Hetzner - I am impressed!

SplitIce

I had Hetzner servers for many years. Always quick and efficient.

Real shame that they use Desktop hardware however. Ended up leaving due to that, and for some better offerings.

Geekoine

@Amitz said:

I always avoided Hetzner because of tons of bad reviews; most of them highlighted some kind of poor support. Now I'm almost convinced I was wrong. I will probably try an E3, so thank you.

Falzo

@Geekoine said:

would always recommend them, been with them for years...

I think stories of 'poor support' always have two sides. yes, hetzner is very strict when it comes to that and only does support hardware- and maybe networkwise IF it is a problem on their side.
they definitely won't teach you how to install a server or configure your network interface if you are not capable of... so 'poor' may often be just a misunderstanding of the meaning of unmanaged ;-)

Geekoine

@Falzo said:

>
only does support hardware- and maybe networkwise IF it is a problem on their side.

They do what they are supposed to do:-)

Falzo

@Geekoine said:
They do what they are supposed to do:-)

if that corresponds to your expectations, then you should be fine to order.
if you always need a hand to get your pampers on, no. ;-)

mtsbatalha

@Mathias said:

@Yoda said:
I've gone from some random host -> ovh -> online, all unpleased. Now at Hetzner for a month, so far impressed, hope Hetzner don't fail on me.

Can't wait to try their new location end of this year

Do you refer to Hetzner? Which location?

Amitz

mtsbatalha said: Do you refer to Hetzner? Which location?

Finland. But I am not sure about the benefit. Most routing will probably still go via Falkenstein/Nuremberg.

JustRefleX

I'd certainly would get a hetzner server if they would offer ddos protection

tr1cky

@JustRefleX said:
I'd certainly would get a hetzner server if they would offer ddos protection

They do.

JustRefleX

They do.
@tr1cky said:

@JustRefleX said:
I'd certainly would get a hetzner server if they would offer ddos protection

They do.

Since when? And what kind of ddos protection?

Amitz

@JustRefleX said:
Since when? And what kind of ddos protection?

https://forum.hetzner.de/thread/23562-ddos-mitigation/?postID=239250#post239250

You need to register for their forum to see the content of the link. The posting about their DDoS protection is german only.

To take the registration burden from you, here is the posting in question:

DDoS Mitigation
5. August 2016

Hallo Zusammen,

Wir haben ueber die letzten Monate verschiedene Systeme zur Abwehr von DDOS-Angriffen getestet und inzwischen auch ein System implementiert. Dieses besteht im wesentlichen aus 3 Ebenen ueber welche wir in der Lage sind Angriffstraffic von validen Traffic zu trennen.

1. Automatische Erkennung von Angriffsmustern

Neben der bisherigen Erkennung basierend auf der Trafficmenge und Paketmenge sind wir nun in der Lage den eigentlichen Angriff genauer einzugrenzen. Dadurch koennen wir genauer auf den verwendeten Angriffstyp eingehen. Ein UDP-Flood mit 500k pps ist fuer Server kein Problem. 500k SYN Pakete koennen aber schon ein Problem darstellen. Genau diese Unterscheidung ist jetzt moeglich.

2. Filtern des Traffics nach bekannten Angriffsmustern.

Auf dieser Ebene werden die haeufig verwendeten Angriffe gefiltert. Somit koennen wir Angriffe sehr effizient herausfiltern. Dies betrifft besonders die haeufig auftretenden Angriffe wie DNS-Reflection oder UDP Floods auf Port80

3. Challenge-Response-Authentifizierung und Dynamische Trafficfilterung

Hierbei werden Angriffe wie SYN-Floods, DNS-Floods und Invalid Packets gefiltert. Auch koennen wir an dieser Stelle sehr flexibel auf einzelne Angriffe reagieren.

Insgesamt ist es natuerlich notwendig das wir Default-Werte definieren welche fuer alle Kunden funktionieren. Daher sind unsere aktuellen Filter sehr zurueckhaltend konfiguriert. Wir schauen uns aber alle Angriffe an und versuchen unsere Filter und Responses zu verbessern.

Sollte jemand Ziel eines Angriffes werden welchen wir nicht erkennen oder unzureichend filtern koennt ihr euch gern melden. Wir werden das dann untersuchen und schauen wie wir auf diesen Angriff reagieren koennen.

Ich hoffe das in Zukunft keine Server mehr wegen eingehender Angriffe gesperrt werden muessen.

