail relays. Distribution, hosting, or transmission of malware, viruses, trojans, ransomware, or any other malicious software. Initiating, facilitating, or participating in Distributed Denial of Service (DDoS) attacks or any form of network attack. Hosting, storing, or distributing illegal content under Romanian or EU law, including but not limited to child sexual abuse material, content inciting terrorism, or content promoting hatred or violence. Hosting content that infringes on copyright, trademarks, or other intellectual property rights of third parties. Cryptocurrency mining on shared or virtual server infrastructure (VPS/VDS/Micro) without prior written approval. On dedicated Enterprise/Blade/Game servers mining is permitted subject to power and heat limits. Port scanning, network probing, or vulnerability scanning of third-party systems without their explicit authorization. IP address spoofing, BGP hijacking, route leaks, or any form of network identity falsification. Operating Tor exit nodes without prior written approval from the Provider. Phishing, social engineering, identity theft, or any form of online fraud. Hosting of proxy, VPN, or traffic-anonymization services used as a primary vehicle for abuse towards third parties. Running public-facing DNS open resolvers, NTP amplifiers, memcached servers exposed to the internet, or any other service that can be exploited for reflection/amplification attacks. Upon detection of any violation, the Provider may immediately suspend the affected Services without prior notice and without refund. The Client will be notified of the violation and, where appropriate, given a reasonable opportunity to remediate. Repeated or severe violations will result in immediate and permanent termination of all Services without refund. 7. Fair Use & Resource Limits Each Service is subject to the resource limits specified in the applicable plan or configuration, including bandwidth, CPU, RAM, and storage allocations. VPS (LXC) resources are shared among multiple clients on the same Proxmox host. The Provider does not guarantee exclusive access to physical hardware resources. The allocated vCPU, RAM, and storage represent the Client's guaranteed minimum share, but actual performance may vary depending on overall system load. The Provider may migrate a VPS to a different host at any time for maintenance or load balancing, with minimal or no downtime. VDS (KVM) allocations (vCPU, RAM, storage) are dedicated to the Client's virtual machine. CPU is still share-oriented, RAM and storage are exclusive. Live migration between hosts may be performed for maintenance with no visible interruption. Dedicated Servers give the Client exclusive access to all physical hardware resources of the assigned server. Bandwidth policy Bandwidth allowances per plan are published on the relevant product page (e.g., 10 TB/month for Micro, 20 TB/month for Enterprise). After exceeding the allowance, the Provider may (a) apply pay-per-GB overage at the published rate, (b) throttle the port to a lower speed, or (c) request an upgrade to a higher tier; the Provider will contact the Client before taking action where practical. Sustained traffic patterns that adversely impact other clients' network performance may be throttled regardless of the per-plan allowance. 8. Data Protection (GDPR) The Provider processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and applicable Romanian data protection legislation. The Provider's data processing practices, the rights of data subjects, and contact details for data protection inquiries are described in the Privacy Policy . Where the Provider acts as a data processor on behalf of the Client (e.g., Client content hosted on a server or VPS), a Data Processing Agreement (DPA) is available on request by contacting gdpr@dreamserver.ro . The Client is the data controller for all personal data they process using the Services. All Client data is stored in the Bucharest datacenter within EU jurisdiction. No data is transferred outside the EU/EEA without explicit Client consent or a valid legal basis. 9. SLA & Uptime The Provider commits to 99.9% network and infrastructure uptime for all hosted services, measured on an annual basis . The detailed terms of this commitment, including credit calculations, exclusions, and claim procedures, are set forth in the separate Service Level Agreement . The Provider reserves the right to perform scheduled maintenance during designated maintenance windows. The Client will be notified at least 48 hours in advance of any planned maintenance that may affect service availability. The SLA does not apply to interruptions caused by force majeure events (Article 23), Client-initiated actions, Client hardware upgrades, or third-party ISP outages between the Client and the datacenter. 10. Backups & Data Responsibility The Client bears sole responsibility for maintaining regular backups of all data stored on the Provider's infrastructure. The Provider strongly recommends that the Client implement an independent backup strategy using off-site storage. The Provider offers optional backup services for some VPS/VDS plans. Where included, the Client may request free periodic backups as described in the applicable service plan. However, the Provider does not guarantee the completeness, integrity, or recoverability of any backup data. Under no circumstances shall the Provider be held liable for loss of data, regardless of cause, except where such loss is directly attributable to the Provider's gross negligence or willful misconduct. For Dedicated Servers, the Provider does not perform backups. The Client has full root access and must implement their own backup strategy (rsync to a second server, ZFS snapshots, LVM snapshots, managed backup service, etc.). 11. Dedicated Servers (Blade, Enterprise, Game, Micro) Dedicated Servers are physical machines owned and operated by the Provider, hosted in the Provider's Datacenter and rented to the Client for the duration of the subscription. Hardware ownership All physical hardware remains the exclusive property of the Provider. The Client has no right to physical access, inspect, modify, or retrieve the physical hardware, except where expressly granted under the Loyalty Gift Program (Article 15). Hardware replacement In the event of hardware failure, the Provider will replace the defective component (drive, RAM, power supply, NIC, motherboard, etc.) or the entire chassis with an equivalent unit at no cost to the Client. Replacement downtime target is 12–24 hours during business days for critical failures, with priority handling for Enterprise and Blade customers. Data on drives is preserved where technically possible; if the primary drive fails, the Client must restore from their own backups. Included with every dedicated server Dedicated public IPv4 and IPv6 allocations as per the plan. Free DSIX peering port (1 Gbps or 10 Gbps depending on the plan). Out-of-band remote management (iLO/IPMI/IMM/iRMC) via VPN, see Article 13. RTBH DDoS mitigation on the uplinks (Article 16). 24/7 NOC access for network and infrastructure incidents. Line-specific notes Blade Servers : hosted in HP ProLiant BladeSystem c7000 enclosures with Virtual Connect Flex-10 interconnects and Cisco Nexus vPC. Minimum RAM configuration is 192 GB ECC. Enterprise Servers : 1U/2U rack servers with Dual-Port Active-Active vPC on Cisco Nexus. Optional Intel X710-DA 10 GbE NIC upgrade. Game Servers : high-frequency CPU selection (i7-3770, i7-4790, Ryzen 9 3900X, i9-10900K) optimized for single-thread performance. 128-tick CS2 capable. Micro Servers : low-power bare metal (Intel Celeron N2807 or AMD G-T48E) with 8 GB RAM and 128 GB SSD on a SATA adapter. Annual billing. 12. Virtual Servers (VPS LXC & VDS KVM) VPS (LXC) VPS instances are Linux containers provisioned on a shared Proxmox host. The Client receives root access within the container, but the kernel is shared with the host. Certain kernel-level operations (custom kernel modules, raw socket programs requiring elevated privileges, specific nested virtualization) are not possible inside a VPS. For those workloads choose a VDS or Dedicated Server. VDS (KVM) VDS instances are full virtual machines on KVM with dedicated vCPU, RAM, and storage. The Client may run any supported guest OS, install custom kernels, and perform raw-socket operations. VDS instances do not support hardware passthrough (GPU, PCIe) except by separate arrangement. Resource overcommit The Provider does not overcommit storage or RAM on either VPS or VDS. CPU is committed-at-steady-state but may burst; sustained 100% vCPU use across many neighbours on the same host may cause temporary contention. IP addresses Each VPS/VDS ships with one dedicated IPv4 address and one IPv6 /64. Additional IPs are available on request at the published per-IP fee, subject to RIPE policy justification. Outbound email (SMTP) Outbound TCP port 25 (SMTP) is blocked by default on all VPS and VDS Services as an anti-spam and IP-reputation measure, consistent with the practice of major cloud providers. Authenticated mail submission on ports 587 and 465 remains available, so legitimate mail can still be sent through an authenticated relay. The block may be lifted only on explicit, justified request and at the Provider's sole discretion, subject to the conditions set out in Section 18 (IP Reputation, Anti-Spam & Blacklists). 13. Remote Management & OS Installation Out-of-band management (Dedicated Servers) Each dedicated server ships with access to its out-of-band management controller ( iLO on HP, IPMI on Dell, IMM on IBM, iRMC on Fujitsu) reachable only through a dedicated VPN tunnel provisioned by the Provider. The Client is responsible for keeping VPN credentials confidential. Exposing the OOB interface to the public internet is prohibited and the Provider reserves the right to block such traffic. Custom OS / ISOs The Provider offers a library of ready-to-install ISOs (Debian, Ubuntu LTS, AlmaLinux, Rocky Linux, Devuan, FreeBSD, OpenBSD, Proxmox VE, Windows Server 2019/2022, VMware ESXi, etc.). The Client may also upload a custom ISO to the client area; the Provider will stage it on the server for installation via the OOB console. Managed services (optional) The Provider offers optional managed services (OS installation assistance, hardening, control panel setup, monitoring, patching) under separate hourly or monthly pricing. Unless explicitly contracted, all services are unmanaged : the Client is responsible for OS administration, security patches, application-layer configuration, and data backups. 