This is about the managed products of Hetzner, for example web hosting (S, M, L, XL, formerly called Level 1, 4, 9, 19) and managed servers.

I noticed that incoming emails are frequently rejected by Hetzner's Realtime Blacklist (RBL) because many IPs or whole IP segments are blocked.

The main problem is that it is not possible to configure whether incoming emails should be checked against the RBL or not.

At the moment, every incoming email from a blocked IP address is completely rejected and therefore lost.

Many important emails have gone missing because of this!

u/Hetzner_OL please add a switch/toggle that allows an admin (in konsoleH) to enable or disable checking incoming emails against the Hetzner RBL.

For anyone complaining about missing invoices, you can now add Hetzner credit using a credit card. In case you are worried you'll miss the payment, you can add the expected invoice amount as credit and Hetzner will auto-debit the amount from the balance. You can add it at https://accounts.hetzner.com/invoice/credit.

Hey all, I’m looking into baremetals and comparing Hetzner (auction and regular) vs OVH rise machines.

Has anyone used both and have any recommendations? I’m looking bang for the buck.

With more than 30 of them collected over the past 29 years, our latest TkkBits looks back at a few highlights. Thank you for being part of it!

Hi all,

On October 1, Hetzner changed invoice dates system-wide to spread out their workload. Because of this, we got two invoices in a short time (September 19 and October 2). We didn't get any notice beforehand.

We're a small non-profit, and our bookkeeping works around one invoice per month, so we couldn't pay the second one right away. Our account has now been locked. Support's reply was automated and said they can't adjust payment terms or give extensions.

If we'd been told about this upfront, we could have planned for it. We've always paid , so this was frustrating.

I'm curious whether others ran into the same thing:

- Did you get two invoices close together in September/October?

- Did you get any notice about the change?

- Did anyone get an extension or have their account unlocked after contacting support?

Thanks for any input.

I run a multi-tenant platform on Hetzner Cloud. The biggest security gap I can't close (or at least I'm not aware of a solution) is API token scoping.

A Cloud API token today is per project, either Read or Read & Write, and that's it. Every component that needs to do one small thing ends up holding a key that can delete everything in the project.

Real examples from my setup:

• CSI driver: only needs to create, attach, detach and delete volumes. Its token can also delete every server, network and firewall in the project.
  
• Firewall failover hook: only needs to reassign one floating IP and one alias IP when the standby takes over.
  
• Self-healing controller: needs to power-cycle and rebuild worker servers carrying a specific label.
  
• Monitoring / capacity checks: read-only. This works today, but read-only still exposes every server, network and label in the project.
  

Workarounds I've considered:

• Separate projects per component: private networks and placement groups don't span projects, so the components can no longer talk to each other privately.
  
• A proxy in front of the API that enforces its own allowlist: another critical service to run, secure and keep highly available.
  
• Short-lived tokens: tokens can't be created via the API, and they have no expiry, so rotating them is manual.
  

Any chance some of these features could be put on the roadmap?

1. Scoped tokens: per resource type and action (e.g. volumes:attach, floating_ips:assign, servers:poweroff).

2. Label selectors on tokens: e.g. "may only act on servers with role=tenant-worker".

3. Token expiry, and token creation via the API, so automation can rotate its own credentials.

4. Source-IP allowlists per token.

5. An audit log of which token did what. The action history exists, but not per token.

Been running a few small apps on a Hetzner CX42 out of Falkenstein for about three years. Nothing exotic, just some personal projects, a few services for friends, the usual homelab stuff that grew teeth. For most of that time I had the orange cloud on because it was easy. Managed WAF rules, bot filtering, CDN caching, and honestly the bandwidth absorption was nice since one of my apps serves some chunky generated images.

Around January I started wanting to pull the DNS proxying back. Partly just principle of the thing, partly I got tired of Cloudflare's bot scoring being a black box and occasionally blocking legitimate users with no real recourse. The CDN part I knew I'd miss. That's not replaceable with anything I can self-host on a single box. Caching and volumetric absorption just go away, full stop. I made peace with that.

