Dedicated Private Cloud
Your infrastructure, your rules. Run mission-critical workloads on single-tenant, bare-metal nodes with full hardware and network isolation, local NVMe-oF storage and a 99.99% SLA — the sovereignty of on-prem with the agility of cloud.
Dedicated Private Cloud (DPC)
Starting at € 330/month
- Tenancy modelSingle-tenant dedicated hardware
- IsolationFull hardware + network isolation
- Node specbm1.large — 48 vCPU / 128 GB
- Minimum size3 dedicated nodes
- Scales to100+ nodes, up to 512 GB/node
- StorageLocal NVMe-oF, configurable IOPS
Built on three guarantees
Sustainable
Hosted in the Netherlands on 100% renewable solar energy, with server heat reused and peak-shaving to cut grid congestion.
Sovereign & Secure
EU data residency under GDPR, no US Cloud Act exposure, RBAC with kernel and network isolation, and a signed DPA.
Affordable
Transparent pay-as-you-go pricing with no hidden fees. Network functions are included free; 10% off on annual commitments.
What is the Dedicated Private Cloud (DPC)?
The Dedicated Private Cloud runs your workloads on physically dedicated bare-metal nodes — no virtualisation overhead, no shared hardware, no noisy neighbours. You get hardware-level control and isolation suitable for regulated and high-security workloads, while still consuming it as a managed cloud with Kubernetes and OpenShift.
Who it is for
Enterprises, regulated industries (healthcare, finance, government, legal) and Managed Service Providers running high-security, high-performance or compliance-bound platforms.
What you control
Everything — applications, cluster and the underlying dedicated hardware. Configure CPU, memory, local NVMe IOPS, network topology and isolation boundaries to your requirements.
Why it is different
Bare-metal compute removes the hypervisor tax for maximum, consistent performance, while full hardware and network isolation provides the strongest tenancy boundary GRN offers — backed by a 99.99% uptime SLA.
Platform architecture
Every GRN product runs on the same cloud-native stack — the difference between tiers is the degree of isolation and dedication of the underlying compute.
Containers, Kubernetes manifests, Helm charts, KubeVirt VMs and serverless functions — deployed via dashboard, CLI, REST API or GitOps.
A managed OpenShift/OKD control plane provides scheduling, service mesh (Istio), ingress (Route), autoscaling, RBAC and CI/CD pipelines.
Software-defined networking with load balancing, NAT, private subnets, API gateway, site-to-site VPN and BGP — all included free.
Block, file and S3 object storage on Ceph, local NVMe via OpenEBS, snapshots and Velero backup with cross-region replication.
Physically dedicated, single-tenant servers with no hypervisor overhead and configurable NVMe-oF IOPS.
Core platform features
A complete, integrated cloud feature set — not an à-la-carte bill. Network functions, security and observability are included as standard.
Authentication & Identity
Centralised identity management with OAuth/OIDC, integrated with platform RBAC for fine-grained, role-based access control.
Role-Based Access Control
Granular RBAC across projects, namespaces and resources, with audit logging of every privileged action.
Virtual Machines
Run traditional VMs alongside containers using KubeVirt — ideal for legacy apps and Virtual DataCenter (VDC) workloads.
Serverless
Event-driven, scale-to-zero functions on the platform — pay only while code runs.
Containers & Kubernetes
Native OpenShift/OKD or vanilla Kubernetes, with Helm, Operators, service mesh and GitOps pipelines.
Object & Block Storage
Ceph-backed block, file and S3-compatible object storage with snapshots and cross-region replication.
Private Networking
Private subnets, NetworkPolicy firewalls, NAT gateways and isolated VLANs — included at no extra cost.
Site-to-Site VPN
Secure Submariner-based VPN to connect your on-prem networks and remote sites to your cloud.
Load Balancing
MetalLB load balancers, OpenShift Routes and Istio API gateway for resilient traffic management.
Monitoring & Logging
Built-in metrics, dashboards, alerting and centralised log aggregation across all workloads.
APIs & Automation
Full REST API, CLI and GitOps/CI-CD integration to automate provisioning and deployment end to end.
Backup & DR
Scheduled Velero backups, volume snapshots and cross-region replication for disaster recovery.
Auto-Scaling
Horizontal and vertical autoscaling with availability-zone-aware scheduling.
Encryption
Encryption in transit (TLS via cert-manager) and at rest on Ceph-backed volumes.
IPv4 / IPv6 & Floating IPs
Dual-stack networking with floating/public IPs and optional BYO-IP / BYO-ASN via BGP.
GPU Acceleration
Optional NVIDIA GPU nodes for AI/ML training and inference with EU data residency (OpenDataHub).
Dedicated Control Panel
Your own OpenShift web console and cluster administration — not a shared dashboard.
Compute resources
Choose from purpose-built instance families, sized from a single vCPU to 32+ vCPU and up to 256 GB RAM per node (and dedicated bare-metal bm1 nodes at 48 vCPU / 128 GB).
Compute Optimised (cx1)
High clock-speed vCPU for CPU-bound workloads: build pipelines, web tiers, application servers. 1–32 vCPU.
Memory Optimised (m1)
High RAM-to-vCPU ratio for in-memory databases, caches and analytics. up to 256 GB.
Network Optimised (n1)
Elevated bandwidth for ingress/egress-heavy services, proxies and streaming. 4–64 vCPU.
Universal Purpose (o1)
Balanced default profile from o1.nano upward for general workloads. 0.5–128 GB.
