Skip to content

Hetzner Cloud: Cheap VMs Mean Owning the Entire Operating System

Aug 22, 2026 1 min
TL;DR Hetzner Cloud offers lean IaaS through servers, networks, volumes, load balancers, and firewalls; its price advantage is real only after patches, HA, backups, egress, and on-call are counted.
Table of Contents
  1. Creating a server is not a golden path
  2. HA is more than a second server
  3. Where it fits
  4. References

🌏 中文版

Hetzner Cloud is lean IaaS: cloud servers, private networks, volumes, load balancers, firewalls, primary IPs, snapshots and backups, plus APIs and Terraform. It suits Linux-capable teams wanting transparent building blocks and cost control, but it does not operate an application platform for them.

Creating a server is not a golden path

Server creation takes minutes. Production still needs cloud-init or images, non-root SSH, security updates, host firewalls, logs and metrics, secret delivery, immutable deployment, and rebuild procedures. Manual repair creates unreproducible snowflakes.

Servers should be disposable. Keep application state on volumes, object stores, or databases, but a block volume is not a backup. Test retention, coverage, and restore for backups and snapshots; use consistent dumps or PITR for databases. Prove RPO and RTO through drills.

HA is more than a second server

Two application servers behind a load balancer may still share a failure domain. Placement Groups help spread instances, while databases, volumes, regions, DNS, and control-plane dependencies need separate review. Isolate east-west traffic on private networks, expose only the load balancer, administer through VPNs or bastions, and default-deny firewalls.

Autoscaling, managed databases, queues, secret managers, and cross-region orchestration have a smaller product surface than hyperscalers and may require self-hosted or third-party systems. That engineering and on-call work belongs beside the low bill.

Where it fits

Stable web services, CI runners, self-hosted tools, homelab extensions, and workloads with accepted operational ownership fit well. DigitalOcean, a hyperscaler, or a PaaS may lower total cost for broad managed services, enterprise IAM, complex compliance, or global databases.

Count compute, IPv4, volumes, snapshots, traffic, support, and engineering time. Delete a server, restore a volume and database, and simulate host failure to verify IaC, placement, health checks, DNS, and runbooks.

References