X
X
X
X
All systems operational · 200 Tbps+ DDoS protection active
Sign Up Sign In 08505574494

How to Buy a VDS: Server Buying Guide

HomepageArticlesVDS / VPS ServerHow to Buy a VDS: A Practical Serve...
How to Buy a VDS: A Practical Server Buying Guide

What determines a good VDS purchase is not the amount of RAM but the answer to four questions: is your workload sensitive to single-thread speed or to core count, where are your visitors located, who is going to administer the server, and in which country does your data have to live? Buying without settling those four leaves you either with an oversized server sitting idle or with an undersized plan you will have to migrate off within three months. Below is what to check before you buy, how to size the configuration properly, and which clauses actually matter in the contract.

Define the requirement first, pick the plan second

The most common mistake in server buying is opening the price list and picking "something in the middle". The correct order is the reverse: define the workload, then look for the configuration that fits it.

Ask yourself:

  • What will run on it? A website, a game server, a database, an API, a voice server — or several of these together.
  • How many concurrent users do you expect? Concurrency matters, not daily total visitors.
  • Is the load steady or spiky? A continuously running API and a game server that peaks in the evening need different configurations.
  • How fast will your data grow? Estimate a year out, not today's footprint.

With those answers in hand, choosing a plan becomes mechanical.

Sizing it right: CPU, RAM and storage

CPU: core count or clock speed?

This is the most misunderstood part. "More cores is better" is not true for every workload.

Single-thread sensitive workloads — Minecraft and other game servers, classic PHP applications, most WordPress installs — do their work on one core and benefit visibly from a high-clocked processor. On this kind of workload, an eight-core previous-generation server can be slower than a four-core current-generation one.

Multi-core workloads — hosting many sites, running containers, video transcoding, parallel builds — scale close to linearly with core count.

When comparing offers, ask for the processor generation and clock speed. The AMD Ryzen 9 9950X, for example, is a Zen 5 part with 16 cores and 32 threads, a 4.3 GHz base clock and up to 5.7 GHz boost. A VDS partitioned from a processor like that is strong on both single-thread and multi-core work.

RAM: a realistic starting point

RAM is not the place to economise, because running out means either a crash or a slide into swap and severe slowdown. A rough starting scale:

  • 4 GB: A small-to-medium website, a development environment, a lightweight bot or voice server.
  • 8 GB: Mid-sized WordPress or WooCommerce, several sites together, a small game server.
  • 16 GB: Busy e-commerce, a mid-sized game server, a meaningful separate database load.
  • 32 GB and above: High concurrency, heavy databases, multiple production services.

If utilisation sits consistently above 80%, it is time to size up.

Storage: technology before capacity

The first storage question is not "how many GB" but "which technology". NVMe M.2 SSD delivers multiples of the IOPS a SATA SSD does, and the gap is felt most in database-heavy applications. On capacity, total up the operating system, application, database, log files and local backups — then add at least 30% headroom.

Location: much more than ping

Server location is usually treated as a latency question alone. If you serve an audience in Turkey, an Istanbul location saves 40–60 ms on every request compared with overseas — a difference that is not negotiable for game and voice servers.

But location has a second, less-discussed dimension: it is a legal decision. If you run a service processing personal data and your server sits abroad, that constitutes a cross-border transfer of personal data. Under Turkey's KVKK, three routes make it lawful: transfer to a country the Board has granted an adequacy decision, appropriate safeguards (standard contracts, binding corporate rules, or Board-approved undertakings), or narrow exceptions.

In practice the standard contract is the common route, and it carries an obligation that is easy to miss: a signed standard contract must be notified to the Board within 5 business days of signature. Failure to notify carries administrative fines. Transfers through cloud systems, mail servers and SaaS tools all fall within scope.

Hosting in Turkey removes that chain entirely. Separately, under Law No. 5651 hosting providers must retain traffic data for six months; working with a domestic provider makes that compliance — and producing records when requested — considerably more practical.

This section is general information. Consult a legal advisor about what your specific data processing activity requires.

Managed or unmanaged?

This is the decision non-technical buyers skip most often. On an unmanaged VDS the provider hands you a working server and network; operating system updates, firewall, backups, panel installation and application troubleshooting are all yours.

Without system administration experience you have three options: install a control panel and learn as you go, buy system administration support on a retainer, or move to a product with no administration burden such as shared or reseller hosting. Comparing only the server price, without pricing those three, is misleading.

We covered the resource-allocation difference between VDS and VPS, and which workload needs which, in detail in our guide on the difference between VDS and VPS.

Ten questions to ask before buying

When evaluating a provider, get written answers to these:

  • 1. Which processor model and generation? "4 cores" on its own tells you nothing.
  • 2. Are resources reserved or shared? Are those cores allocated to you alone?
  • 3. NVMe or SATA? And is there an IOPS cap?
  • 4. What is the traffic policy? Port speed and monthly allowance are separate things.
  • 5. What level of DDoS protection, and does it cover UDP? Critical for game servers.
  • 6. Are backups included — how many copies, how often?
  • 7. What can I do from the panel? Are reboot, OS reinstall and console (VNC) access under your control?
  • 8. What are the support hours and channels? Is there a response time commitment?
  • 9. What is the uptime commitment, and what happens if it is missed?
  • 10. How do upgrades work? Can resources be increased in place, or does every upgrade mean migrating to a new server?