14. Hardware Upgrades & Modifications Available upgrades for dedicated servers include additional RAM, additional drives (SATA/SAS/SSD/NVMe), Intel X710-DA 10 GbE NIC (Enterprise and Blade lines), additional IPv4/IPv6 allocations, and upgraded DSIX port speed. Upgrades are priced per component. IP additions are hot-path with no downtime. Physical upgrades (RAM, drives, NIC) require a scheduled maintenance window typically lasting 15–30 minutes, coordinated in advance with the Client. Micro Servers have a fixed configuration and cannot be upgraded in RAM, CPU, or onboard storage (external USB drives remain the Client's property and are not covered by upgrades). Any hardware upgrade performed by the Provider remains the property of the Provider and is subject to the same ownership rules as the base server (Article 11). Upgrades added during the rental are not included in the Loyalty Gift (Article 15). 15. Loyalty Gift Program Servers marked with the Loyalty Gift badge on the product page are eligible for the Loyalty Gift Program. After 12 consecutive months of uninterrupted rental , the Client becomes entitled to receive the physical server as a gift from the Provider, free of charge. What the gift includes The physical server chassis and CPU(s) listed on the product page. A single 128 GB OS SSD (the drive originally shipped with the server; for Micro servers this is the 128 GB SSD on a SATA adapter). The minimum RAM configuration originally listed on the product page (for Micro servers this is the full 8 GB, since the chassis does not support more). What the gift does not include Additional RAM modules added during the rental. Extra storage drives (HDD, SSD, NVMe, external USB disks) beyond the OS drive. Network card upgrades added during rental (for Game Servers, the Fujitsu D2735 enterprise NIC is removed before handover; the server ships with the motherboard onboard network port only). Any other components added during the rental period. ⚠ No warranty after handover. Once the Client picks up the gifted server, the Provider provides no warranty or technical support for the hardware. The server is provided as-is , free of charge, and the Provider bears no liability for any subsequent hardware failure or issues. "Uninterrupted rental" means no suspension due to non-payment, no service termination initiated by either party, and no material downgrade. A transfer to a different server of the same line resets the 12-month counter. Pickup logistics (courier arrangement, in-person collection at the datacenter, or Provider-arranged shipping at Client's expense) are coordinated individually after the 12-month milestone. 16. RTBH DDoS Mitigation The Provider operates Remotely Triggered Black Hole (RTBH) filtering on its BGP uplinks, continuously monitored via sFlow telemetry. When traffic to a destination IP spikes above baseline, the sFlow collector detects the anomaly in real time and a blackhole route is triggered over iBGP. The blackhole community is automatically announced to upstream Transit Providers, and the attack traffic is dropped at their network edge before reaching the Provider's network. Scope & limits RTBH is effective against volumetric L3/L4 floods (UDP, SYN, amplification, reflection). It is the standard network-operator defense used by every serious ISP and datacenter. While RTBH is active on a given IP, that IP is unreachable from the internet for the duration of the blackhole. The Client's other IPs and services remain unaffected. Layer 7 application-layer attacks (HTTP floods, slowloris, application-logic abuse) fall outside the scope of RTBH and require application-level defenses (WAF, rate limiting, caching, CDN) that the Client implements at their own application tier. RTBH is included at no additional cost on all Services covered by these Terms. How it is triggered RTBH is triggered automatically by the sFlow collector when traffic to a destination IP exceeds the configured anomaly threshold. The Client may also request manual triggering by emailing noc@dreamserver.ro or, for BGP customers, by announcing a blackhole community on their iBGP session. The Provider publishes the accepted blackhole communities and the validation policy in the DSIX documentation . 17. IP Resources & LIR Services IP Resources allocated or assigned through the Provider's RIPE NCC LIR are subject to the following conditions: All IP addresses, IPv6 prefixes, and ASN numbers remain the property of RIPE NCC and are allocated under the terms of the RIPE NCC Service Agreement and applicable RIPE policies. The Client must comply with all applicable RIPE NCC policies regarding the use, registration, and documentation of assigned resources, including maintaining accurate abuse-c contact information. IP Resources are provided for use with the Provider's Services. Upon termination of the underlying service, IP Resources will be revoked and returned to the Provider's pool unless a separate LIR sponsorship agreement is in place (see LIR Services ). Under a sponsorship agreement, the Client may keep their own PI (Provider Independent) resources, ASN, and RIPE membership, with the Provider acting as sponsoring LIR. Sponsorship is invoiced annually and is subject to a separate contract. The Provider may revoke IP Resources if the Client violates RIPE NCC policies, this Agreement, or applicable law, or if the resources are used in abuse activities documented by a valid complaint. 18. IP Reputation, Anti-Spam & Blacklists This Section applies to every Service that includes one or more IP addresses : dedicated servers, virtual servers (VPS LXC and VDS KVM), micro-servers, colocation, IPv6 leases, and any future product where an IPv4 or IPv6 address is delivered by the Provider. The Provider does NOT sell IP reputation, it leases addresses from its own RIPE NCC allocation pool. The Client expressly acknowledges and accepts the clauses below as a condition of receiving any IPv4 or IPv6 address through any Service. IP addresses are a shared, recyclable resource. IPv4 in particular has been actively reused since the 1980s, IPv6 since the 2000s. Any address the Provider allocates may have been previously held by another organisation whose past activity, legitimate or otherwise, may be recorded in third-party reputation systems. No "clean IP" guarantee The Provider does NOT market or sell its Services as offering "clean", "warm", "fresh", "virgin" or "reputation-screened" IP addresses for email sending, outbound transactional traffic, or any reputation-sensitive use case. All IPv4 and IPv6 addresses are provisioned as-is from the Provider's available pool. The Provider does NOT: Pre-screen addresses against Spamhaus (SBL, XBL, PBL, CSS, AuthBL, DBL, ZEN) , Barracuda Reputation Block List , SORBS , UCEPROTECT (levels 1-3), SpamCop , Cloudmark , Microsoft SNDS / Smart Network Data Services , Google Postmaster Tools , Yahoo Sender Hub , Proofpoint Dynamic Reputation , Cisco Talos , Trend Micro ERS , McAfee TrustedSource , SURBL , Mailspike , PSBL , Invaluement , Hostkarma , Backscatterer , S5H , or any other Real-time Blackhole List (RBL), Domain-based Blackhole List (DBL), URI Blocklist (URIBL), or reputation service before delivery. Warrant that the assigned address is currently absent from any such list. Warrant that the assigned address will remain absent from any such list during the Service lifetime. Provide any contractual remedy, credit, refund or replacement if the address is found listed at any point. The Client is solely responsible for testing the reputation of any assigned address before relying on it for production workloads, and for taking any appropriate technical measures (multi-IP rotation, third-party SMTP relays, IP warm-up procedures, content filtering, opt-in confirmation flows) to mitigate reputation risk. Default outbound SMTP (port 25) restriction To protect the reputation of the Provider's shared IPv4 and IPv6 pools and to limit the use of compromised machines for spam, outbound TCP port 25 (SMTP) is blocked by default on all VPS (LXC) and VDS (KVM) Services . The restriction is enforced at the virtualization firewall, on every network interface of the instance, independently of any firewall rules the Client may configure inside the operating system. This is a standard industry practice: major providers including Amazon Web Services, Google Cloud, Microsoft Azure, DigitalOcean, Vultr, Linode and OVH apply the same default block on outbound port 25. The restriction applies only to direct server-to-server SMTP relay on port 25. Authenticated mail submission remains available on the standard submission ports (587 with STARTTLS and 465 with implicit TLS), so the Client may continue to send legitimate email through an authenticated mail provider or relay. Conditional unblocking of port 25 The Provider may, at its sole and absolute discretion , lift the outbound port 25 restriction on a specific Service. Unblocking is never automatic and is never a right attached to the Service. A request will be considered only where all of the following conditions are met: The Client has completed identity verification (KYC) and the account is fully verified, in good standing, with no outstanding balance and no open or recent abuse case. The account meets a minimum age and payment-history threshold as determined by the Provider (typically at least 30 days and one settled invoice). The Client submits a written, specific and verifiable justification describing the mail system to be operated: the application or software used, the nature and source of the recipient lists (with verifiable opt-in), the expected daily volume, and the responsible technical contact. The Client has correctly configured, and undertakes to maintain, valid reverse DNS (PTR) matching the HELO/EHLO hostname, together with SPF, DKIM and DMARC records for the sending domain. The Client expressly accepts full responsibility for the resulting outbound traffic and for the reputation consequences described in this Section, including the suspension and no-refund provisions below. The Provider may decline any request without stating a reason, may grant the unblock for a limited trial volume before any wider release, and may re-impose the block immediately and without notice if abuse, spam, blacklisting, or a single substantiated complaint is associated with the Service. Generic, vague or unverifiable requests (for example "I need to send newsletters", "for my website", "for transactional email") will be declined. The Provider is under no obligation to unblock port 25 for any Client. The inability to send direct SMTP does not constitute a service defect, does not entitle the Client to any refund, credit or service extension, and is not grounds for any claim. Third-party reputation services are independent of the Provider