Control plane
Orders, subscriptions, invoices and server state live in this application. Installs and game changes run as background jobs. The public site cannot start arbitrary containers.
Nodes
Each node has a location, CPU class, memory, storage and a workload list. We only place servers on nodes that are enabled, healthy and allowed to provision.
Workloads
Game servers run from templates we approve. Privileged mode, host networking, extra capabilities, the Docker socket and mounts outside a data directory are rejected. Customers do not choose the image.
Plans
Standard, Performance and Extreme are resource tiers: memory, storage and CPU class. They are not a promise of a specific processor model or clock speed.