Real Time (rt1)
Low-latency, jitter-sensitive workloads such as VoIP, trading and telemetry. 1–32 vCPU.
Networking capabilities
Enterprise networking is built in and, for most functions, free of charge — no per-feature surcharges.
| Network Function | Technology | Price |
|---|---|---|
| Firewall | Kubernetes NetworkPolicy | Free |
| Load Balancer | MetalLB | Free |
| Reverse Proxy / Ingress | OpenShift Route | Free |
| TLS Certificates | cert-manager | Free |
| DNS | External-DNS | Free |
| API Gateway | Istio Gateway | Free |
| NAT Gateway | EgressIP / EgressRouter | Free |
| Site-to-Site VPN | Submariner | Free |
| Private Subnets | NetworkAttachment | Free |
| Public / Floating IPv4 | MetalLB ExternalIP | € 3.00/mo |
| BYO-IP / BYO-ASN (BGP) | MetalLB BGP | € 50.00/mo |
Storage options & performance tiers
Software-defined storage on Rook Ceph and OpenEBS, with snapshots, replication and Velero-based backup. Billed per GB-month.
| Storage Tier | Technology | Price |
|---|---|---|
| Local NVMe Storage | OpenEBS LocalVolume | € 0.044 / GB-mo |
| Block Storage | Rook Ceph PVC | € 0.044 / GB-mo |
| File Storage | Rook Ceph PVC | € 0.044 / GB-mo |
| S3 Object Storage | Rook Ceph ObjectBucketClaim | € 0.044 / GB-mo |
| Cross-Region Replication | Rook Ceph VolumeReplication | € 0.0465 / GB-mo |
| Backup & Snapshots | Velero | € 0.008 / GB-mo |
Security & compliance
Security is layered through identity, network, workload and data — and compliance is built into the platform, not bolted on.
- RBAC & OAuth/OIDC identity management
- NetworkPolicy firewalls & private VLANs
- Full hardware & network isolation
- TLS everywhere via cert-manager
- Encryption in transit and at rest
- Audit logging of privileged actions
- GDPR / EU data residency (Netherlands)
- No US Cloud Act exposure
- Sovereign & NITS compliant
- Signed Data Processing Agreement (DPA)
PCI-DSS & HIPAA ready, sovereign & NITS compliant, with full hardware-level data isolation suitable for the most sensitive regulated workloads.
Reliability, availability & recovery
High Availability
Multi-node scheduling across availability zones with automated failover and self-healing workloads.
SLA
Backed by a contractual 99.99% uptime SLA, redundant nodes, and tiered NVMe-oF storage with configurable IOPS.
Backup & Disaster Recovery
Velero backups, volume snapshots and cross-region replication to meet your RPO/RTO targets.
Typical use cases
Regulated workloads
Healthcare, finance, legal and government platforms needing PCI-DSS / HIPAA readiness and full data isolation.
MSP hosting platforms
Build and resell a multi-tenant hosting platform on dedicated, performance-guaranteed nodes.
High-performance computing
Latency- and throughput-sensitive workloads that benefit from bare-metal and local NVMe-oF storage.
AI / ML training
Optional GPU nodes for model training and inference with EU data residency (OpenDataHub).
Optional add-ons
Tailor the platform with managed services and capacity add-ons — only pay for what you need.
GPU Nodes
Add NVIDIA GPU-equipped nodes for AI/ML training, inference and accelerated compute.
Managed Services
Fully managed OpenShift, KubeVirt (Virtual DataCenter), VDI or AI/ML (Training Dojo) operated by GRN.
Backup & Disaster Recovery
Velero backups plus cross-region replication to meet strict RPO/RTO and compliance retention.
Additional / Tiered Storage
Local NVMe, block, file or S3 object storage with configurable performance tiers.
BYO-IP / BYO-ASN
Advertise your own IP space and AS number via MetalLB BGP.
Enterprise Support
24×7 Enterprise support with priority response and a named contact.
How it compares
DPC is the top tier: dedicated hardware and isolation. If you need cluster control but not dedicated hardware, see Virtual Private Cloud. For lightweight apps, see Shared Private Cloud.
| Shared Private Cloud | Virtual Private Cloud | Dedicated Private Cloud | |
|---|---|---|---|
| Tenancy | Shared platform, private namespace | Dedicated control plane | Dedicated bare-metal |
| Isolation | RBAC + network | Kernel-level + dedicated vCPU/RAM | Full hardware + network |
| Guaranteed CPU | Shared / burstable | Yes | Yes (bare-metal) |
| Own control panel | No (platform shared) | Yes | Yes |
| Minimum size | 1 instance | 3 VMs | 3 nodes (48 vCPU/128 GB) |
| Scales to | 32 vCPU / 256 GB | 100+ nodes | 100+ nodes / 512 GB |
| GPU option | No | No | Optional |
| SLA target | 99.9% | 99.9%+ | 99.99% |
| From | € 0,99/mo | € 99/mo | € 330/mo |
Frequently asked questions
What does “bare-metal” mean here?
Is the Dedicated Private Cloud HIPAA and PCI-DSS compliant?
What is the SLA?
Can I add GPUs?
How does it scale and what does it cost?
Ready to build on a greener, sovereign cloud?
Get a tailored quote for your Dedicated Private Cloud (DPC), or talk to our engineers about migrating your workloads to GDPR-compliant, 100% renewable EU infrastructure.
100% renewable energy · EU data residency · No US Cloud Act exposure · Cancel anytime
