{"id":66,"date":"2026-05-20T17:30:06","date_gmt":"2026-05-20T17:30:06","guid":{"rendered":"https:\/\/blog.offshorekaka.in\/?p=66"},"modified":"2026-08-27T05:39:48","modified_gmt":"2026-08-27T05:39:48","slug":"kvm-offshore-vps-isolation","status":"publish","type":"post","link":"https:\/\/offshorekaka.in\/blog\/kvm-offshore-vps-isolation\/","title":{"rendered":"KVM Offshore VPS: Why Full Isolation Matters"},"content":{"rendered":"<div class=\"ok-pro-panel\">\n<p><span class=\"ok-pro-kicker\">Offshore Hosting Guides<\/span><\/p>\n<h2>The word that decides what you actually bought<\/h2>\n<p>Two products are sold as a VPS and they are not the same thing. One gives you a real virtual machine with its own kernel and genuinely reserved memory. The other gives you a container sharing the host&#8217;s kernel, on a machine where the provider may have sold more memory than physically exists.<\/p>\n<p>KVM is the first one. If a plan does not say KVM, it is worth asking, because it changes what the numbers on the plan mean.<\/p>\n<div class=\"ok-pro-grid\">\n<div class=\"ok-pro-card\"><strong>KVM<\/strong><span>Own kernel, reserved RAM, any OS.<\/span><\/div>\n<div class=\"ok-pro-card\"><strong>OpenVZ \/ LXC<\/strong><span>Shared kernel, oversellable, Linux only.<\/span><\/div>\n<div class=\"ok-pro-card\"><strong>Costs<\/strong><span>KVM is a little more. Worth it.<\/span><\/div>\n<\/div>\n<\/div>\n<div class=\"ok-toc\"><strong>On this page<\/strong><a href=\"#diff\">What the difference is<\/a><a href=\"#overselling\">Overselling, explained<\/a><a href=\"#matters\">Where it shows up<\/a><a href=\"#check\">How to check what you have<\/a><a href=\"#when\">When a container is fine<\/a><a href=\"#faq\">FAQ<\/a><\/div>\n<h2 id=\"diff\">What the difference is<\/h2>\n<p><strong>KVM<\/strong> is full hardware virtualisation. The hypervisor presents virtual hardware, and your VPS boots its own kernel on it exactly as a physical machine would. As far as your operating system is concerned, it is alone on a computer.<\/p>\n<p><strong>OpenVZ and LXC<\/strong> are container technologies. All customers on the machine share one kernel, and the container is a fenced-off area of the same operating system. It is lighter, which is why it is cheaper, and the fence is thinner than it looks.<\/p>\n<p>Three consequences follow directly:<\/p>\n<ul>\n<li><strong>Memory.<\/strong> KVM allocates yours at boot and it is yours. Containers allocate on demand, which is what makes overselling possible.<\/li>\n<li><strong>Kernel.<\/strong> KVM lets you load modules, run a different kernel version, and use anything that needs kernel features. Containers give you whatever the host runs.<\/li>\n<li><strong>Operating system.<\/strong> KVM will run any Linux, or BSD, or Windows. Containers run Linux distributions compatible with the host kernel.<\/li>\n<\/ul>\n<figure class=\"wp-block-image size-large ok-inline-visual\"><img decoding=\"async\" src=\"https:\/\/offshorekaka.in\/blog\/wp-content\/uploads\/2026\/08\/ok-dia-kvm-vs-container.webp\" alt=\"Diagram comparing KVM and container virtualisation\" loading=\"lazy\" width=\"2400\" height=\"1028\"><figcaption>Both are sold as a VPS. Only one reserves your memory.<\/figcaption><\/figure>\n<h2 id=\"overselling\">Overselling, explained<\/h2>\n<p>This is the practical reason to care, and it is worth being concrete.<\/p>\n<p>Take a machine with 64GB of RAM. With KVM, the provider can sell at most 64GB across all customers, because each VPS reserves its allocation at boot whether it uses it or not. That is a hard limit and it is why KVM costs more.<\/p>\n<p>With containers, memory is allocated as it is used. The provider can sell 128GB across the same machine, betting that most customers idle well below their limit. Usually that bet is fine. When it is not, everyone on the machine is fighting for memory that was never there, and your 4GB plan behaves like 1GB at exactly the moment you needed it.<\/p>\n<p>You cannot see this from inside a container. Your control panel shows the number you paid for. What you experience is a site that is inexplicably slow at certain times of day, and no amount of tuning fixes it because the problem is not on your side.<\/p>\n<h2 id=\"matters\">Where it shows up<\/h2>\n<ul>\n<li><strong>Docker.<\/strong> Runs properly on KVM. On containers it is often blocked, or runs in a degraded mode, because it wants kernel features the host will not expose.<\/li>\n<li><strong>Custom kernels and modules.<\/strong> WireGuard, some VPN software, certain filesystems and anything needing kernel tuning. KVM only.<\/li>\n<li><strong>Swap.<\/strong> Real on KVM. Frequently absent or fake on containers, so a memory spike kills a process instead of slowing down.<\/li>\n<li><strong>Consistent performance.<\/strong> The whole point. A KVM slice behaves the same at 3pm as at 3am.<\/li>\n<li><strong>Non-Linux systems.<\/strong> Only KVM.