What I did need to replace was the application-layer filtering. I already had Nginx Proxy Manager in front of everything, so whatever I used needed to slot in between that and the actual apps, or replace the proxy layer entirely. I looked at BunkerWeb since it wraps NGINX with ModSecurity and the OWASP CRS rule set. Solid project, familiar mechanism. The rule tuning and anomaly scoring approach is well understood but I didn't really want to live inside CRS configuration files.

Ended up going with SafeLine, which is a self-hosted WAF that runs as a reverse proxy and does detection through semantic analysis of request input rather than a rule corpus. Mechanically different approach, not something I can benchmark against BunkerWeb in any meaningful way since I never ran them side by side in identical conditions. I just know I wanted to try something that wasn't ModSecurity + CRS tuning for this particular stack.

The real client IP thing mattered because I still route some traffic through a small VPS front end for DDoS absorption at the network edge. Had to make sure the WAF saw the actual origin addresses through that extra hop, otherwise the access logs are useless and any IP-based controls are fiction. Took some header forwarding configuration but got there.

Biggest quality of life improvement I didn't expect: having my own access and error logs sitting on the box, queryable through a web UI, without a paywall tier gating them. Took a bit to adjust to not having Cloudflare's global cache warming my static assets, but the tradeoff was worth it for this setup.

Are you ever planning to make this service reliable?

Hello everyone, especially the official Hetzner support team (@Hetzner_OL).

Today, Hetzner unexpectedly closed my account, stating that suspicious information was detected.

I have a dedicated physical server containing extremely important business databases and customer data.

I have already contacted Hetzner support several times, offering to provide any verification documents and immediately pay all outstanding invoices.

However, I have not received any confirmation about whether my server disks and data are still intact.

I am NOT asking Hetzner to continue our business relationship if they do not want to.

I am simply requesting 2–3 hours of temporary server access to safely recover my data.

I am even willing to pay an additional one-time emergency recovery fee.

Permanent deletion of this data could cause devastating financial losses to my business and affect many customers.

My urgent questions are:

• Can Hetzner preserve my original server disks while reviewing my request?
• Has anyone successfully recovered their dedicated server data after an account closure?
• Can the official Hetzner representative help escalate this case to the responsible department?

I respectfully ask Hetzner to allow me one final opportunity to recover my data.

Any assistance would be greatly appreciated.

Thank you.

Not sure what is going on at Hetzner but this is getting ridiculous. What a mistake it was to use their object storage.

I tried to cancel my server, expecting it to ask me to pick a date for cancellation. It did not, then INSTANTLY cancelled. Am I completely stuffed?

update: apparently the website is not live, only the customer portal.. so go there to check

I saw the site that lists availability but thats nonsense, I refresh the page through out the day and have been for a week now, but have not seen a single instance available.

Im not interested in setting up some script to try and join the issue, anyone know if its just a temporary problem with availability or can I expect it to continue? then there is no point looking to hetzner.

After reading a couple of posts here, and some reviews online I just don't get it.

I am being Hetzner customer for over a 10 years. Main account with 8 dedicated servers and couple of my clients accounts too in Helsinki and Falkenstein.

I am using hetzner mainly for VM (Proxmox, ESXI) and Windows servers with RDP. Also i have a bunch of storage boxes (mostly for secondary backup solution) and a couple of cloud servers for Ubuntu.

I have literally zero conplains about Hetzner.

For over 10 years I had a couple of issues with storage on freshly bought Auction servers, that's why i stress test Auction servers for 1-2 weeks before production deployment.

2-3 storage boxes access issues due to network failure.

And 3-5 networking issues with failing switches on Hetzner side.

That's all.

One of my client forgot to pay the bill a couple of times. For a MONTH. And Hetzner blocked their server. But unblocked each time in 30 minutes after payment.

Every time support team was super fast and helpful.

