All insights
Inference · On-prem & private cloud

Sovereign vLLM deployment — and the vendor checklist

Hosting open weights is not sovereignty. Sovereignty is control of the GPUs, the network path, the weights and the support contract. This is the deployment shape LMXAI uses and the questions we ask every vendor.

Runtime
vLLM on Kubernetes
Default
No required egress
Hardware
A100-class / equivalent
Region
EU, under your contract

Nederlandse versie  ·  Türkçe versiyon

What “sovereign vLLM” means

A sovereign vLLM deployment is an OpenAI-compatible inference service you operate on GPUs you control, in a network that does not need to call a US API to answer a prompt. vLLM gives you continuous batching, prefix caching and tensor parallelism. Sovereignty is the rest of the design: where the nodes live, who can SSH, where logs go, and whether a support engineer in another jurisdiction can pull a core dump.

LMXAI ships this pattern for enterprise workspaces and internal agents. The serving layer is the same family as the sovereign AI platform and the mdGPT gateway that sits in front of it.

Reference shape

  • Cluster: Kubernetes in your DC or an EU bare-metal/private cloud account you own.
  • Serving: vLLM (optionally AWQ/INT4) behind an internal gateway — FastAPI, SSE, per-namespace keys.
  • Network: default-deny egress. Pull images from a mirror you control. No callback to a model vendor at request time.
  • State: weights on your volume; KV-cache on the GPU nodes; application logs in your collector (OpenTelemetry).
  • Ops: autoscaling on queue depth, not on a vendor’s quota page.

Vendor checklist (use this in procurement)

AskPassFail
Where do the GPUs physically sit?Named EU metro / your rack“EU region” with unspoken replication
Who is the data processor for prompts?You, or a named EU entity with a DPAUnclear subprocessors, US parent by default
Can inference run with egress blocked?Yes, documentedLicence check or telemetry must phone home
Who holds the weights?Your object store / PVCVendor decrypts weights per request
Support accessBreak-glass, logged, EU staff optionalStanding admin from outside the Union
ExitYou keep weights, traces and IaCModel or index trapped in their control plane
Jurisdiction of the contractEU member stateCalifornia ToS only

EU hosts that can pass: your own racks; EU bare metal (for example OVHcloud, Hetzner, Scaleway) if you own the account and disable unnecessary extras; a regulated private cloud with a written no-egress design. A hyperscaler “EU region” can be part of a design, but it is not automatically sovereign — read the subprocessors and the privileged-access story.

Cost drivers you should model before buying GPUs

Tokens are not the bill. The bill is idle GPU time, context length, concurrent sessions, and how often you re-embed a corpus. A 32B AWQ model on a pair of high-memory GPUs often beats a 70B that sits at 15% utilisation. LMXAI sizes this from a traffic sketch and a latency SLO, then adds speculative decoding or expert offload only when the numbers justify the complexity.

What LMXAI hands over

A running vLLM service, a gateway with auth and traces, a runbook for weight updates, and the completed vendor checklist for whoever hosts the boxes. You should be able to change GPU vendor later without rewriting the application.

Next step. If this is the decision in front of you, LMXAI will scope the system — not a workshop series.

Start a project