# Hướng dẫn > Incognito VPS publishes 10 long-form guides covering jurisdiction selection, server hardening, remote full-disk encryption, cryptocurrency payment, DDoS mitigation, warrant canaries and what happens when a server is seized. **Source:** https://incognitovps.com/vi/guides **Updated:** 2026-08-06 ## Guides ### Choosing an offshore jurisdiction Choose a jurisdiction by working backwards from your adversary. A copyright claimant is defeated by any country without a US enforcement treaty. A regulator is defeated by mutual-legal-assistance friction. A state signals-intelligence agency is not defeated by jurisdiction at all — only by encryption. Category: jurisdiction · 12 min · Updated 2026-07-31 URL: https://incognitovps.com/vi/guides/choosing-an-offshore-jurisdiction ### Hardening a new VPS Hardening a new VPS takes about twenty minutes: disable password and root SSH login, enable key-only authentication, configure nftables to default-deny inbound, enable unattended security upgrades, and install fail2ban. Those five steps eliminate the overwhelming majority of real-world compromises. Category: security · 10 min · Updated 2026-07-17 URL: https://incognitovps.com/vi/guides/harden-a-new-vps ### Encrypting a remote server disk Full-disk encryption on a remote server uses LUKS2 with the passphrase entered at boot over an out-of-band console or a dropbear SSH shell in the initramfs. It protects against disk seizure and decommissioned-drive recovery. It does not protect a running server, whose keys are in RAM. Category: security · 11 min · Updated 2026-07-09 URL: https://incognitovps.com/vi/guides/encrypt-a-server-disk ### Paying for hosting with crypto Pay for hosting in crypto by choosing a coin that matches your privacy requirement, sending from a wallet you control rather than an exchange, and settling within the invoice rate-lock window. Monero is the private option; Bitcoin is public and permanently linkable. Category: payment · 9 min · Updated 2026-08-06 URL: https://incognitovps.com/vi/guides/paying-for-hosting-with-crypto ### VPS vs dedicated server Choose a VPS until you need predictable tail latency, more than 64 GB of RAM, or hardware-level control. A modern VPS on EPYC with NVMe matches bare metal for most workloads. Bare metal wins on p99 consistency, disk throughput and physical isolation. Category: operations · 8 min · Updated 2026-06-27 URL: https://incognitovps.com/vi/guides/vps-vs-dedicated-server ### Warrant canaries explained A warrant canary is a signed statement that a provider has not received secret legal demands, republished on a schedule. Its absence signals what the provider is prohibited from saying directly. The legal theory — that compelled speech is harder to order than prohibited speech — is untested in most jurisdictions. Category: jurisdiction · 7 min · Updated 2026-07-04 URL: https://incognitovps.com/vi/guides/what-a-warrant-canary-is ### Migrating between jurisdictions Migrate between jurisdictions by provisioning the target first, syncing data with rsync or a database replica, lowering DNS TTL 48 hours ahead, cutting over during low traffic, and verifying before destroying the source. Expect minutes of downtime, not hours. Category: operations · 10 min · Updated 2026-06-16 URL: https://incognitovps.com/vi/guides/migrating-a-server-between-jurisdictions ### IPv6 and address reputation Every Incognito VPS server includes a routed IPv6 /64 with self-service reverse DNS, and a /48 free on request. Address reputation is determined by the abuse history of the surrounding range, which is why an enforced acceptable-use policy is a technical feature rather than a legal one. Category: networking · 8 min · Updated 2026-06-23 URL: https://incognitovps.com/vi/guides/ipv6-and-clean-address-space ### When a server is seized A server seizure begins with a court order served on the provider, followed by imaging or physical removal of the hardware. Encrypted volumes yield nothing without the passphrase. The practical defence is architectural: encrypt at rest, keep backups in another jurisdiction, and hold no data you do not need. Category: jurisdiction · 9 min · Updated 2026-07-26 URL: https://incognitovps.com/vi/guides/what-happens-when-a-server-is-seized ### DDoS protection explained DDoS protection filters attack traffic before it reaches your server. Layer 3 and 4 scrubbing absorbs volumetric floods and is included on every Incognito VPS plan with 11 Tbps of capacity. Layer 7 attacks target the application and need request-level filtering, available as a $12 per month add-on. Category: networking · 8 min · Updated 2026-06-12 URL: https://incognitovps.com/vi/guides/ddos-protection-explained --- Incognito VPS — Máy chủ VPS offshore, bare-metal và GPU tại 16 vị trí, 8 trong số đó chọn vì đặc điểm pháp lý. Không cần giấy tờ tùy thân, chỉ thanh toán bằng tiền điện tử, triển khai trong 55 giây. Operating since 2020. 16 locations, 8 of them privacy jurisdictions. AS204287. Payment: BTC, XMR, ETH, USDT, USDC, LTC, TRX, SOL, BNB, DOGE, TON, DAI. No identity verification at any point. Catalogue: https://incognitovps.com/pricing.md · API: https://incognitovps.com/openapi.json · Index: https://incognitovps.com/llms.txt