Spamhaus, Barracuda, SORBS, UCEPROTECT, SpamCop, Cloudmark, Microsoft, Google, Yahoo, Yandex, Proofpoint, Cisco/Talos, Trend Micro, McAfee, Mailspike and all other reputation-list operators are independent third parties with whom the Provider has no contractual relationship and over whom the Provider exercises no control. The Provider: Has no influence whatsoever over their listing or delisting decisions. Will NOT contact these operators on behalf of the Client to request delisting. Will NOT submit delisting forms, appeals, or attestations on the Client's behalf. Will NOT pay any "expedited removal" fees charged by these operators (UCEPROTECT and certain others charge for removal). Will NOT mediate communication between the Client and the reputation operator. Will NOT issue letters of attestation, source-of-traffic verifications, or compliance certificates to third parties for delisting purposes. Delisting from any RBL/DBL/URIBL/reputation service is the exclusive responsibility of the Client . The Client is the party with operational knowledge of the workload and must follow the listing operator's published delisting procedure directly. Client responsibilities The Client shall: Test the reputation of any assigned address before deploying production workloads. Recommended tools include MXToolBox, MultiRBL.valli.org, HetrixTools, Spamhaus IP and Domain Lookup, Sender Score, Talos Reputation Lookup, Mail-Tester, and the listing operators' own self-check pages. Configure proper outbound email authentication for any mail-sending workload: correct reverse DNS (PTR matching the HELO/EHLO hostname), SPF, DKIM, DMARC, valid From / Return-Path domain alignment, TLS for SMTP submission. Apply gradual IP warm-up for any new outbound mail server, starting with low volumes (typically under 50 messages/day to any single mailbox provider) and ramping up over weeks, not hours. Monitor outbound traffic for signs of compromise, including hijacked email accounts, infected web applications, vulnerable contact forms, open SMTP relays, or compromised SaaS keys leaking outbound flows. Respond to abuse reports addressed to the Client's own abuse-c contact (or to the Provider's abuse-c when the Client has not set up its own) within 24 hours . Take immediate remediation steps when a listing occurs: identify the root cause, stop the offending traffic, follow the listing operator's published delisting procedure, and document the remediation for the Provider on request. Subscribe to feedback loops (Microsoft JMRP, Google Postmaster, Yahoo CFL, Comcast FBL, AOL FBL, Apple FBL) for any production mail-sending workload to detect complaints early. Events that trigger suspension or termination without refund Without limiting the more general Acceptable Use Policy in Section 6, the following IP-reputation events trigger immediate suspension or termination of the affected Services at the Provider's sole discretion, with no refund of any kind: The Client's address is listed on Spamhaus SBL, XBL, CSS, AuthBL or DBL within 30 days following its allocation, where the Provider determines the listing is attributable to Client activity rather than legacy reputation of the address. The Client's address receives three (3) or more independent abuse complaints from unrelated sources within a rolling 7-day window, regardless of the listing operator involved. The Client's address appears on two (2) or more major reputation lists (Spamhaus, Barracuda BBL, SpamCop, UCEPROTECT, Microsoft, Google Postmaster, Proofpoint, Cisco Talos) within a rolling 30-day window. The Client operates a service that is itself a recognised abuse vehicle: open SMTP relays, mass-mailing systems without verifiable opt-in compliance, "list-rental" platforms, traffic-spinning, fake-engagement, click-farming or comment-spam services. The Client fails to respond to a Provider-issued abuse notice within 24 hours , regardless of merit. The Client provides false or misleading information about the intended use of the address (for example: declared use "only internal traffic" or "only website hosting", actual use bulk outbound mail). The Client circumvents an abuse-related restriction by rotating to a new IP address from the Provider's pool or by re-ordering the Service from a different account. Scope of suspension: the affected IP address(es), the Service(s) bound to those addresses, and, where the abuse is severe or recurs across multiple IPs/services, the Client's entire account and all related services. No refund for IP reputation issues, period The Client expressly acknowledges and accepts that the following situations do NOT entitle the Client to any refund, credit, partial refund, prorated refund, service extension, complimentary IP swap, or any other compensation : The assigned IP address is found listed on any RBL, DBL, URIBL, reputation service, or sender-reputation database at the time of delivery or at any point thereafter. The assigned IP address becomes listed during the Service lifetime, regardless of cause, including listings caused by the Client's own activity or third-party activity beyond the Provider's control. The Client's ability to send email is impacted by reputation listings (failed deliveries, soft bounces, hard bounces, deferrals, quarantines, junk-folder placement, content filtering). The Client cannot complete delisting through the listing operator's procedure within the Client's preferred or business-required timeframe. The Service is suspended or terminated for any of the events listed in the previous subsection. Outbound traffic from the IP is filtered, throttled, dropped, quarantined, or null-routed by third-party networks (mailbox providers, ISPs, transit providers, peers) for reputation, content, or behavioural reasons. The Client is unable to use the IP address for the specific purpose the Client had in mind at the time of ordering, where the Provider did not expressly warrant suitability for that purpose in the order documentation. The Services are sold for IP connectivity, computing and storage capacity . They are not sold for email deliverability, sender reputation, or compatibility with any specific third-party filter. The price paid does not include any warranty, implicit or explicit, of address reputation, deliverability rate, inbox placement, or absence from any reputation database. No IP address swaps for reputation reasons The Provider does NOT offer IP address swaps, replacements, exchanges or rotations for reputation, deliverability or blacklisting concerns, regardless of who or what is responsible for the listing. This is an absolute rule and applies to all of the following scenarios: IP addresses that were listed before delivery to the Client (legacy reputation pre-existing on the address). IP addresses that become listed during the Service lifetime due to Client activity. IP addresses that become listed during the Service lifetime due to third-party activity beyond the Client's or the Provider's control. IP addresses listed on Spamhaus, Barracuda, SORBS, UCEPROTECT, SpamCop or any other reputation list, public or private. IP addresses whose reputation is questioned, scored low, or filtered by any specific mailbox provider, ISP, security gateway or third party. The Provider's IPv4 and IPv6 pools are shared resources sourced from the Provider's own RIPE NCC allocation. The Provider cannot and does not guarantee that any replacement address would be "clean" or absent from third-party reputation lists. Granting swaps would simply transfer the same reputation risk to another Client, without any technical or commercial benefit. The Provider often does not have clean alternative addresses available in its pool, and it has no obligation to acquire any. Clients with reputation-sensitive workloads (outbound email, transactional notifications, marketing newsletters, OTP/2FA delivery) must: Test the IP reputation before deploying production traffic, using the tools listed in the "Client responsibilities" subsection above. Use a dedicated transactional email service for mail sending (see "Recommended approach for reputation-sensitive workloads" below). Accept that the IP address delivered is the IP address delivered, with no exchange, no swap, no replacement and no refund possible based on its reputation, at any time during the Service lifetime. Any request for IP address replacement on reputation, deliverability or blacklisting grounds will be politely declined. This rule is not negotiable, not subject to commercial appeal, and not waivable by Provider sales or support staff . Recommended approach for reputation-sensitive workloads For Clients whose business outcomes depend on outbound email deliverability (transactional mail, marketing newsletters, billing notifications, OTP/2FA delivery, password resets, customer notifications), the Provider strongly recommends using a dedicated transactional email service : SendGrid, Postmark, Mailgun, Amazon SES, Mailjet, SparkPost, Resend, Sendinblue/Brevo, Mandrill, Postal hosted, or equivalent. These services maintain professionally warmed reputation pools, handle bounce and complaint feedback loops, provide deliverability tooling and dashboards, and operate at a scale that no individual IP can match. The Provider does not operate such a service and does not represent its allocated IPs as a substitute for one. Clients who choose to send email directly from the Provider's IPs do so at their own risk and accept full responsibility for the resulting deliverability outcome. Limitation of liability for reputation issues To the maximum extent permitted by Romanian and European Union law, the Provider is NOT liable for any of the following, whether the loss is direct, indirect, consequential, incidental, special, or otherwise: Email that fails to deliver, is delayed, is deferred, is filtered, or is placed in a junk/spam folder due to IP, domain, content, or behavioural filtering by any third party. Lost business, lost contracts, lost revenue, lost opportunity, customer churn, or damage to the Client's commercial reputation resulting from IP listings or filtering. Time, cost, or effort spent by the Client interacting with reputation operators for delisting, including any fees charged by those operators. Decisions taken by third-party operators (mailbox providers, RBL/DBL operators, ISPs, transit providers, antivirus vendors, security gateways) to block, throttle, quarantine, filter, or score traffic originating from the assigned address. Any consequential, indirect, incidental, special or punitive damages related in any way to reputation listings or filtering. This clause is to be read in conjunction with Section 24 (Limitation of Liability). In the event of any inconsistency between this subsection and Section 24, the broader limitation applies in favour of the Provider. 