Air-gapped / VPC model serving
Serve optimized models inside VPC/air-gapped networks with no mandatory data egress to public LLM APIs.
At a glance — Oct 2026
Updated 2026-10-27 · forward this page: /jtbds/air-gapped-model-serve#briefScores as of 2026-10-19 (8 days old).
- Depot Pick
- NVIDIA NIM / NGC · 7.83/10 for this job (curated estimate, medium confidence)
Remove invalid runner if any. NIM for optimized self-host. Confidence: medium on packaging/licensing.
- Runner-up
- Hugging Face Inference · 7.93/10
Scores higher than the pick on: Price / performance, Developer & agent DX, Lock-in risk (higher = worse), Maturity / track record.
- When not to use the pick
- Private Bedrock/Azure endpoints suffice without NIM packaging, or HF Inference Endpoints already in VPC.
- Lock-in / migration
- Runner-up Hugging Face Inference has lower stored lock-in risk (3.5 vs 6, 0–10, higher = more lock-in). Pick exit signals: self-hostable (provider tag `self-host`).
- Sourced price (usd_per_million_input_tokens)
Pick: no sourced price in this job's unit (no_sourced_price).
Cheapest matching SKU: Amazon Bedrock Gemma 3 4B $0.04 — source, as of 2026-10-03, re-checked 2026-10-27. Not the pick; not quality-adjusted.
Price history: first seen 2026-10-03 · last changed no change recorded · history JSON
- Free option
- No free resource lists this job. A cheap paid SKU is not a free option.
- Failure modes to watch
- Runaway spend: Set a budget and a tool-call cap per task. Alert when spend jumps. Stop the run at the cap instead of summarizing a partial trace as success.
- Context overflow: If the input exceeds the window, say so and retrieve a narrower slice. Do not answer from a truncated head as if it were the whole source.
- Lost in the middle: Ask the agent to name the passage it used. Spot-check questions whose only support sits in the middle of the context, not only at the edges.
- Non-determinism: Run the task more than once and compare the end state, not a single transcript. Record the trial count next to any success rate you cite.
- Schema drift: Validate every tool call and every loaded table against the current schema. Quarantine mismatches instead of coercing them.
- Silent truncation: Tools must return whether the payload was truncated and how long the original was. Fail the task if the answer depends on the missing span.
Cite: Agent Provider Depot, Depot Pick for air-gapped-model-serve: nvidia-nim, scores as of 2026-10-19. Agents: GET /api/decide?jtbd=air-gapped-model-serve
All sourced prices, cheapest first · for local-offline agents
NVIDIA NIM / NGC
Remove invalid runner if any. NIM for optimized self-host. Confidence: medium on packaging/licensing.
Pricing (directional): As of 2026-10-24 (nvidia.com/en-us/ai-data-science/products/nim-microservices, fetched 2026-10-24; NVIDIA publishes no NIM price page, and this product page states no price figures, so production licence price stays null — 'Contact Sales'):…
Lock-in risk: higher = more lock-in (worse). Overall already inverts this dimension.
Choose when you self-host inference on NVIDIA GPUs and want blessed containers. For serverless tokens use Fireworks/Groq.
Quote for Air-gapped / VPC model serving
Depot Pick stays NVIDIA NIM / NGC. Prices below are sourced SKU rows only (as of 2026-10-27). Input and output are not blended. GET /api/quote?jtbd=air-gapped-model-serve
Only 1 candidate has a sourced input $/1M; nothing was compared, so pickIsPriceWinner is null.
Sourced price unavailable for the Depot Pick. No row in the pricing index.
2 of 4 candidates have no sourced price row. 3 are excluded from the Input $/1M comparison (chat_completion_input). min sourced input SKU among candidates; not quality-adjusted
Runners-up
Hugging Face Inference
Perfect for Hub-native workflows and custom models. For hard production latency, graduate to…
Amazon Bedrock
Enterprise multi-model switchboard. Great when AWS is mandatory; mediocre when you just want the best Claude…
Azure OpenAI
Pick when IT already standardized on Azure and needs VNET/private endpoints. Otherwise go direct OpenAI and…
When NOT to use the top pick
Private Bedrock/Azure endpoints suffice without NIM packaging, or HF Inference Endpoints already in VPC.
Full ranking (score table)
Ranked with this JTBD's weights. Scores are curated estimates unless marked otherwise. Agents: prefer /api/decide then this table for tie-breaks.
| # | Provider | Overall | Fit | $/perf | Latency | DX | As of |
|---|---|---|---|---|---|---|---|
| 1 | Amazon Bedrock | 8.0 | 8.8 | 6.0 | 9.2 | 6.8 | 2026-09-14 |
| 2 | Hugging Face Inference | 7.9 | 8.4 | 7.2 | 7.4 | 8.6 | 2026-09-14 |
| 3 | Azure OpenAI | 7.9 | 9.0 | 5.5 | 9.0 | 7.0 | 2026-09-14 |
| 4 | NVIDIA NIM / NGCDepot Pick | 7.8 | 8.6 | 7.0 | 8.0 | 6.8 | 2026-10-19 |
Score methodology for this job
Remove invalid runner if any. NIM for optimized self-host. Confidence: medium on packaging/licensing.
capabilityFit: 20%pricePerformance: 10%latencyReliability: 12%developerDx: 10%privacyPosture: 30%lockInRisk: 8%maturity: 10%