Benchmarked faster than DigitalOcean, Vultr & OVH. Your price never rises at renewal. See the numbers Benchmarked #1. No renewal hikes. See the numbers
Skip to content
Debian VPS

Debian VPS for predictable production.

Debian 13 Bullseye and 12 Bookworm on AMD EPYC Genoa nodes with NVMe RAID10 storage and ECC memory. Long freeze windows, mature package versions, minimal default install. For workloads that need to behave the same tomorrow as they do today.

Why this distribution

Why production teams pick Debian.

Debian is the base for many distributions, like Ubuntu, Proxmox, Raspberry Pi OS. The reasons why production teams choose Debian.

01

Stability-first release model

During the multi-month "freeze" of the Debian stable release the package versions for the release get set. After the release they don't change anymore for the remainder of the release cycle.

02

Community-governed, no commercial steering

No vendor that can change policy, deprecate a release early, or push a subscription model.

03

Minimal base install

The default install includes a minimal number of services which run by default in order to provide a small attack surface for a general purpose distribution.

04

Long lifecycle through LTS

3 years of Full Support, 2 years of LTS. 5 years of production quality for every release.

Versions in the panel

Available right now.

Both stable releases are listed in the panel. Select one depending on your needs for release lifecycle and package age.

Debian 13

Bullseye

Debian 13 "Bullseye". LTS phase until June 2026. It receives security fixes from the Debian LTS team and its kernel is based on 5.10.

Debian 13

Bookworm

It is still receiving full support and will be moved to LTS in about 12 months or so where it will continue to receive security fixes until approximately June 2028. The kernel is currently at 6.1.

Production workloads

Workloads that benefit from a stable base.

Debian is perfect for providing a stable base for long running services and also for the most critical, hardened bastion host, whilst others are being re-built time and time again with various new regressions.

Mail and DNS

  • Postfix with SpamAssassin and OpenDKIM
  • Dovecot IMAP/POP3
  • Unbound or BIND as authoritative or recursive
  • PowerDNS authoritative server

Long-life databases

  • PostgreSQL with Pgdg apt repository for current major versions.
  • MariaDB and MySQL for transactional workloads
  • TimescaleDB for time-series
  • pgbouncer for connection pooling

Bastion and security

  • SSH with fail2ban and 2FA
  • WireGuard endpoints
  • unbound + Pi-hole stack
  • tinyproxy / squid forward proxies

Monitoring and metrics

  • Prometheus, Alertmanager and node_exporter
  • Grafana with InfluxDB or VictoriaMetrics
  • Loki for centralised logs
  • Zabbix or Icinga for traditional monitoring

Production web servers

  • Nginx with HTTP/2 stable
  • Apache with mod_security baseline
  • HAProxy as L4/L7 load balancer
  • Varnish in front of slow backends

Build and CI

  • Apt-cacher-ng for reproducible apt mirrors
  • sbuild and pbuilder for Debian packages
  • GitLab Runner for CI
  • Docker for cross-distro CI
Measured performance

NVMe RAID10 and EPYC, in numbers.

Numbers and graphs were collected running on a Dedicated CPU D-4 plan in Amsterdam. This server has 2 vCPU's pinned to two cores on an EPYC Genoa processor, 4 GB of DDR5 ECC memory, and 60 GB of NVMe storage configured in RAID10. All the numbers and graphs collected can be found on the benchmarks page, including the complete test description and the Geekbench numbers for all the 5 runs.

122,959
4K random read IOPS. fio mixed 4K read/write at queue depth 32 on NVMe RAID10.
87,730
4K random write IOPS. I/O is done directly (i.e. non-buffered) to simulate the access pattern of databases that read and write a lot of small chunks of
2,000 / 6,414
Geekbench 6 single / multi core scores. Median of 5 runs, public Geekbench profiles.
9.40 Gbit
iperf3 send throughput. Amsterdam reference on the 100G fabric, ICMP latency 0.946 ms.
Read the full benchmark methodology and raw runs
Panel and API

Everything you need to operate it.

