Infrastructure Architecture

Under the hood.

We don't use proprietary black-box clouds. We run on high-performance KVM instances in Nuremberg, backed by dedicated AMD EPYC™ silicon and a custom-hardened Windows kernel.

1. The Hardware

Whitehirst instances run on the Hetzner CCX Line. Unlike Azure B-Series or AWS T-Series, these are not burstable. The CPU threads assigned to your VM are physically pinned and exclusive to you, eliminating "noisy neighbor" latency.

CPU Architecture
AMD EPYC™ 4th Gen (Genoa)
Hypervisor
KVM (Kernel-based VM)
Disk I/O
NVMe RAID 10
Network Uplink
10 Gbit/s Interface

2. The Operating System

We use Windows Server 2022 as the base. It uses the stable Windows 10 Enterprise kernel but comes without consumer bloat. We then apply over 50 specific modifications to transform it into a high-performance workstation.

A. Kernel & CPU Optimization

A standard server is tuned to prioritize background services (SQL, Web). A workstation needs to prioritize foreground apps (VS Code, Browser). We flip these registers deeply in the OS.

B. "De-Serverification" (UX Restoration)

We restore the "Human" features that Server 2022 disables by default.

// Actual snippets from our build pipeline
Set-ItemProperty -Path "HKLM:\...\PriorityControl" -Name "Win32PrioritySeparation" -Value 38
# Optimizes CPU scheduling for foreground applications.

powercfg /setacvalueindex scheme_current sub_processor CPMINCORES 100
# Prevents CPU cores from "parking" or sleeping.

reg add "HKCU\Software\Classes\CLSID\{...}\InprocServer32" /f /ve
# Restores the classic context menu for productivity.

3. The "Batteries Included" Toolchain

We don't just give you a blank OS. We pre-install the standard developer stack so you are ready to code in seconds, not hours.

💜
VS 2022 & 2026
📝
VS Code
.NET 8, 9, 10
🐱
Git
🐍
Python 3
🚀
Postman
📦
7-Zip
📝
Notepad++
🌐
Firefox & Chrome
And much more...

4. The "Zero Telemetry" Architecture

We aggressively strip out Microsoft tracking services. We do not just disable them; we remove the capability packages and nuke the scheduled tasks from orbit.

5. Network & Security Policy

We provide a dedicated IPv4 address and a /64 IPv6 subnet for every instance. To maintain our high-reputation IP pool and ensure platform stability, we enforce a strict but transparent firewall policy.

Inbound Traffic
Strict Deny
All inbound ports are closed by default. Only your randomized RDP port is allowed.
Outbound Blocklist
SMTP, SMB & P2P
To maintain network reputation and prevent abuse, the following ports are strictly blocked at the data center edge:
  • TCP 25, 465, 587: Mail / SMTP (Anti-Spam)
  • TCP 135-139, 445: NetBIOS / SMB (Anti-Malware)
  • TCP 3333, 4444, 14444: Known Mining Pools
  • TCP 6881-6969: BitTorrent & P2P (DMCA Compliance)
  • TCP 9001, 9030: Tor Relay / Exit Nodes
  • UDP 19, 1900: DDoS Amplification Protocols