Gruss
Martin

---
Martin Fritzsche
Netzwerksupport

JustRefleX

@Amitz said:

@JustRefleX said:
Since when? And what kind of ddos protection?

https://forum.hetzner.de/thread/23562-ddos-mitigation/?postID=239250#post239250

You need to register for their forum to see the content of the link. The posting about their DDoS protection is german only.

To take the registration burden from you, here is the posting in question:

> DDoS Mitigation
> 5. August 2016
> 
> Hallo Zusammen,
> 
> Wir haben ueber die letzten Monate verschiedene Systeme zur Abwehr von DDOS-Angriffen getestet und inzwischen auch ein System implementiert. Dieses besteht im wesentlichen aus 3 Ebenen ueber welche wir in der Lage sind Angriffstraffic von validen Traffic zu trennen.
> 
> 1. Automatische Erkennung von Angriffsmustern
> 
> Neben der bisherigen Erkennung basierend auf der Trafficmenge und Paketmenge sind wir nun in der Lage den eigentlichen Angriff genauer einzugrenzen. Dadurch koennen wir genauer auf den verwendeten Angriffstyp eingehen. Ein UDP-Flood mit 500k pps ist fuer Server kein Problem. 500k SYN Pakete koennen aber schon ein Problem darstellen. Genau diese Unterscheidung ist jetzt moeglich.
> 
> 2. Filtern des Traffics nach bekannten Angriffsmustern.
> 
> Auf dieser Ebene werden die haeufig verwendeten Angriffe gefiltert. Somit koennen wir Angriffe sehr effizient herausfiltern. Dies betrifft besonders die haeufig auftretenden Angriffe wie DNS-Reflection oder UDP Floods auf Port80
> 
> 3. Challenge-Response-Authentifizierung und Dynamische Trafficfilterung
> 
> Hierbei werden Angriffe wie SYN-Floods, DNS-Floods und Invalid Packets gefiltert. Auch koennen wir an dieser Stelle sehr flexibel auf einzelne Angriffe reagieren.
> 
> Insgesamt ist es natuerlich notwendig das wir Default-Werte definieren welche fuer alle Kunden funktionieren. Daher sind unsere aktuellen Filter sehr zurueckhaltend konfiguriert. Wir schauen uns aber alle Angriffe an und versuchen unsere Filter und Responses zu verbessern.
> 
> Sollte jemand Ziel eines Angriffes werden welchen wir nicht erkennen oder unzureichend filtern koennt ihr euch gern melden. Wir werden das dann untersuchen und schauen wie wir auf diesen Angriff reagieren koennen.
> 
> Ich hoffe das in Zukunft keine Server mehr wegen eingehender Angriffe gesperrt werden muessen.
> 
> Gruss
> Martin
> 
> ---
> Martin Fritzsche
> Netzwerksupport
> 

Interesting. How much GBps Protection can I expect tho?

Amitz

No idea. They have not communicated this yet. Might be worth a pre-sales ticket.

Falzo

their DDOS protection should be working network wide and 'always on'. over in the froum it has been mentioned that it is done via juniper/arbor equipment within the network topology but they wont disclose details as they dont find that helpful in preventing people from finding new attacking vectors ;-)

JustRefleX

@Amitz said:
No idea. They have not communicated this yet. Might be worth a pre-sales ticket.
@Falzo said:
their DDOS protection should be working network wide and 'always on'. over in the froum it has been mentioned that it is done via juniper/arbor equipment within the network topology but they wont disclose details as they dont find that helpful in preventing people from finding new attacking vectors ;-)

Appreciate it taking your time guys. I might consider getting a used server now :P

Amitz

@JustRefleX said:

@Amitz said:
No idea. They have not communicated this yet. Might be worth a pre-sales ticket.
@Falzo said:
their DDOS protection should be working network wide and 'always on'. over in the froum it has been mentioned that it is done via juniper/arbor equipment within the network topology but they wont disclose details as they dont find that helpful in preventing people from finding new attacking vectors ;-)

Appreciate it taking your time guys. I might consider getting a used server now :P

I think they still have that 14-days-no-questions-asked guarantee, so that you can simply return the server without paying if you are not satisfied. Not a risky decision! ;-)

JustRefleX

@Amitz said:

@JustRefleX said:

@Amitz said:
No idea. They have not communicated this yet. Might be worth a pre-sales ticket.
@Falzo said:
their DDOS protection should be working network wide and 'always on'. over in the froum it has been mentioned that it is done via juniper/arbor equipment within the network topology but they wont disclose details as they dont find that helpful in preventing people from finding new attacking vectors ;-)

Appreciate it taking your time guys. I might consider getting a used server now :P

I think they still have that 14-days-no-questions-asked guarantee, so that you can simply return the server without paying if you are not satisfied. Not a risky decision! ;-)

That's exactly what I'm looking for. I'll take a look if they still have it. (Not trying to get a free machine - I need it for some time so...)

