Mullvad Convert Encrypted DNS Servers To Run From RAM

We recently announced the completion of our migration to remove all traces of disks in use on our VPN infrastructure.

"We recently announced the completion of our migration to remove all traces of disks in use on our VPN infrastructure."

"Today we can announce more steps forward - our Encrypted DNS service has also been converted to run from RAM!"

12mo ago

Mullvad: Moving our Encrypted DNS servers to run in RAM

14 1

12 comments

They have been trying to make this a thing for a while now. Glad they are finally near the finish line!

And if anyone had doubts about their no-log policies. These guys are just great!
- I just bought in to mulvad today via Tailscale, so far so good, I like it!
  
  I love the entire process. I love that I can send them cash in an envelope with an account number on it and they'll just top it up lol. I wish every online retailer had to do what they voluntarily do.
Great talks and questions:

https://news.ycombinator.com/item?id=38217355&ref=upstract.com
Been with Mullvad a long time and it has been an excellent service.

As they have grown, their IP pools are no longer as fresh and I get Google captcha'd on hardmode, or cloudflare blocked, or other account limitations when using the service that didn't used to be there all the time now.

I wish the VPN community had a way to solve for this.
- Ipv6 pools?
  
  Yes, that may be the answer. But blocks of IPV6 can still be limited by entire subnets if security/cloud host/IT guys keep turning to this method of reducing their exposure to bad actors.
  
  It totally had its time and place, but it's trivial to get "fresh IPs" from 4G VPN and proxy services that specialize at this (for a price), so as a security concept it's only viable if your attacker's budget is under $20.

12 comments