19. DSIX Internet Exchange The DreamServer Internet Exchange (DSIX), operated under AS58218 , is a peering platform hosted in the Provider's Bucharest Datacenter. DSIX offers free Layer 2 peering to eligible members connected to the Provider's services. Eligibility Member must operate a public ASN and have a PeeringDB record maintained up to date. Member must be a Client of the Provider holding at least one Dedicated Server or Virtual Server plan, unless under a separate DSIX-only agreement. Member must comply with the DSIX policies , the Route Server filter policy, and the MANRS guidelines (appropriate prefix filtering, RPKI/IRR validation, anti-spoofing). Technical requirements Dual-stack (IPv4 and IPv6) strongly encouraged. Members must not announce default routes, private ASNs, martians, or unassigned prefixes to the Exchange. Members must not announce prefixes for which they are not the legitimate origin AS (no BGP hijacking, no route leaks). AS112 queries must be handled locally by the Exchange AS112 infrastructure and must not be announced by members. All peering is via the DSIX Route Servers by default. Bilateral peering is permitted and encouraged between members. Port speeds & cost Both 1 Gbps and 10 Gbps ports are available at no cost for DreamServer Service Clients, subject to port availability. A port upgrade from 1 Gbps to 10 Gbps is performed within 24 hours of approval, at no charge. There is no monthly fee, no setup fee, and no bandwidth cap on peering traffic. Abuse & disconnection The Provider reserves the right to immediately disconnect any DSIX member for: repeated route leaks; BGP hijacking (intentional or accidental); announcing prefixes without authorization; transit leaks (using DSIX for full transit without agreement); repeated non-response to operational or abuse communications; or any other violation of the DSIX policy or these Terms. 20. Domain Registration Domain registration services are provided by the Provider acting as an accredited registrar with RoTLD (for .ro domains) and through partner registries for other TLDs. The following conditions apply: Domain registrations are subject to the policies and regulations of the applicable registry (RoTLD, ICANN, EURid, or other relevant bodies). The Provider registers domains on behalf of and in the name of the Client. The Client is the legal registrant of the domain. The Client is solely responsible for any disputes arising from domain registration, including UDRP proceedings and trademark conflicts. The Client is responsible for ensuring timely renewal of domains. The Provider will send renewal reminders but bears no liability for domains that expire due to the Client's failure to renew. Domain registration fees are non-refundable once the registration or renewal has been processed by the registry. Transfers in/out of domains follow the applicable registry policy (EPP auth code for transfer-out, domain unlocking, 60-day transfer lock after registration for gTLDs, etc.). Expired domains enter a grace period (typically 30 days) during which the Client may redeem the domain subject to a redemption fee set by the registry. .RO Domains The Provider defines the domain name registration service as the procedure through which the Provider registers domain names in the name of its Clients, in accordance with the provisions of the top-level authority "INSTITUTUL NATIONAL DE CERCETARE-DEZVOLTARE IN INFORMATICA" (ROTLD) . Purchase, renewal, and transfer of domain names are subject to the top-level registrar's contract and are fully accepted by the Client. The contractual clauses to be respected by the Client are published at www.rotld.ro , in the sections "Contract pentru Inregistrare" and "Reguli de Inregistrare" . Note: the top-level authority has announced the future introduction of an annual domain name maintenance fee for .ro domains. When this fee is introduced, the applicable terms and conditions will be published on www.rotld.ro and will automatically apply to the Client's .ro domains registered through the Provider. Domain Name Service (all TLDs) The Domain Name Service represents the registration and renewal of domain names and the right of use by the Client of the chosen domain name, in accordance with the Provider's offer and the terms and conditions of the top-level registrar. The respective terms and conditions are published on the top-level registrar's website. Examples: Generic TLDs (.com, .net, .org, etc.): icann.org/policy .eu domains: eurid.eu rules for .eu .ro domains: rotld.ro By ordering or renewing a domain name through the Provider, the Client confirms that they have read and agree to the applicable registry terms and conditions. 21. Reseller Services Reseller access is offered under a separate Reseller Agreement which supplements these Terms. Key provisions include: White-label billing : the Reseller bills its own customers directly and is the customer of record for the Provider. Primary support : the Reseller is responsible for first-line support to its own customers. The Provider provides infrastructure and escalation-only support to the Reseller. AUP compliance : the Reseller remains responsible under these Terms for all traffic, content, and conduct originating from its customers. Payment terms : reseller invoices may use different billing cycles or credit arrangements as set in the individual agreement. Termination : breach of AUP by a reseller's customer may result in suspension of the underlying reseller services if not remedied; the Reseller remains jointly responsible. 22. URL Shortener (w2.ro) The Provider operates a URL shortening service at w2.ro . In addition to these Terms, use of that service is governed by the service-specific Terms of Service published at https://w2.ro/terms , which prevail for w2.ro where they differ from these general Terms. In particular: Plans & limits : w2.ro plans are yearly subscriptions with a cap on the number of active short links per account; only the top plan is uncapped. Custom addresses, custom domains, the API and advanced link options are available on specific plans. Acceptable & fair use : the rules in sections 6 (Acceptable Use) and 7 (Fair Use & Resource Limits) apply to your short links, their destinations and the traffic they generate. Malware, phishing, scam, spam and other prohibited links are removed and may lead to suspension. Non-payment : if an invoice is not paid, after a grace period the account is suspended and its short links are paused (they stop resolving to their destination) rather than deleted. Paying reactivates them; if the account is terminated the links and their statistics are permanently deleted. Your responsibility : you are solely responsible for the destinations behind your short links and for any content served through a custom domain you connect. 23. Intellectual Property The Client retains all intellectual property rights in the content, data, and software stored on or transmitted through the Provider's infrastructure. The Provider retains all intellectual property rights in its infrastructure, network, software, systems, trademarks, logos, website content, and proprietary tools. The Client shall not reverse-engineer, decompile, or disassemble any proprietary software or systems provided by the Provider. Neither party acquires any intellectual property rights of the other party by virtue of this Agreement unless expressly agreed in writing. 24. Limitation of Liability The Provider's total aggregate liability for any and all claims arising from the provision of Services shall not exceed the total fees paid by the Client for the affected Service during the three (3) months immediately preceding the event giving rise to the claim. The Provider shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, loss of data, loss of business opportunities, or loss of goodwill, even if the Provider has been advised of the possibility of such damages. 25. Force Majeure, Fortuitous Events and Exceptional Circumstances Force majeure means any external, unforeseeable, absolutely insurmountable and unavoidable event, within the meaning of Article 1351 of the Romanian Civil Code, occurring after the conclusion of the Agreement, which prevents, in whole or in part, temporarily or permanently, the performance of the Provider's obligations. A fortuitous event means an event that could not be foreseen or prevented by the Provider, within the meaning of the same article. Events deemed to constitute force majeure Without limiting the general nature of the foregoing, the Parties expressly agree that the following events constitute force majeure or fortuitous events and release the Provider from liability for non-performance, defective performance or delayed performance of its obligations, to the extent they affect the provision of the Services: State of emergency, state of alert, state of siege, state of mobilisation or state of war , as well as any measure ordered by the public authorities within them (military ordinances, CNSU/CJSU decisions, orders, movement restrictions, requisitions). Acts of state, local or European authority : laws, ordinances, decisions, embargoes, sanctions, import or export bans, or the withdrawal or suspension of licences or authorisations. Natural disasters and extreme weather phenomena : earthquakes, floods, fires, storms, landslides, frost, extreme heat. Interruptions, fluctuations or loss of electricity supply , of any duration, including those caused by the distribution operator or energy supplier, or by rationing or disconnection measures ordered at national or regional level. Interruptions of internet connectivity, IP transit, peering services or telecommunications infrastructure outside the Provider's own network. Failures, unavailability or non-performance by the Provider's suppliers, subcontractors or partners - data centres, energy operators, telecommunications operators, transit or upstream providers, domain registries and registrars, SSL certificate authorities, cloud, DNS, CDN or payment service providers - as well as any discontinuation of these services for reasons beyond the Provider's control. Cyberattacks : DDoS attacks, exploitation of vulnerabilities, ransomware, digital sabotage or other malicious actions by third parties against the infrastructure of the Provider or its suppliers. Strikes, labour disputes, riots, acts of terrorism, civil unrest , pandemics, epidemics, quarantines or other health measures. Major technical failures of hardware equipment that could not have been foreseen under normal operating and maintenance conditions. Effects For the duration of the force majeure or fortuitous event, the