Amitz

https://www.hetzner.de/ot/hosting/legal/agb

See point 11 for the 14 days cancellation policy.

11.1 Right of withdrawal

You have the right to withdraw from this contract within fourteen days without giving any reason. The withdrawal period will expire after fourteen days from the day of the conclusion of the contract. To exercise the right of withdrawal, you must inform us (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, Telephone: +49 9831 505-0, Telefax: +49 9831 505-3, email: [email protected]) of your decision to withdraw from this contract by an unequivocal statement (e.g. a letter sent by post, fax, Email or via the secure online administrations area). You may use the model withdrawal form, but it is not obligatory. To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.

11.2 Consequences of withdrawal

If you withdraw from this contract, we shall reimburse to you all payments received from you, including the costs of delivery (with the exception of the supplementary costs resulting from your choice of a type of delivery other than the least expensive type of standard delivery offered by us) without undue delay and in any event not later than fourteen days from the day on which we are informed about your decision to withdraw from this contract. We will carry out such reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise, in any event, you will not
incur any fees as a result of such reimbursement.

If you requested to begin the performance of service during the withdrawal period, you shall pay us an amount which is in proportion to what has been provided until you have communicated us your withdrawal from this contract, in comparison with the full coverage of the contract.

Neoon

Usually Hetzner allows you to kill it ealier, but they can also refuse it.

blacklayerhost

Anti d'dos?

Neoon

Hetzner is gonna dive into the Clouds, since they have Ad's active searching for a JS
developer for a Cloud Control Panel, prem.

vimalware

@Neoon said:
Hetzner is gonna dive into the Clouds, since they have Ad's active searching for a JS
developer for a Cloud Control Panel, prem.

That's what you do when you finally accept that servers are way past commoditized.

IIRC, Hetzner was one of the first to prove that true commodity pricing for dedicated servers was less than half that of their North American competitors.

All investment should now logically flow to management and orchestration 'software'.

All the innovation today is aimed at providing the building blocks for make-your-own-Heroku s.

I wish Hetzner luck. I want Good companies to survive.

KenobisVPS

Wow their price looks very impressive. How are you guys doing with them? Can you share a few reviews please? xD

Maounique

IMO hetzner is a different breed of animal than OVH/Online. OVH are (were?) growth oriented and market share grabbing with poor and at times simply clueless and rude (not to mention at times blatantly racist) support, Online is better IMO but is not really that far regarding the surprises you have, while hetzner is strict but fair, competent and keeping customers happy comes before getting new ones to show growth.

Desktop hardware a problem?

Well, it may fail more often, but you are supposed to have backups and redundancy if you have important data anyway, no? So keeping 3 cheap servers in 3 different locations with 3 different providers may be cheaper than Amazon and, if you know what you are doing, safer, not to mention a bit of a CDN and bigger resources.

t0mmy

i had some servers there too... some had slow network speed but was not problem because i can try as many servers i like in the first 14 days u have to pay nothing

Amitz

I have had 15 different servers with them over the last years. Many came from their server auction, the rest have been regular services from their PX61 line and above. I stopped using their servers with i7 processors and non-ECC RAM and just use their E3 hardware with ECC RAM. I really cannot complain. The network speeds to the USA are sometimes a bit on the slower side, but bearable. Support has always been great and I would go with them anytime again.

sin

Maounique said: at times simply clueless and rude

After dealing with OVH support over network issues I swear their sole purpose seems to be jerking customers around/handing them to another tech and then another tech and then another tech with each one hoping someone else will deal with the issue.

DennisdeWit

I had Hetzner for one day. Didn't get any additional IP now that they need justification. Apparently you can run ESXi, DirectAdmin and Icecast multiply on port 80 on the same IP. That's how the support of Hetzner likes to think.

myhken

@DennisdeWit said:
I had Hetzner for one day. Didn't get any additional IP now that they need justification.

I just write "Need it for VM", and I get so many as I like.

Amitz

Strange, same here: Virtualization was always enough of a reason to get IPs from Hetzner...