> But Hetzner's lack of firewall
the cloud offering doesnt has any which is controllable with the webinterface,but the machines are still firewall protected(mostly for ddos/abuse), but i would just use a firewall vm as entry point and keep the production machines in a private network
u could also use the dedicated servers firewall(the Konsole for dedicated servers has firewall rules in the webinterface, u can attach vswitches to cloud instances)
There is a firewall right? it is just off by default.
Currently happy with DO and Hetzner, and increasingly so with the latter. But Hetzner's lack of firewall is a bit annoying, esp. when using Docker (which interferes with iptables).