Reference deployment

A real fleet, measured.

Advice is cheap. This is the actual nine-box fleet we run — three datacenter, six residential, across several providers — put through the exact benchmarks in this guide. Real numbers, real providers named; only the IPs, hostnames, ports and topology stay private.

The numbers

Performance, ranked

Every box, one uniform pass: single- & all-core CPU (sysbench events/s), memory bandwidth (GB/s), network download (Mbps), and 4K-random disk IOPS — then a single equal-weight Overall / 100. Stronger values tint blue, weaker red.

BoxType Overall/100 CPU 1-coreeps CPU all-coreeps Mem readGB/s Mem writeGB/s Net ↓Mbps Disk readIOPS Disk writeIOPS
SolaDriveresidential88132353444426569109,775113,304
BandwagonHostdatacenter83137753524324228057,31848,246
BandwagonHostdatacenter80141127774224235772,41864,681
BandwagonHostdatacenter75137642064122177455,49951,469
AaITRresidential4860661131232973,40862,388
VirVMresidential38431172223199438,81346,692
AaITRresidential2135370620141032,020*2,019*
AaITRresidential1929057718131022,020*1,986*
AaITRresidential1829058117131022,018*2,018*

* capped disk — see below. Every number is a real measured value.

▲ What the numbers taught us
Two things a spec sheet would never show: SolaDrive is the sleeper — a residential line whose "masked" CPU quietly tops the fleet on disk and ties the datacenter boxes on multicore — while three of AaITR's four boxes are pinned at a provider ~2,000-IOPS disk cap (read ≈ write, identical across the three). The cheap residential boxes are weak on compute, but that's irrelevant for their job: carrying a clean IP.

The setup

How we built it

Exactly the architecture this guide teaches. One datacenter box is the encrypted entry relay (Reality + Vision); it fans out to the residential boxes, each running a lightweight gost forward proxy as an exit. Every exit gets its own port on the relay plus a routing rule, and is firewalled to accept only the relay's address — nothing else can reach it.

Entry relay datacenter · Reality Residential exit 1 Residential exit 2 Residential exit …
The full step-by-step — Reality config, the gost exit, firewalling, and the operations that keep you from locking yourself out — is in Build a network.

In practice

How we use it

Speed-sensitive and management traffic rides the datacenter relay directly — it's fast and always reachable. Anything that needs to look like a real home user egresses through a residential exit, so the destination sees a genuine consumer-ISP address, never a datacenter one. Picking an exit is just choosing which relay port to connect to, so rotating between them is trivial.

✓ The point of the split
The residential boxes are slow and disk-capped — and it doesn't matter. Their entire value is a clean, trusted IP on a real home line. Compute lives on the relay; trust lives on the exit. Buy each box for the one axis it's actually for.

Want to measure your own candidates the same way? Use the score tool, and start from choosing a VPS.