4 ms·
Hetzner has a free firewall service outside of your machine. You can use that as the first line of defence.
by PeterStuer 10mo ago
Hetzner has a free firewall service outside of your machine. You can use that as the first line of defence.
- reddalo 10mo agoThat's what I use. Is it enough? Or should I also install a firewall on my machine?
- bardsore 10mo agoSecurity in layers, I'd do both.
- ps 10mo agoDo both. Using provider's firewall service adds another level of defence. But hiccups may occur and firewall rules may briefly disappear (sync issues, upgrades, vm mobility issues) and you services then may become exposed. Happened to me in the past, were "lucky" enough so no damage was taken.
- nvarsj 10mo agoThe problem with Hetzner's firewall service is it nukes network performance especially on ipv6.
- addandsubtract 10mo agoIt also killed my docker networking, so portainer stopped working.
- newsoftheday 10mo agoIt's a good idea. At OCI, I have the VCN firewall enabled and ufw firewall enabled within my VPS's.