Read the uptime commitment properly

Uptime percentages look similar in marketing copy but translate into very different amounts of downtime. Allowed monthly downtime:

  • 99%: 7.2 hours per month
  • 99.5%: 3.6 hours per month
  • 99.9%: 43.2 minutes per month
  • 99.95%: 21.6 minutes per month
  • 99.99%: 4.32 minutes per month

Two things matter more than the percentage itself: what the commitment covers (network only, or hardware too; is planned maintenance excluded) and what happens when it is breached. An uptime figure with no remedy attached is just a sentence in a contract.

What to watch in pricing

Server cost is not the monthly sticker price alone. When calculating total cost, add:

  • Panel licensing: cPanel or a similar panel can be a separate monthly cost.
  • Backups: If not included, they are an add-on — and not one to skip.
  • Additional IP addresses: Some setups need more than one.
  • Management support: If you are not administering it yourself, that has a price.
  • Migration cost: The real price of the wrong provider is the time you spend moving off it three months later.

Watch for first-month discounts followed by much higher renewal pricing; compare annual totals instead. Annual billing usually earns a meaningful discount, but committing long-term before testing a provider is rarely wise.

The first 24 hours after purchase

The moment the server is handed over it is on the public internet, and automated scanners find it within minutes. Day-one tasks:

  • Change the SSH port, disable root and password login, move to key-based authentication.
  • Configure the firewall to allow only the ports you use.
  • Apply system updates and enable automatic security updates.
  • Install brute-force protection.
  • Put your backup plan in place on day one.
  • Update your domain's A and MX records to point at the new server.

For a detailed checklist, follow our guide on the first 10 steps to secure a new VDS, and for the DNS side, our DNS records guide. If you are migrating, remember to lower your DNS TTL a day in advance.

Nubitro VDS plans

Nubitro's VDS range runs on AMD Ryzen 9 9950X processors in Istanbul, Turkey. Because resources are assigned through hardware partitioning, CPU and RAM allocation is fixed per instance and does not fluctuate with neighbour activity.

Configurations start at 2 cores / 4 GB RAM / 40 GB NVMe M.2 SSD and scale to 12 cores / 64 GB RAM / 180 GB NVMe, with 6, 8, 10, 12, 16, 24 and 32 GB RAM tiers in between. Every plan includes 1 Gbps unmetered traffic, and the infrastructure carries 200 Tbps+ DDoS protection as standard. We explained what those DDoS capacity figures actually mean in practice in our DDoS protection capacity guide.

Review current configurations and pricing on our VDS/VPS server page, or move to dedicated servers for workloads that outgrow virtualization.

Frequently Asked Questions

Does it make sense to start small and scale later?

Yes — that is the right approach. Starting oversized simply wastes money. What matters is asking, before you buy, how the provider handles upgrades: if resources can be increased in place, growth is painless; if every upgrade means migrating to a new server, your planning changes.

How much RAM should I start with?

4 GB for a small-to-medium site or development environment, 8 GB for mid-sized WordPress/WooCommerce or a small game server, 16 GB for busy e-commerce. If utilisation stays above 80%, move up a tier.

Overseas servers are cheaper — why choose Turkey?

Three reasons: a 40–60 ms latency advantage for visitors in Turkey, no cross-border transfer obligations if you process personal data, and local support and billing. If your audience is entirely overseas and you process no personal data, an overseas location can be perfectly reasonable.

How do I verify my server really has dedicated resources?

Run top on Linux and read the %st (steal time) value on the CPU line. If it stays above 10% during busy hours, the physical host is overloaded. With genuinely reserved resources it stays near zero.

The provider takes backups — do I still need my own?

Yes. Provider backups protect against infrastructure failure; your own copies protect against a database you deleted by mistake or an application bug. Never tie critical data to a single backup point.

When should I move to a dedicated server?

When you consistently max out even the largest VDS plan, when you need GPUs or specific hardware, or when compliance requires single-tenant hardware.

Summary

  • Define your workload first, then choose the plan.
  • For single-thread sensitive workloads like games and PHP, clock speed beats core count.
  • Ask for the processor model and generation — "4 cores" alone is not information.
  • On storage, look at technology first: the IOPS gap between NVMe and SATA is large.
  • Leave at least 30% growth headroom on disk capacity.
  • Location determines both latency and legal obligations.
  • For cross-border transfers, a standard contract must be notified to the Board within 5 business days.
  • On an unmanaged server, updates, security and backups are your responsibility.
  • 99.9% uptime means 43 minutes of downtime a month — read what the commitment covers and what remedy it offers.
  • Include panel licensing, backups, extra IPs and management support in total cost.
  • Configure SSH, firewall and backups on the first day.
Powered by WISECP
💬
Top