performance of the affected obligations is suspended by operation of law, without payment of damages, penalties or compensation by the Provider. The Provider shall not be liable for any direct or indirect damage (including loss of data, loss of profit, loss of business opportunities or interruption of the Client's activity) resulting from the unavailability, degradation or delay of the Services caused by such events. Periods of unavailability caused by force majeure or fortuitous events shall not be counted towards the guaranteed level of availability (SLA) and shall not give rise to any compensation, discount or extension, unless expressly provided. Notification The Provider will use reasonable efforts to inform the Client of the occurrence of the event and its estimated effects, through the usual communication channels (email, status page, client area), to the extent that the nature of the event permits. The impossibility of notification, where the event affects the communication channel itself, cannot be imputed to the Provider. Duration and termination If the force majeure event lasts for more than 30 (thirty) consecutive days , either Party may request termination of the Agreement for the affected services, by written notice, without either Party being entitled to claim damages from the other for such termination. Amounts paid in advance for services not rendered as a result of termination shall be refunded proportionally, with the exception of costs already irreversibly committed to third parties (domain registration or renewal fees, licences, certificates). Hardship and price adjustment Where, as a result of the events set out above or of other exceptional circumstances that could not reasonably have been foreseen (including significant increases in the costs of electricity, connectivity, equipment or supplier services, or legislative or fiscal changes), the performance of the Provider's obligations becomes excessively onerous, the Provider reserves the right, pursuant to Article 1271 of the Romanian Civil Code, to adjust the price of the Services accordingly. Any adjustment will be notified to the Client at least 30 (thirty) days before it takes effect, and the Client shall have the right to terminate the Agreement for the affected services, without penalties, before the effective date of the new price; continued use of the Services after that date constitutes acceptance of the new price. Duty of diligence The Provider remains obliged to use all reasonable efforts to limit the effects of the event and to resume the Services as soon as possible, as well as to maintain, as far as possible, the agreed backup and continuity measures. 26. Suspension & Termination Suspension by the Provider The Provider may suspend Services immediately and without prior notice in the following circumstances: Violation of the Acceptable Use Policy (Article 6). Non-payment exceeding 14 days past the invoice due date (Article 5). Receipt of a valid legal order requiring suspension. Activities that pose an imminent risk to the Provider's infrastructure or to other clients. RIPE policy violation or IP resource abuse (Article 17). DSIX policy violation (Article 18). Termination by the Client The Client may cancel any Service by providing at least 30 days written notice via the client area or by email to contact@dreamserver.ro . Cancellation takes effect at the end of the current billing period. Termination by the Provider The Provider may terminate Services immediately in cases of material breach, including repeated AUP violations or non-payment exceeding 30 days. In such cases, no refund will be issued. Technical limitations and unilateral termination for damage to the Provider The Provider reserves the right to apply technical limitations to the contracted service and/or to unilaterally terminate this Agreement with immediate effect , in exceptional circumstances, if direct or indirect damage of any kind is caused to the Provider by the Client or by the manner in which the contracted Services are used. In such cases, no refund will be issued and the Provider may pursue compensation for the damage caused. Restrictions during a third-party lawsuit If a judicial process is pending against a Client, brought by a third party alleging that information or files published on the internet using the Provider's infrastructure infringe the legal rights of the claimant, and if the Provider considers that there are reasonable grounds for a legal interpretation supporting the legitimacy of the third party's claim, the Provider reserves the unilateral right to impose restrictions on the Client's contracted services for the duration of the judicial process, in order to limit potential harm to the claimant, to the Provider, or to other Clients. Data retention after termination Upon termination, the Client has 7 calendar days to retrieve their data by restoring their service. After this period, the Provider will permanently and securely delete all Client data from its systems. 27. Refund Policy Setup fees : non-refundable once the service has been provisioned. Monthly billing : no refund is issued for the remaining unused portion of the current month. Yearly billing (Micro Servers and yearly-discounted plans): the Client is entitled to a pro-rata refund for the remaining full months, minus any applicable setup fees and non-refundable charges. Domain registrations : non-refundable once registered or renewed. LIR services : annual fees are non-refundable once the sponsorship period has started. Satisfaction guarantee : new Clients on standard configurations may request a full refund of the first month's fee within 7 days of service delivery if the service does not meet expectations. This applies only once per Client and not to custom configurations or managed services. 28. Governing Law & Disputes This Agreement is governed by and construed in accordance with the laws of Romania . Any dispute arising from or in connection with this Agreement shall first be subject to amicable resolution through good-faith negotiation between the parties for a period of 30 calendar days from the date of written notification of the dispute. If no resolution is reached within the amicable period, the dispute shall be submitted to the exclusive jurisdiction of the competent courts of Bucharest, Sector 1, Romania . Consumer clients in Romania may also use alternative dispute resolution bodies such as ANPC SAL or the EU Online Dispute Resolution platform ec.europa.eu/consumers/odr . 29. Modifications Given the rapid pace of technological and legislative change, and taking into account the individual and collective needs of Clients, the Provider, at its sole discretion, may modify or amend any clause of this Agreement, as well as any policies or conventions included in or referenced by this Agreement, at any time. Such modifications or additions enter into force 15 days after publication on dreamserver.ro , with the exception of the "Terms and Conditions" section itself, which enters into force immediately upon publication on the Site. Continued use of the Site or Services after such modification or addition constitutes your express acceptance of the clauses of the Revised Agreement. If you do not wish to give your acceptance and do not agree with the Revised Agreement, you may stop using the Site or the Services and terminate the affected services in accordance with Article 24. The Provider will notify the Client by email about material changes to this Agreement and accepts no responsibility if such notifications do not reach the Client as a result of an incorrect email address provided by the Client, or any other circumstance outside the Provider's control that may influence communication between the Provider and the Client. 30. Final Provisions Severability. If any provision of this Agreement is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. Entire Agreement. This Agreement, together with the SLA, Privacy Policy, and any applicable order forms or addenda, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior agreements, representations, and understandings. Assignment. The Client may not assign or transfer this Agreement or any rights hereunder without the prior written consent of the Provider. The Provider may assign this Agreement to a successor entity in connection with a merger, acquisition, or sale of substantially all of its assets, upon written notice to the Client. Waiver. The failure of either party to enforce any provision of this Agreement shall not constitute a waiver of that party's right to enforce that provision or any other provision in the future. Notices. All notices under this Agreement are valid when sent by email to the address registered in the Client's account (Client) or to contact@dreamserver.ro (Provider). Language. These Terms are published in English and Romanian. In case of conflict between the two versions, the Romanian version prevails for Romanian consumers and for any dispute brought before a Romanian court; the English version prevails for international business clients. 31. Contact For inquiries related to these Terms and Conditions, billing, or general matters: General: contact@dreamserver.ro Technical / NOC: noc@dreamserver.ro Abuse reports: abuse@dreamserver.ro Phone: +40 773 870 363 Postal address: S.C. DreamServer S.R.L., Str. Mircea Vulcanescu, Nr. 2, Et. 7, Ap. 25, Sector 1, Bucharest, Romania. Last updated: 01 August 2026. ============================================================================== # KVM VDS Hosting on Proxmox | EU Bucharest | DreamServer URL: https://dreamserver.ro/en/virtual-servers/vds/ (RO: https://dreamserver.ro/ro/virtual-servers/vds/) KVM VDS Hosting on Proxmox | EU Bucharest | DreamServer Home › Virtual Servers › VDS (KVM) Full KVM Virtualization VDS Hosting (KVM) Virtual dedicated servers with full KVM hardware virtualization, hosted in our own Bucharest datacenter . Configure your resources below and run any operating system, Linux, Windows Server, FreeBSD, or a custom ISO, with dedicated resources and full root access. For lighter Linux-only workloads see LXC VPS instead. Configure Your VDS Or Choose VPS (LXC) KVM-VDS on Proxmox Build Your VDS Drag the sliders to configure your server. Prices update in real time. Server Resources CPU Cores @2.4 GHz €0.00 2 RAM (GB) €0.00 4 GB Ceph SSD Space (GB) €0.00 50 GB IPv4 Addresses €0.00 1 IPv6 Addresses €0.00 1 Backups Backup Space (GB) €0.00 100 GB Max Backups Retained €0.00 5 System & Location Operating System +€0.00 Choose after order Data Center DreamServer DC, Bucharest, Romania, EU Ceph Cluster SSD 3x replication across nodes Backup Available Optional, billed per GB KVM Full Virtualization Complete