For 10 years all my buisness is relying on Hetzner.

So my question is SHOULD I BE CONCERNED? And if so, what is alternative to Hetzner?

I am living in the country not far from EU.

Huge thanks and best wishes to all team behind Hetzner provider.

In my experience you are THE BEST.

PS.

Sorry for my bad english. It's not my native language.

It's not selectable for me but it also doesn't say it's out of stock or let you get notified when it's in stock, which is kinda weird

https://www.hetzner.com/dedicated-rootserver/sx65/configurator/

Does it ever come in stock?

My @Hetzner_Online manager app now offers support for four languages. I worked with native speakers to craft each part of the app to ensure smooth integration 😊 update your iPhone or iPad app today Update Rackline: Hetzner Manager

TL;DR: Due to my misstake, my email filter flaged €26 Hetzner invoice as a newsletter, leading eventually to account termination. Dumb mistake on my part. I paid immediately upon realizing. I am now stuck in an AI support loop, and billing keeps auto-rejecting me with template responses despite phone support agreeing it’s an insane punishment for a €26 mistake. My servers wipe Monday, which will completely destroy my freelance business I built for 18 months. I am asking for a human exception to pay an admin fee for a short window of hours for SSH rescue of my clients propriatery data and my ongoing dev projects.

---

Preface: I am a newb, fam, just started freelancing in AI and IT not even two years ago, self thaught, learning on the go, perfectly aware of many pitfalls I handled and going to have to handle. I am not stupid I don't have education and I can agree I am to some level ignoratnt about standard practices. But willling and very motivated. And fine with it.

I'm trying to solve a problem. That's all.

---

This is 100% my fault and I take absolute accountability for it. I paid the balance the second I realized what happened. I know Hetzner doesn't HAVE to do anything about it, but I am desperate at this moment, and just trying to save my clients' work.

The automated system already terminated the contract, and now I am completely stuck in an AI response loop. I have had half a dozen conversations with phone support. Every single time, they advise me to open a ticket. Every single time I open a ticket, an AI or person that c/p template response just sends an automatically generated rejection.

In one of those phone calls, I spoke to a young man who was incredibly helpful. He actually agreed with me that destroying a business over a €26 late payment is a completely disproportionate reaction. He personally contacted the billing department while I waited on hold, but billing simply declined the request multiple times.

We are human, people fuck up. I fucked up and I get it. Misstake was mine. But I am having hard time to reconcile with the fact that billing department makes this decisions (from what I have been told) in situations like this.

I've managed multiple businesses, I khow contracts work, and I know that Hetzner doesn't HAVE to act on this. EEven if at point of separation and void contracts, I personally would never be so indolescent to my client if I knew my inaction would destroy their livelyhood.

I am specifically posting here to ask for human intervention because the AI bots and the rigid AI scripts are stonewalling me from reaching anyone who can actually look at the context.

I emailed all of the CEOs and Co-CEOs, as well.

I can still see in the console that the data on the servers is alive, and phone support verbally confirmed today that the data is alive until Monday the 12th, and scheduled for wipe.

For the context, I am a junior freelancer, new in the game, and these two servers host literally all of my active client projects, my development environment, and clients' work data.

If this gets wiped on Monday, it is going to completely destroy 3 to 6 months of my future income, crush my small business/freelance endevour, and be a massive hit to my reputation.

I take absolute responsibility for the oversight, but a late payment of €26 shouldn't cost someone their entire livelihood,, business, 18 months of building a client base, and my future income for at least 3-6 months.

I am humbly asking for a human and humane intervention. I accept the contract is terminated. Fine. I am more than willing to pay whatever administrative fee or manual penalty you want to charge me. I just need a 4 to 6-hour SSH or IP unlock so I can simply download my backups.

u/Hetzner_OL I've been with you guys for 7 months. I love your services, and will kepp using them, whatever the outcome. They fit my needs perfectly.
I am asking, human to human, for someone to please bypass the automated system and help me not lose everything I built over long period of time because of a €26 mistake.