All you need to manage your VPS. We provide a control panel and API with all of the VPS's lifecycle actions. It is fully scriptable from start to finish and we also support Terraform and Ansible.

Reboot, shutdown, force-reset
Reboot, shutdown or hard reset the VPS as required (hard-reset the VPS if it's unresponsive and then use normal ACPI shutdown thereafter).
Reinstall any supported OS
Wipe disk and provision server from scratch in less than 1 minute. Your SSH key will also carry over to newly provisioned servers via Cloud-Init.
Rescue mode
Reboot, shutdown or hard-reset a VPS and boot in to rescue mode (as root with all disks mounted) to fix a variety of issues with a server (e.g. unbootable server, damaged file system, forgot root password, broken initramfs, etc).
Custom ISO upload
Upload a 64-bit Linux ISO and attach it as a virtual CD-ROM drive, then use the HTML5 console to install from it.
HTML5 console
HTML5 console. Browser-based console for when SSH is misconfigured. No VNC client required.
Reverse DNS (PTR)
Set IPv4 and IPv6 PTR records in the control panel. If you are running a mail server that is allowed to send out mail it requires reverse DNS (PTR records) for both the IPv4 and IPv6 address of that mail server.
SSH key management
Upload and attach your existing SSH keys to newly created servers and they automatically get injected into said servers via Cloud-Init at first boot.
REST API
Deploy, resize, power-cycle and snapshot servers through a full REST API that also covers volumes, backups, ISO uploads, firewall rules, SSH keys and recipes. Generate API credentials and drive everything from Terraform, Ansible or your own CI/CD pipeline.
Pricing

Same Linux, both regions.
Same price.

Linux in both regions. Same price. Standard, Dedicated CPU and High Memory servers in Amsterdam and New York. Prices are for 2-year billing rate.

Compare every plan
Standard $18.40/mo Shared 1:4 vCPU, S-4 to S-64
Dedicated CPU $29.60/mo Pinned 1:1 cores, D-4 to D-64
High Memory $199.20/mo 1:8 RAM ratio, H-64 to H-192

Deploy a Debian VPS
in under a minute.

This same server is available in Amsterdam and New York, you can add your SSH key and provision a VPS in under a minute. Cloud-Init will then automatically pre-load the SSH key after the first boot, allowing you to login with SSH as root.

Common questions

FAQ about running Debian on BuyVPS.

Answers for the most common questions regarding plan selection, deployment, support and day-to-day management of a Debian Virtual Server hosted on KVM.

FAQ

Common questions

Which Debian versions do you support in the panel?
Debian 11 (Bullseye) and Debian 12 (Bookworm). Bullseye is in its LTS phase. Bookworm is the current stable.
Why choose Debian over Ubuntu?
Slower release cycle, no Snap, no commercial steering. Better fit when you need predictable behaviour over recent package versions.
How long is each Debian release supported?
About three years of full security support plus two years of LTS via the Debian LTS team. Five years total per release.
Can I install backports?
Yes. Enable the bookworm-backports apt source for newer kernel, Mesa, container tools or other selected packages without leaving the stable distribution.
Is unattended-upgrades preconfigured?
No, we ship a minimal Debian install. Install and configure unattended-upgrades yourself if you want automatic security patching.
Can I run Docker or k3s on Debian?
Yes. The official docker-ce package, the k3s installer, and Podman from backports all work on Bookworm without modification.
How do I run a newer kernel without changing distribution?
Install linux-image-amd64 from bookworm-backports. You stay on Debian stable with a more recent kernel.
Can I upgrade Bullseye to Bookworm in place?
Yes, the standard Debian upgrade procedure works. Back up your data first, then apt update, apt full-upgrade, and reboot following the official release notes.
Ready to deploy

Deploy Debian on a measured VPS

From $18.40/mo on a 2-year term, fixed for life. Paste this cloud-init to boot hardened in one step:

#cloud-config
package_update: true
packages: [ufw, fail2ban]
runcmd:
  - ufw allow OpenSSH
  - ufw --force enable
  - systemctl enable --now fail2ban