hardware isolation Upgrade to Dedicated Seamless migration anytime 99.9% Uptime SLA Guaranteed availability Firewall & Custom Rules Built-in protection noVNC Web Console Browser-based access Resource Graphs Real-time monitoring Snapshots on Request Point-in-time recovery Your Configuration CPU Cores 2 cores RAM 4 GB Ceph SSD Space 50 GB IPv4 Addresses 1 IPv6 Addresses 1 Backup Space 100 GB Max Backups 5 Operating System Choose after order Data Center Bucharest, RO Estimated price / month €0.00 / mo Order Now Activated within 10 min Data 3x Ceph Backup available 24/7 support €0.00 / mo Order Now Distributed Storage on Every VDS Enterprise Ceph Storage with Live Migration and 3x Replication Every KVM VDS boots from a Ceph distributed storage cluster backed by enterprise NVMe SSDs. Because the virtual disk lives in the cluster and not on a single host, your VM is decoupled from any one piece of hardware: 3x CRUSH replication keeps your data durable across separate physical nodes, and live migration lets us evacuate hosts with zero VDS downtime when we patch the hypervisor or replace a faulty server. The cluster spreads I/O across our 10 Gbps backbone for predictable performance under mixed read and write load. When a node fails, the Ceph monitor quorum (Paxos) detects the outage within seconds and the cluster begins rebuilding the missing replicas onto healthy OSDs automatically. Your VDS keeps reading and writing the entire time, served by the surviving copies. This is how we deliver 99.9% uptime for Windows Server, BSD, custom-kernel and other non-Linux workloads that need the same storage guarantees as production Linux. For an extra off-cluster copy, pair this with a Proxmox Backup Server retention plan with content-defined deduplication, or step up to a dedicated server if you need single-tenant isolation. Triple replication across hosts Every block of your VM disk lands on 3 different OSDs across separate physical hosts. Your Windows, Linux or BSD VDS keeps running through the loss of a disk or even a whole hypervisor, with no data loss and no manual recovery. Live migration ready Because the VM disk lives in Ceph and not on a single host, we can live-migrate your VDS between hypervisors with zero downtime, no IP change and no reboot. Hardware maintenance, hypervisor patching and rebalancing happen with you online. Self-healing on NVMe When an OSD or a whole node fails, Ceph automatically re-replicates the affected placement groups onto healthy OSDs to restore the 3x replication target. Enterprise NVMe pools deliver predictable IOPS for production databases, Windows file shares, custom-kernel workloads and ISO-installed appliances alike. Client area preview The control panel you get with every VDS Every KVM virtual dedicated server ships with a fully managed self-service panel, integrated with our WHMCS billing platform. Power actions, backups, firewall rules, snapshots, an in-browser noVNC console (full graphical screen, not just a shell), CD/DVD ISO mounting and a one-click reinstall, all without opening a ticket. Below is a view-only preview. Click through the tabs to see what each section looks like. Real account → dreamserver.ro/client dreamserver.ro/client/index.php?m=ProxmoxVeVpsCloud&a=clientarea&serviceid=18327 Read-only demo Overview Graphs Reinstallation Backups Snapshots Firewall noVNC Console Service Actions Start Reboot Stop Shut Down Service Management Backups Backup Collection Backup Jobs Backup Schedules Firewall Firewall Options Graphs noVNC Console Reinstallation Resource Notifications Snapshots Task History VM Power Tasks Information Status Running Server ds-cloud-07 Name vds-18327-prod Uptime 3 days 23:06:40 Created At 21/04/2026 CPU Usage 42.10 % of 4 cores Memory 11.82 GiB / 16 GiB Network Rate 125 MB/s (1 Gbps) CD/DVD Disc Image File None Boot Order sata0, scsi0, net0, net0 Root Disk 120.4 GiB / 250 GiB Bandwidth Usage 412 GB / Unlimited IP Addresses IP Address MAC Address Subnet Mask Gateway 212.81.57.10 BC:24:11:8A:42:E1 255.255.255.0 212.81.57.1 212.81.57.11 BC:24:11:8A:42:E2 255.255.255.0 212.81.57.1 2a10:fa80:241::10 BC:24:11:8A:42:E1 48 2a10:fa80:241::1 CPU CPU Usage Memory Memory Usage Total Network Traffic Net In Net Out Disk I/O Disk Read Disk Write ISO Images Select the template for reinstallation. If you proceed, all data located on the virtual machine will be lost. AlmaLinux 8.10 X86 64 Minimal AlmaLinux 9.5 X86 64 Minimal CloudLinux 8.10 X86 64 CloudLinux 9.5 X86 64 Debian 12.8 Debian 13.0 Proxmox Ve 8.4 1 Proxmox Ve 9.0 1 Rocky 8 Minimal Rocky 9 Minimal Ubuntu 20.04 Desktop Ubuntu 20.04 Server Ubuntu 22.04 Desktop Ubuntu 22.04 Server Ubuntu 24.04 Desktop Ubuntu 24.04 Server Cancel Reinstall Backups + Create backup File Created Type Size Status vzdump-qemu-18327-2026_04_25-03_00_00.vma.zst 25/04/2026 03:00 scheduled 34.2 GiB complete Restore vzdump-qemu-18327-2026_04_24-03_00_00.vma.zst 24/04/2026 03:00 scheduled 34.0 GiB complete Restore vzdump-qemu-18327-2026_04_23-03_00_00.vma.zst 23/04/2026 03:00 scheduled 33.6 GiB complete Restore vzdump-qemu-18327-2026_04_22-18_12_07.vma.zst 22/04/2026 18:12 manual 33.1 GiB complete Restore vzdump-qemu-18327-2026_04_21-03_00_00.vma.zst 21/04/2026 03:00 scheduled 33.0 GiB complete Restore Stored on Proxmox Backup Server · client-side AES-256 encryption · daily retention 7 / weekly 4 / monthly 3 Snapshots + Create snapshot Name Description Created RAM pre-windows-update before April security rollup 22/04/2026 02:14 included Rollback clean-base-deb13 fresh install + cloud-init 21/04/2026 12:42 excluded Rollback pre-pveug-9 before Proxmox VE 9 upgrade 19/04/2026 23:06 included Rollback enabled 3 rules · default policy DROP in / ACCEPT out + Add rule # Action Direction Source Dest. port Proto Comment 1 ACCEPT in 10.0.0.0/8 22 tcp SSH from internal mgmt 2 ACCEPT in 0.0.0.0/0 80, 443 tcp web public 3 RATE LIMIT in 0.0.0.0/0 3389 tcp RDP, 3/min from any single IP noVNC · full graphical console (works for Windows, Linux, BSD, even before the network or SSH is up) connected 100% [    OK    ] Started Network Manager. [    OK    ] Reached target Network is Online. [    OK    ] Started OpenSSH server daemon. [    OK    ] Started Postfix Mail Transport Agent. [    OK    ] Started Nginx HTTP and reverse proxy server. [    OK    ] Reached target Multi-User System. [    OK    ] Reached target Graphical Interface. Debian GNU/Linux 13 vds-18327 tty1 vds-18327 login: root Password: Included on All VDS Plans RTBH DDoS Mitigation with sFlow Telemetry We operate Remotely Triggered Black Hole (RTBH) filtering on our BGP uplinks , continuously monitored via sFlow telemetry on our edge routers. When traffic to a destination IP spikes above baseline, our sFlow collector detects the anomaly in real time and triggers a blackhole route over iBGP. The blackhole community is automatically announced to our upstream Transit Providers , so the attack traffic is dropped at their network edge before it ever reaches our network, while the rest of your infrastructure stays online. Your other KVM VDS instances continue running unaffected while the targeted IP is blackholed. Each VDS has its own dedicated vCPU, RAM, storage and IPs, so the blackhole isolates exactly the flooded target without cross-VM impact. Simply ask our NOC to trigger the blackhole for a given IP. RTBH is effective against volumetric L3/L4 floods (UDP, SYN, amplification). Layer 7 application-layer attacks fall outside the scope of RTBH and require application-level defenses such as a WAF, rate limiting, or caching that you implement inside your VDS. Attack traffic sFlow telemetry BGP blackhole announcement Frequently asked questions VDS hosting FAQ Common questions about our KVM VDS service. For anything else, see the contact page . What is a KVM VDS and how does it differ from an LXC VPS? KVM (Kernel-based Virtual Machine) is full hardware virtualization. The VDS gets its own kernel, its own boot loader, its own virtual hardware. You can run Linux, Windows Server, FreeBSD or any custom ISO. LXC VPS is OS-level container virtualization sharing the host kernel: much lighter but Linux-only and no kernel-level changes. Pick KVM VDS for Windows, kernel modules, custom kernels, or anything that needs hardware-level isolation; pick LXC VPS for cheaper Linux workloads where density and price-per-resource matter. Where is the VDS hosted? In our own DreamServer datacenter in Bucharest, Romania. EU jurisdiction, GDPR compliant. We are also a RIPE NCC LIR (AS57050) and operate the DSIX internet exchange, so the network path you get is the same one we run for our own production. How fast is provisioning? VDS instances are provisioned automatically within 10 minutes of payment. The customer panel is available immediately and gives you full self-service: power actions, backups, firewall rules, snapshots, an in-browser noVNC console (works for Windows, Linux, BSD, even before the network or SSH is up) and a one-click ISO reinstall. How is VDS storage replicated? Every KVM VDS uses an RBD volume in our Ceph distributed storage cluster with size=3 . Each block of the virtual disk is split into placement groups, and CRUSH places three copies of every PG on separate OSDs across separate physical nodes. The cluster does not acknowledge a write until all three replicas are durable on disk, so you never lose data because of a single host or disk failure. With three replicas spread across three nodes, the cluster keeps serving reads and writes through the loss of two simultaneous nodes. Does the VDS support live migration? Yes. Because the VM disk lives in Ceph (not on a single host), we can live-migrate your VDS between hypervisors with zero downtime, no IP change and no reboot. This is how we patch hypervisors, replace failing servers and rebalance load while your Windows Server, Linux or BSD VDS stays online and serves traffic. Live migration also means hardware maintenance is invisible to you: planned host evacuations, kernel updates and firmware upgrades happen during business hours with no service window required on your end. What happens if a storage node fails? The Ceph monitor quorum (Paxos) detects an OSD or full node failure within seconds and marks the affected OSDs out of the cluster map. CRUSH then rebalances the placement groups that lost a copy onto the remaining healthy OSDs, automatically rebuilding the missing replicas in the background. Your VDS continues to read and write the entire time, served by the surviving copies, and the rebuild rate is throttled so it does not impact production I/O. For an extra off-cluster copy of your data, see Proxmox Backup Server . If you need single-tenant isolation on top of replicated storage, step up to a dedicated server . Can