Hetzner delivers some of the rawest processing power per euro in the hosting industry, running state-of-the-art data centers across Germany, Finland, and select US and Asian locations. If you are migrating away from legacy hyperscalers like AWS or DigitalOcean to cut infrastructure costs, you need to know how Hetzner structures its cloud, dedicated, and storage platforms—and where architectural trade-offs apply.
Hetzner Hosting Architecture: Cloud vs. Dedicated vs. Storage
Choosing the right instance type starts with understanding how Hetzner separates its hardware lines. Unlike managed WordPress hosts that abstract the underlying OS, Hetzner provides unmanaged infrastructure. You get root access, standard Linux distributions (Ubuntu, Debian, Fedora, AlmaLinux), and absolute control over your stack.
1. Hetzner Cloud (VPS)
The cloud lineup serves developers who need fast provisioning and hourly billing. Instances deploy in under 30 seconds and split into several performance tiers:
- CX Series (Cost-Optimized): Uses shared AMD or Intel processors. These plans suit light workloads, staging environments, and low-traffic web applications.
- CAX Series (ARM64): Powered by Ampere ARM processors. Ideal for native ARM compilation, lightweight microservices, and energy-efficient builds.
- CPX Series (Regular Performance): Offers a high price-to-performance ratio with baseline dedicated compute power for production web servers.
- CCX Series (General Purpose): Features dedicated vCPUs for consistent high-load tasks and enterprise applications.
European cloud plans include a massive 20 TB of monthly traffic, which eliminates unexpected bandwidth overage bills for normal web traffic.
2. Dedicated Root Servers
For high-throughput databases, heavy virtualization, or game servers, bare-metal hardware outperforms virtual machines. Hetzner structures its dedicated lines by hardware focus:
- AX Line: Powered by AMD Ryzen and EPYC processors, optimized for high core density and heavy computing.
- EX Line: Built on Intel Core and Xeon hardware, favored for single-core clock speed.
- SX Line: Tailored for massive storage arrays, combining high-capacity SATA HDDs with NVMe caching.
- Server Auction: A marketplace for refurbished dedicated servers at steep discounts. These machines lack setup fees or long-term contracts, making them popular for budget-conscious homelabs and secondary nodes.
3. Storage Boxes and Object Storage
Separate from primary compute instances, Hetzner provides standalone Storage Boxes accessible via SFTP, SMB, or WebDAV for automated backups. They also offer S3-compatible Object Storage to decouple file storage from web nodes.
Pricing and Cost-Efficiency Breakdown
Hetzner maintains a reputation for aggressive pricing by operating lean, highly automated data centers with advanced energy efficiency.
A standard entry cloud instance (such as the CX23 with 2 vCPUs and 4 GB RAM) costs around €5.99 per month. Dedicated Ryzen servers start around €59 per month for robust hex-core configurations.
Billing is calculated hourly up to a monthly cap. If you spin up a cloud server for three days to test an application and destroy it, you pay only for those 72 hours.
However, cost savings require factoring in regional differences:
- IPv4 Addresses: Cloud instances include a primary IPv4 address, but additional IPs or dedicated server IPv4 blocks carry nominal monthly fees.
- Traffic Outside Europe: While EU locations bundle 20 TB, US and Singapore data centers include tighter baseline allowances with stricter overage fees.
Security, Compliance, and Data Sovereignty
Because Hetzner operates primarily out of Germany and Finland, its infrastructure complies strictly with the European Union's General Data Protection Regulation (GDPR).
Data centers carry ISO/IEC 27001 certifications and BSI C5 Type 2 attestations, verifying rigorous physical and digital security controls. Facilities use redundant power supplies, biometric access gates, and advanced early-smoke-detection systems.
Common Configuration Mistakes to Avoid
Moving from managed hosting to an unmanaged provider introduces operational responsibilities. Avoid these frequent missteps during your initial deployment:
- Neglecting the Firewall: Spinning up an unmanaged cloud instance without a configured firewall leaves SSH ports exposed to automated brute-force scripts within hours. Always enable Hetzner's stateful cloud firewalls or configure
ufwlocally. - Ignoring Backup Recovery Testing: Setting up automated daily snapshots is only half the battle. Run a test restore to a staging instance before your application goes live to verify your recovery time objective.
- Overlooking Root Login Security: Leaving password authentication enabled for the root user invites compromise. Disable password login entirely and restrict access to SSH keys.
- Failing to Monitor Disk I/O Limits: On shared cloud plans, running intensive database queries without proper caching can exhaust I/O operations per second (IOPS). Scale to dedicated vCPUs if your database grows beyond memory limits.
Frequently Asked Questions
Does Hetzner offer managed hosting or cPanel?
No. Hetzner provides unmanaged infrastructure. You receive root access to your operating system and must configure your own web server stack, security updates, and control panels (such as CyberPanel, HestiaCP, or RunCloud) if you prefer a graphical interface.
How do Hetzner's DDoS protection measures work?
Hetzner includes basic, automated DDoS mitigation at the network edge for all cloud and dedicated servers at no extra charge. This system filters out common volumetric attack vectors automatically without requiring manual intervention.
Can I upgrade my cloud server resource limits later?
Yes. You can scale your cloud server's CPU and RAM via the Hetzner Cloud Console or API. Note that disk scaling is typically one-way (you can expand storage capacity, but you cannot shrink it back down).
What payment methods does Hetzner accept?
Hetzner accepts credit cards (Visa, Mastercard), PayPal, and direct bank transfers (SEPA) for verified accounts. Depending on your country of residence and account history, a prepayment or deposit may be required before provisioning high-value dedicated servers.
Are there any long-term contracts required?
Most services operate on a flexible, month-to-month or hourly billing model with no long-term lock-in. You can cancel cloud instances or monthly dedicated servers with minimal notice before the next billing cycle.