<\/li>\n<\/ul>\n<h2 id=\"check\">How to check what you have<\/h2>\n<p>If you already have a server and are not sure:<\/p>\n<pre><code>systemd-detect-virt<\/code><\/pre>\n<p>That prints <code>kvm<\/code>, <code>openvz<\/code>, <code>lxc<\/code> or similar. Or look at the CPU:<\/p>\n<pre><code>lscpu | grep -i hypervisor\ncat \/proc\/cpuinfo | grep -i 'model name' | head -1<\/code><\/pre>\n<p>A KVM guest typically reports a QEMU virtual CPU or a passthrough model with a hypervisor flag set. On a container you see the host&#8217;s real CPU and the host&#8217;s real core count, which is often more cores than your plan says, because you are looking at the physical machine.<\/p>\n<p>Another quick tell: on a container, <code>free -h<\/code> often reports the host&#8217;s total memory rather than your limit, or reports no swap at all.<\/p>\n<h2 id=\"when\">When a container is fine<\/h2>\n<p>Being fair about it: containers are not a scam, they are a different product at a different price.<\/p>\n<p>They are fine for a development box, a small personal site, a staging environment, or anything where an occasional slow hour costs nothing. If you are paying two dollars a month, a container is what that money buys and it is honest value.<\/p>\n<p>They are the wrong choice for anything a business depends on, anything that needs Docker or kernel features, or anything where you need to be able to reason about performance. The extra few dollars for KVM buys you a number you can trust.<\/p>\n<h2 id=\"checklist\">Before you buy<\/h2>\n<ul>\n<li>Ask directly whether it is KVM. A vague answer is an answer.<\/li>\n<li>Ask whether memory is dedicated or burstable. Burstable means oversold.<\/li>\n<li>Check whether Docker is supported, which is a good proxy for real virtualisation.<\/li>\n<li>Check swap is available.<\/li>\n<li>Confirm you can install your own operating system image.<\/li>\n<li>Confirm there is a web console for when SSH breaks.<\/li>\n<\/ul>\n<div class=\"ok-cta-box\">\n<p><strong>Want the kind you can reason about?<\/strong><\/p>\n<p>OffshoreKaka VPS servers are all KVM with dedicated memory and NVMe storage, in Amsterdam and Frankfurt, with full root access.<\/p>\n<p><a class=\"btn ok-cta-link\" href=\"https:\/\/offshorekaka.in\/offshore-vps-server\/\">See the VPS plans<\/a><\/p>\n<\/div>\n<h2 id=\"faq\">FAQ<\/h2>\n<h3>Is KVM slower because of the virtualisation overhead?<\/h3>\n<p>Marginally, on paper. Modern processors have hardware virtualisation support that makes the overhead small enough not to matter in practice, and it is more than offset by not sharing memory with an oversold machine. Real world performance on KVM is more consistent, which matters more than a benchmark.<\/p>\n<h3>How do I know if my current VPS is oversold?<\/h3>\n<p>You cannot see it directly from inside. The symptoms are performance that varies by time of day for no reason you can trace, high steal time in <code>top<\/code> (the <code>st<\/code> column), and processes being killed for memory when your own usage looks fine. Steal time above a few percent means the host is busy.<\/p>\n<h3>Does KVM improve my Google ranking?<\/h3>\n<p>No, not as such. What it gives you is consistent response times instead of ones that get worse when the machine is busy, and consistency is what visitors notice. Speed is a small ranking factor either way, as covered in our <a href=\"https:\/\/offshorekaka.in\/blog\/optimize-ttfb-on-offshore-hosting\/\">TTFB guide<\/a>.<\/p>\n<h3>Should I just get a dedicated server instead?<\/h3>\n<p>Only if you need the whole machine. A KVM VPS already gives you isolation and root; a dedicated server gives you the hardware itself, which matters for sustained heavy load or very large databases. There is a comparison in <a href=\"https:\/\/offshorekaka.in\/blog\/bare-metal-vs-vps-dedicated-servers\/\">bare metal versus VPS<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>KVM virtualization gives stronger isolation than many container-based approaches and is useful for serious workloads.<\/p>\n","protected":false},"author":1,"featured_media":1016,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-66","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-offshore-hosting-guides"],"_links":{"self":[{"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/posts\/66","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/comments?post=66"}],"version-history":[{"count":5,"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/posts\/66\/revisions"}],"predecessor-version":[{"id":982,"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/posts\/66\/revisions\/982"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/media\/1016"}],"wp:attachment":[{"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/media?parent=66"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/categories?post=66"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/offshorekaka.in\/blog\/wp-json\/wp\/v2\/tags?post=66"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}