I run Windows Server? Yes. KVM full virtualization supports any Windows Server edition (2019, 2022, 2025) with VirtIO drivers for performance. Bring your own license (BYOL) or arrange a SPLA license through us. The noVNC console works during installation just like a physical KVM-over-IP, including for the initial product key and partition setup. Can I mount my own ISO? Yes. The customer panel exposes a CD/DVD Disc Image File option where you can choose from our ISO library (AlmaLinux, CloudLinux, Debian, Proxmox VE, Rocky, Ubuntu Desktop and Server) or request a custom ISO upload. Are backups included free? Backups are an optional add-on, configured per VDS in the customer panel. Stored on a separate Proxmox Backup Server with client-side AES-256 encryption and content-defined deduplication. Standard retention is 7 daily, 4 weekly, 3 monthly. Pricing is per GB of backup space used. What about DDoS protection? Every VDS is covered by RTBH (Remotely Triggered Black Hole) filtering on our BGP uplinks, fed by sFlow telemetry on our edge routers. When a destination IP is flooded, the blackhole community is automatically announced to upstream transit providers so the attack is dropped at their network edge. Effective against L3/L4 volumetric floods (UDP, SYN, amplification). Layer 7 attacks need application-level defenses inside your VDS. Can I get IPv6? Yes. Every VDS includes IPv6 in dual-stack with IPv4. Larger IPv6 allocations are available on request and we run our own IPv6 PI space as a RIPE NCC LIR . Can I upgrade resources later? Yes. CPU, RAM, SSD, IPv4, IPv6, backup space and max backups are all configurable from the customer panel and the changes take effect on next reboot. Disk can be expanded online; CPU and RAM hot-plug is supported on most distributions. Need a heavier setup? Move to a dedicated server ; we handle the migration. What does the managed customer panel cover? Power actions (start, reboot, stop, shut down), Backups + Backup Jobs + Schedules, Firewall + Firewall Options, Resource Graphs (CPU, Memory, Network, Disk I/O), one-click Reinstallation from the ISO library, Resource Notifications, Snapshots, Task History, VM Power Tasks and a full graphical noVNC Console. Read more about the managed administration bundle. Which operating systems are available? Out of the box: AlmaLinux 8.10 / 9.5 Minimal, CloudLinux 8.10 / 9.5, Debian 12.8 and 13.0, Proxmox VE 8.4.1 and 9.0.1, Rocky 8 and 9 Minimal, Ubuntu 20.04 / 22.04 / 24.04 in Desktop and Server variants. Anything else is a custom ISO upload, free of charge. What network rate is included? Default is 80 MB/s (640 Mbps). Steps up to 1 Gbps and uncapped (Unlimited) are available as a config option in the customer panel and reflected on the order form. Bandwidth is metered separately, with generous monthly quotas; uncapped traffic profiles are available on request. Can I bring my own SSH key or ISO? Yes for both. The customer panel accepts an SSH public key at deploy and on every reinstall, and the ISO library supports custom uploads. The matching private key never leaves your machine. We never need or store your private key. Do you offer 24/7 support? Yes, our NOC is on-call 24/7 for infrastructure incidents (datacenter, network, hypervisor, storage). Customer-application support during business hours is included; out-of-hours application-level support and escalation routing are part of the optional managed administration retainer. What payment methods do you accept? Stripe (cards), bank transfer in EUR or RON, and on-account billing for established customers. Self-service ordering issues a pro-forma invoice; the final fiscal invoice is generated automatically on payment. Can I get RON invoices? Yes. We invoice in EUR by default; RON invoices on request, converted at the BNR exchange rate of the invoice date. VAT is applied per Romanian / EU rules; reverse-charge VAT is available for valid VAT-registered EU customers outside Romania. Do you sign NDAs and Data Processing Agreements? Yes. NDA is standard before any technical scoping. For workloads that touch personal data we sign a GDPR-aligned DPA . We are an EU-based company; data we process on your behalf stays in the EU unless you explicitly direct us otherwise. What is the SLA? 99.9% monthly uptime for the VDS service, with proportional service credits for breach. Scheduled maintenance windows are announced via the customer panel and the status blog . Network-side redundancy is provided by multi-homed BGP transit on our LIR (AS57050) plus DSIX peering. Can I migrate from another provider? Yes. Common paths: P2V or V2V image import ( qcow2 , vmdk , vhdx ), live rsync of a Linux file system to a fresh VDS, or a vzdump restore from another Proxmox cluster. The optional managed administration team handles the entire migration as a fixed-scope project, including a written runbook and acceptance test. Can I cancel anytime? Yes. There is no minimum term. Cancellation takes effect at the end of the current billing cycle; we keep one final backup for 7 days after termination at no extra charge so you can pull data if needed. No exit fees, no clawbacks. Do I get root access? Yes. The VDS is yours; you get full root or Administrator inside the VM plus an in-browser noVNC console as an out-of-band fallback. We do not maintain a hidden management user inside the guest. Anything we run for managed customers is documented in your runbook in your repo. Show more questions ============================================================================== # LXC VPS Hosting on Proxmox | EU Bucharest | DreamServer URL: https://dreamserver.ro/en/virtual-servers/vps/ (RO: https://dreamserver.ro/ro/virtual-servers/vps/) LXC VPS Hosting on Proxmox | EU Bucharest | DreamServer Home › Virtual Servers › VPS (LXC) LXC Containers on Proxmox VPS Hosting (LXC) Lightweight virtual private servers powered by LXC containers on Proxmox VE. Configure your resources with the interactive builder below and deploy in minutes from our own Bucharest datacenter . For Linux workloads that need maximum density and performance per euro. If you need Windows or kernel-level isolation, see KVM VDS instead. Configure Your VPS Or Choose VDS (KVM) LXC-VPS on Proxmox Build Your VPS Drag the sliders to configure your server. Prices update in real time. Server Resources CPU Cores @2.4 GHz €0.00 2 RAM (GB) €0.00 4 GB Ceph SSD Space (GB) €0.00 25 GB IPv4 Addresses €0.00 1 IPv6 Addresses €0.00 1 Backups Backup Space (GB) €0.00 60 GB Max Backups Retained €0.00 5 System & Location Operating System +€0.00 Ubuntu 24.04 Data Center DreamServer DC, Bucharest, Romania, EU Ceph Cluster SSD 3x replication across nodes Backup Available Optional, billed per GB LXC Virtualization Near-native performance Upgrade to Dedicated Seamless migration anytime 99.9% Uptime SLA Guaranteed availability Firewall & Custom Rules Built-in protection Xterm.js Web Console Browser-based terminal Resource Graphs Real-time monitoring Online Disk Expand Grow storage live Your Configuration CPU Cores 2 cores RAM 4 GB Ceph SSD Space 25 GB IPv4 Addresses 1 IPv6 Addresses 1 Backup Space 60 GB Max Backups 5 Operating System Ubuntu 24.04 Data Center Bucharest, RO Estimated price / month €0.00 / mo Order Now Activated within 10 min Data 3x Ceph Backup available 24/7 support €0.00 / mo Order Now Distributed Storage on Every VPS Enterprise Ceph Storage with 3x Replication and Self-Healing Every LXC VPS runs on a Ceph distributed storage cluster backed by enterprise NVMe SSDs. CRUSH placement ensures every block you write is replicated 3 times across separate physical nodes , so a single failed disk, host, or even rack does not interrupt your VPS. There is no single point of failure in the storage path, and the cluster spreads I/O across our 10 Gbps backbone for predictable performance under mixed load. When a node drops, the Ceph monitor quorum (Paxos) detects the outage within seconds and the cluster begins to rebuild the missing replicas onto healthy OSDs automatically. Your VPS keeps reading and writing the entire time, served by the surviving copies, while replication levels are restored in the background. For an extra, off-cluster copy of your data, pair this with a Proxmox Backup Server retention plan with content-defined deduplication. Triple replication Every block lands on 3 different OSDs across separate physical hosts. Lose two nodes simultaneously and your data is still readable; lose one and the cluster keeps serving without hesitation. Self-healing cluster When an OSD or a whole node fails, Ceph automatically re-replicates the affected placement groups onto healthy OSDs to restore the 3x replication target. Your VPS keeps running with zero downtime through the rebuild. NVMe performance OSDs run on enterprise NVMe SSDs with cluster-wide caching across the storage network. You get predictable IOPS under mixed read and write load, far ahead of single-host SSD or RAID setups that throttle the moment one disk gets busy. Client area preview The control panel you get with every VPS Every LXC virtual server ships with a fully managed self-service panel, integrated with our WHMCS billing platform. Power actions, backups, firewall rules, snapshots, an in-browser console and a one-click reinstall, all without opening a ticket. Below is a view-only preview. Click through the tabs to see what each section looks like. Real account → dreamserver.ro/client dreamserver.ro/client/index.php?m=ProxmoxVeVpsCloud&a=clientarea&serviceid=12042 Read-only demo Overview Graphs Reinstallation Backups Snapshots Firewall Xterm.js Console Service Actions Start Reboot Stop Shut Down Service Management Backups Backup Collection Backup Jobs Backup Schedules Firewall Firewall Options Graphs Reinstallation Resource Notifications Snapshots Task History VM Power Tasks Xterm.js Console Information Status Running Server ds-cloud-04 Name vps-12042-acme Password •••••• Uptime 14 days 08:42:11 Created At 11/04/2026 CPU Usage 0.42 % of 4 cores Memory 812.5 MiB / 8 GiB SWAP 0 B / 512 MiB Boot Disk 12.4 GiB / 100 GiB Network Rate 125 MB/s (1 Gbps) SSH Public Key SSH Private Key Bandwidth Usage 186 GB / 4 TB IP Addresses IP Address MAC Address Subnet Mask Gateway 212.81.56.42 - 255.255.255.0 212.81.56.1 212.81.56.43 - 255.255.255.0 212.81.56.1 2a10:fa80:240::42 - 48 2a10:fa80:240::1 CPU CPU Usage Memory Memory Usage Total Network Traffic Net In Net Out Disk I/O Disk Read Disk Write LXC Templates Select the template for reinstallation. If you proceed, all data located on the virtual machine will be lost. AlmaLinux 9 Debian 12 Debian 13 Devuan 5 RockyLinux 9 Ubuntu 20.04 Ubuntu 22.04 Ubuntu 24.04 Cancel Reinstall Backups + Create backup File Created Type Size Status