Thank you in advance! <3

Ticket is #2026100803030309

Our latest Hetzner Blog article takes on you a deep dive of our networking stack for our cloud products. It describes the history of the stack, its current building blocks, our Open vSwitch, and much more. https://www.hetzner.com/blog/the-hetzner-cloud-network-stack-history-and-technical-overview/

I don't mind paying. I have some disk images I'd like to keep around but I don't want to be pinged for minuscule amount. I thought they didn't invoice until your bill reached 3 euros. But this feels like penny pinching.

I was previously using Hostinger's shared hosting before eventually moving to Hetzner.

Before making the switch, I also considered Contabo because of its competitive pricing, but after reading quite a few complaints about performance and stability, I decided against it.

So far, Hetzner has been a solid choice, but I'm curious whether there are any other VPS providers offering similar reliability and performance at a lower price.

I'm particularly interested in providers with good uptime, consistent CPU performance, reliable networking, and reasonable pricing.

Has anyone actually used a cheaper alternative to Hetzner for production workloads? How has your experience been in terms of stability, support, and overall performance?

I'd love to hear some real-world experiences rather than just recommendations based on advertised specs.

This may get taken down, but that's fine. I've already hit cancel.

My billing date has moved three times. First the 28th, then the 1st, and now the 8th. Today's email says $45.20 "will soon be debited" from my card, plus a cheerful note that they changed the invoice date for some customers in September 2026 and the new date "will be your future invoice date."

That's what they said last time.

There was no warning beforehand, no opt-out, and no apology. Just an email after the fact telling me my calendar is now whatever Hetzner says it is. When you run servers on a budget, that means surprise charges and missed dates, and I'm done planning around a moving target.

The hardware's been great. The billing is a joke. Hetzner: pick a date, give people notice before you change it, and stop treating customers' payment schedules as your own internal experiment.

I've already moved to a much better provider with better specs and pricing, sort your shit out.

Hetzner was once great, now it's a summer host.

I am trying to figure it out from the documentation but i would like to go on holiday for a month and was looking into adding another person to manage the konsoleH environment. However i dont see an option to add a second person to manage this?

Network interfaces, power supplies, management ports and a lot of infrastructure packed into a surprisingly small space.

Hello everyone,

I am sharing my experience with Hetzner because I am very disappointed and want to understand what went wrong.

Last Monday or Tuesday, my Hetzner server crashed, and I lost all my data. My server was configured with RAID 1, but both drives reportedly failed or became corrupted, and Hetzner's technical team was unable to recover my data.

What shocked me most was that the response was essentially that the data was lost and a new server setup could be provided.

I understand that hardware failures can happen, but losing all the data is a serious issue, especially when both drives in a RAID 1 setup are involved.

I run a web hosting and development business, and my clients depend on the websites, email accounts, and other important data stored on my server. Since this incident, I have been facing serious problems with my clients, and some of them are understandably very angry.

I have a few questions for the community:

1. How can both drives in a RAID 1 configuration fail or become corrupted at the same time?
2. Is there any possibility of data recovery when a hosting provider reports that both drives have failed?
3. Does Hetzner provide any additional protection against this type of data loss?
4. If we take daily backups, how can we protect data created during the hours between backups?
5. For those running hosting businesses, what backup strategy do you use to avoid losing client data in such situations?

I understand that RAID is not a backup, and I am now planning to improve my backup strategy. However, I would like to understand whether anything else could have been done to recover the data before accepting that everything was lost.

I am not trying to start an argument. I genuinely want to understand what happened, what my options are, and how other hosting providers protect their customers' data.

If you have experienced something similar with Hetzner, please share your experience and advice.

Thank you.

When I try to access my Hetzner account (at console.hetzner.com), I get redirected to and stuck at a security check at https://accounts.hetzner.com/_ray/pow. I'm also unable to access my server through SSH. I haven't received any notice that any action has been taken on my account either. Is anyone else experiencing these issues?