Skip to main content

Cloud or Bare Metal? My Case for Control, Sovereignty, and Sanity

·903 words·5 mins· loading · loading ·
Ronny Roethof
Author
Ronny Roethof
A security-minded sysadmin who fights corporate BS with open source weapons and sarcasm
Table of Contents

Cloud vs. Bare Metal: My Hard-Won Wisdom
#

Let’s be honest: the cloud isn’t always the convenient solution it’s made out to be. Years of building and securing systems have taught me that the supposed “convenience” often masks hidden costs and a serious lack of control. I’ve seen those crazy invoices—it’s like dark magic! My friends at Technative help companies navigate this, but I’ve seen the downsides firsthand.

The Illusion of Convenience: Control and Sovereignty
#

It’s about more than just money; it’s about control. When we use the cloud, we’re handing over our data, our infrastructure, and our sovereignty. Even the Dutch government is exploring a national cloud (Dutch Government Article) because they’re realizing this too.

Articles like this one about escaping big tech only reinforce this point. It’s not just about the price tag; it’s about who controls your data. And I’ve learned a fundamental truth: if you didn’t build it, you don’t control it.

This lack of control extends beyond simple cost considerations. It delves into the realm of data sovereignty and the potential for government surveillance. The Foreign Intelligence Surveillance Act (FISA), specifically Section 702, grants the NSA direct access to data held by cloud providers—a chilling reality. (More on FISA 702).

A friend of mine put it perfectly: “Building a sovereign cloud in an American data center is like putting a safe in the FBI’s living room — you might have the key, but they own the house.”

He also wisely pointed out: “Building a sovereign cloud on American software is like building a fortress on American foundations — no matter how European the walls are, the gate remains out of your control.”

My VPS Experiences: A Costly Lesson in Scalability
#

I’ve used smaller VPS providers (Tilaa, Versio, Hetzner)—they’re great for simple projects like a personal blog. But for my work—DNS, mail, multiple web servers—the costs quickly spiraled out of control. Three DNS servers at €10/month each? It adds up fast. Managing them all became a nightmare.

My experience as a pentester and security officer only made the risks even clearer. This experience underscored the limitations of relying on multiple VPS providers for complex infrastructure. The management overhead and escalating costs ultimately led me to seek a more sustainable and controlled solution.

The Serverius Solution: Colocation and Regaining Control
#

That’s why I moved to colocation at Serverius. I’m a happy customer, and I’ve referred many friends and companies. They’re also committed to sustainability (Serverius About Us), which is important to me.

I have a solid security plan in place (see my Ansible role for basic Linux hardening), and robust monitoring. My Dell R430 is the heart of it all. The transition to Serverius wasn’t just about cost savings; it was about regaining control over my infrastructure and prioritizing data security.

Beyond the Price Tag: Environmental Impact and Security Risks
#

The cloud’s “convenience” comes at a hidden cost. The environmental impact of massive data centers is undeniable, and the privacy implications are even more alarming.

Beyond the financial aspects, the environmental footprint and security vulnerabilities of large-scale cloud providers are significant concerns. My experience as a security officer and pentester has made me acutely aware of these risks. The inherent complexities of large-scale systems, coupled with the potential for government access to data (as highlighted by FISA Section 702), make a strong case for greater control and transparency.

A Personal Journey: Ergonomics, Burnout, and the Need for Sanity
#

My journey with Tietze’s syndrome (my ergonomic keyboard quest) and my heart attack in 2024 (my burnout story) taught me the importance of balance.

It’s not just about being a good sysadmin; it’s about being a good human. And that includes controlling my data. This personal journey has underscored the importance of prioritizing well-being alongside technical expertise. The relentless demands of the IT world can easily lead to burnout, impacting both professional performance and personal life.

My Choice: Bare Metal, Sovereignty, and Sanity
#

I’m not against the cloud entirely. But for my core systems, bare metal and colocation at Serverius are the right choice for me. It’s about reclaiming control, prioritizing data sovereignty, and ensuring my systems are built and maintained according to my own standards.

I’m using Matrix, Mastodon, and Nextcloud for communication (my messaging app thoughts), and contributing to open source (why I love open source) because I believe in community. My 3D printing hobby (my 3D printing adventures) taught me the value of building things myself. This approach aligns with my values of transparency, control, and community engagement.

This isn’t about rejecting technology; it’s about choosing the right tools for the job and prioritizing what truly matters: control, sovereignty, and sanity. And for me, that means embracing bare metal.

Coming Soon: I’m planning to share my experiences with virtualization in two upcoming posts:

  • Migrating from VMware to Proxmox: A step-by-step guide on how and why to move virtual machines from VMware to Proxmox.
  • Proxmox vs. VMware: A detailed comparison of these two popular virtualization platforms.

Stay tuned!

References and Links#

Government Links#

Internal Links#

Related

My Personal Take: Company Laptops - Security Ain't Everything (But It's Still My Job, Damn IT)
·1207 words·6 mins· loading · loading
My Favorite Tech Tools of 2025 (So Far)
·1606 words·8 mins· loading · loading
The Paradox of Excessive Security Measures: When Does 'Safer' Become 'Overkill'?
·684 words·4 mins· loading · loading