vzdump-lxc-12042-2026_04_25-03_00_00.tar.zst 25/04/2026 03:00 scheduled 4.18 GiB complete Restore vzdump-lxc-12042-2026_04_24-03_00_00.tar.zst 24/04/2026 03:00 scheduled 4.16 GiB complete Restore vzdump-lxc-12042-2026_04_23-03_00_00.tar.zst 23/04/2026 03:00 scheduled 4.11 GiB complete Restore vzdump-lxc-12042-2026_04_22-21_44_18.tar.zst 22/04/2026 21:44 manual 3.97 GiB complete Restore vzdump-lxc-12042-2026_04_21-03_00_00.tar.zst 21/04/2026 03:00 scheduled 4.04 GiB complete Restore Stored on Proxmox Backup Server · client-side AES-256 encryption · daily retention 7 / weekly 4 / monthly 3 Snapshots + Create snapshot Name Description Created RAM before-postgres-upgrade pre 16 -> 17 PG migration 22/04/2026 14:12 included Rollback clean-base-deb13 fresh install + ssh hardened 20/04/2026 09:48 excluded Rollback pre-firewall-rebuild before nftables rewrite 18/04/2026 22:03 included Rollback enabled 3 rules · default policy DROP in / ACCEPT out + Add rule # Action Direction Source Dest. port Proto Comment 1 ACCEPT in 10.0.0.0/8 22 tcp SSH from internal mgmt 2 ACCEPT in 0.0.0.0/0 80, 443 tcp web public 3 RATE LIMIT in 0.0.0.0/0 22 tcp 5/min from any single IP Xterm.js console · in-browser SSH-equivalent shell, no client installed Reconnect root@vps-12042:~# uname -a Linux vps-12042 6.8.12-pve #1 SMP PREEMPT_DYNAMIC PVE 6.8.12-2 (2026-04-15T14:21Z) x86_64 GNU/Linux root@vps-12042:~# free -h total        used        free      shared  buff/cache   available Mem:           8.0Gi       812Mi      6.9Gi       0.0Ki      312Mi      7.1Gi Swap:          512Mi         0B      512Mi root@vps-12042:~# systemctl is-active nginx postgresql active active root@vps-12042:~# Included on All VPS Plans RTBH DDoS Mitigation with sFlow Telemetry We operate Remotely Triggered Black Hole (RTBH) filtering on our BGP uplinks , continuously monitored via sFlow telemetry on our edge routers. When traffic to a destination IP spikes above baseline, our sFlow collector detects the anomaly in real time and triggers a blackhole route over iBGP. The blackhole community is automatically announced to our upstream Transit Providers , so the attack traffic is dropped at their network edge before it ever reaches our network, while the rest of your infrastructure stays online. Your other LXC containers keep serving traffic while the attacked IP is blackholed. The shared Proxmox host and network path stay healthy, so a flood targeted at one tenant never becomes a shared outage for your other workloads on the platform. Simply ask our NOC to trigger the blackhole for a given IP. RTBH is effective against volumetric L3/L4 floods (UDP, SYN, amplification). Layer 7 application-layer attacks fall outside the scope of RTBH and require application-level defenses such as a WAF, rate limiting, or caching that you implement inside your container. Attack traffic sFlow telemetry BGP blackhole announcement Frequently asked questions VPS hosting FAQ Common questions about our LXC VPS service. For anything else, see the contact page . What is an LXC VPS and how does it differ from a KVM VDS? LXC (Linux Containers) is OS-level virtualization sharing the host's kernel, giving near-native CPU and disk performance with extremely low overhead. It runs any Linux distribution but cannot run other operating systems or modify kernel modules. KVM VDS provides full hardware-level virtualization with its own kernel, supporting Windows, BSD, custom kernels and CD/DVD ISO mounting. Choose LXC for Linux web stacks, databases and microservices that need maximum density and performance per euro; choose KVM VDS for non-Linux operating systems or workloads that need kernel-level isolation. Where is the VPS hosted? In our own DreamServer datacenter in Bucharest, Romania. EU jurisdiction, GDPR compliant. We are also a RIPE NCC LIR (AS57050) and operate the DSIX internet exchange, so the network path you get is the same one we run for our own production. How fast is provisioning? VPS instances are provisioned automatically within 10 minutes of payment. The customer panel is available immediately and gives you full self-service: power actions, backups, firewall rules, snapshots, an in-browser Xterm.js console and a one-click reinstall. How is VPS storage replicated? Every LXC VPS runs on top of a Ceph distributed storage pool with size=3 . Each block you write is split into placement groups, and CRUSH places three copies of every PG on separate OSDs across separate physical nodes. The cluster does not acknowledge a write until all three replicas are durable on disk, so you never lose data because of a single host or disk failure. With three replicas spread across three nodes, the cluster keeps serving reads and writes through the loss of two simultaneous nodes. Storage and the network path are tied together over our 10 Gbps backbone , so I/O stays predictable even during rebuilds. What happens if a storage node fails? The Ceph monitor quorum (Paxos) detects an OSD or full node failure within seconds and marks the affected OSDs out of the cluster map. CRUSH then rebalances the placement groups that lost a copy onto the remaining healthy OSDs, automatically rebuilding the missing replicas in the background. Your VPS continues to read and write the entire time, served by the surviving copies, and the rebuild rate is throttled so it does not impact production I/O. When a replacement disk or node comes back online, the cluster brings it into rotation and rebalances back to a balanced layout. For an extra off-cluster copy of your data, see Proxmox Backup Server . Are backups included free? Backups are an optional add-on, configured per VPS in the customer panel. Stored on a separate Proxmox Backup Server with client-side AES-256 encryption and content-defined deduplication. Standard retention is 7 daily, 4 weekly, 3 monthly. Pricing is per GB of backup space used. What about DDoS protection? Every VPS is covered by RTBH (Remotely Triggered Black Hole) filtering on our BGP uplinks, continuously fed by sFlow telemetry on our edge routers. When a destination IP is flooded, the blackhole community is automatically announced to upstream transit providers so the attack is dropped at their network edge. RTBH is effective against L3/L4 volumetric floods (UDP, SYN, amplification). Layer 7 attacks need application-level defenses inside your container. Can I get IPv6? Yes. Every VPS includes IPv6 in dual-stack with IPv4. Larger IPv6 allocations are available on request and we run our own IPv6 PI space as a RIPE NCC LIR . Can I upgrade resources later? Yes. CPU, RAM, SSD, IPv4, IPv6, backup space and max backups are all configurable from the customer panel and the changes take effect on next reboot. SSD storage can be expanded online without downtime. Need a heavier setup? Move to a dedicated server ; we handle the migration. What does the managed customer panel cover? Power actions (start, reboot, stop, shut down), Backups + Backup Jobs + Schedules, Firewall + Firewall Options, Resource Graphs (CPU, Memory, Network, Disk I/O), one-click Reinstallation from a list of LXC templates, Resource Notifications, Snapshots, Task History, VM Power Tasks and an in-browser Xterm.js Console. Read more about the managed administration bundle. Which Linux distributions can I install? The reinstall panel ships with current AlmaLinux 9, Debian 12 and 13, Devuan 5, Rocky Linux 9, Ubuntu 20.04 / 22.04 / 24.04 LTS. Templates are kept up to date. Custom or community templates can be added on request. Can I run Docker, Podman or Kubernetes inside an LXC? Yes. We enable nested cgroups, kernel keyring access and the FUSE / overlay features needed for modern container runtimes. Docker and Podman work out of the box; lightweight Kubernetes distributions like k3s and microk8s run reliably. For full control-plane Kubernetes clusters or workloads that mount custom kernel modules, prefer KVM VDS . What network rate is included? Default port speed is 80 MB/s (640 Mbps). Steps up to 1 Gbps and uncapped (Unlimited) are available as a config option in the customer panel and reflected on the order form. Bandwidth is metered separately, with generous monthly quotas; uncapped traffic profiles are available on request. Can I bring my own SSH key? Yes. The customer panel accepts an SSH public key at deploy and on every reinstall, baked into the LXC template before first boot. The matching private key never leaves your machine. We never need or store your private key. Do you offer 24/7 support? Yes, our NOC is on-call 24/7 for infrastructure incidents (datacenter, network, hypervisor, storage). Customer-application support during business hours is included; out-of-hours application-level support and escalation routing are part of the optional managed administration retainer. What payment methods do you accept? Stripe (cards), bank transfer in EUR or RON, and on-account billing for established customers. Self-service ordering issues a pro-forma invoice; the final fiscal invoice is generated automatically on payment. Can I get RON invoices? Yes. We invoice in EUR by default; RON invoices on request, converted at the BNR exchange rate of the invoice date. VAT is applied per Romanian / EU rules; reverse-charge VAT is available for valid VAT-registered EU customers outside Romania. Do you sign NDAs and Data Processing Agreements? Yes. NDA is standard before any technical scoping. For workloads that touch personal data we sign a GDPR-aligned DPA . We are an EU-based company; data we process on your behalf stays in the EU unless you explicitly direct us otherwise. What is the SLA? 99.9% monthly uptime for the VPS service, with proportional service credits for breach. Scheduled maintenance windows are announced via the customer panel and the status blog . Network-side redundancy is provided by multi-homed BGP transit on our LIR (AS57050) plus DSIX peering. Can I migrate from another provider? Yes. The most common path is to provision a new VPS, restore your application from a backup or perform a live rsync migration, then cut over DNS. The optional managed administration team handles the entire migration as a fixed-scope project, including a written runbook and acceptance test. Can I cancel anytime? Yes. There is no minimum term. Cancellation takes effect at the end of the current billing cycle; we keep one final backup for 7 days after termination at no extra charge so you can pull data if needed. No exit fees, no clawbacks. Do I get root access? Yes. The VPS is yours; you get full root inside the container plus an in-browser Xterm.js console as an out-of-band fallback. We do not maintain a hidden management user inside the guest. Anything we run for managed customers is documented in your runbook in your repo. Show more questions