> But Hetzner's lack of firewall the cloud offering doesnt has any which is controllable with the webinterface,but the machines are still firewall protected(mo

> But Hetzner's lack of firewall the cloud offering doesnt has any which is controllable with the webinterface,but the machines are still firewall protected(mostly for ddos/abuse), but i would just use a firewall vm as entry point and keep the production machines in a private network u could also use the dedicated servers firewall(the Konsole for dedicated servers has firewall rules in the webinterface, u can attach vswitches to cloud instances)