Comment by TacticalCoder | Hacker News Reader

Comment by TacticalCoder | Hacker News Reader

A very weird thread that degenerated into: "PaaS vs self-hosted/self-owned hardware".

I'm pretty sure most people sysadmin'ing their Linux servers are actually doing it with rented dedicated servers. TFA btw specifically mentions: "don't manage physical hardware". Big companies like Hetzner and OVH have hundreds of thousands of servers and they're not the only players in that space.

They don't take care of "everything" but they take care of hardware failure, redundant power sources, Internet connectivity, etc.

Just to give an idea: 200 EUR / month gets you an EPYC 3rd gen (Milan) with shitloads of cores and shitloads of ECC RAM and a fat bandwith.

And even then, it's not "dedicated server vs the cloud": you can have very well have a dedicated server and slap a CDN like CloudFlare on your webapp. It's not as if CloudFlare was somehow only available to people using an "entire cloud stack" (whatever that means). It's the same for cloud storage / cloud backups etc.

I guess my point is: being a sysadmin for your own server(s) doesn't imply owning your own hardware and it doesn't imply either "using zero cloud services".

I generally agree, I have a cheap AWS Lightsail VPS (mainly for email hosting since my ISP blocks port 25 because I'm a "consumer" and they want to protect the world for consumer spammers) but also for flexibility. I like that the Internet is not at my doorstep (no open ports at home). So, cheap VPS, Wireguard and my home machines to serve whatever I want. I don't pay extra if I use a ton of CPU or disk IO, for example.

Here is my Wireguard server (cheap VPS) and client (my home servers) config:

# # Client (the actual self-host local server) #

[Interface] ## This Desktop/client's private key ## PrivateKey = redacted

## Client ip address ## Address = 10.10.123.2/24

[Peer] ## Ubuntu 20.04 server public key ## PublicKey = redacted

## set ACL ## AllowedIPs = 0.0.0.0/0

## Your Ubuntu 20.04 LTS server's public IPv4/IPv6 address and port ## Endpoint = redacted:12345

## Key connection alive ## PersistentKeepalive = 15

# # Server (in the Wireguard context, exposed to the Internet) #

[Interface] ## My VPN server private IP address ## Address = 10.10.123.1/24

## My VPN server port ## ListenPort = 12345

## VPN server's private key i.e. /etc/wireguard/privatekey ## PrivateKey = redacted

PostUp = iptables -i eth0 -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 10.10.123.2 # Add lines for more ports if desired

PostDown = iptables -i eth0 -t nat -D PREROUTING -p tcp --dport 80 -j DNAT --to-destination 10.10.123.2 # Add lines for more ports if desired

[Peer] ## Desktop/client VPN public key ## PublicKey = redacted

## client VPN IP address (note the /32 subnet) ## AllowedIPs = 10.10.123.2/32

This is exactly the solution I landed on as well. It has served me well for a few years now :).

> it doesn't imply either "using zero cloud services"

Enter big-three cloud egress pricing. Designed to make sure that you have to go all-in.

And a good reason to stay out.

How good is their 50 euro package? I wanna try it just for fun and dicking around.

Hetzner is pretty good in general. $70/month gets you a 16 vcpu VM with 2TB free egress/month. Their additional egress pricing is peanuts compared to Google. Google, AWS etc egress is so overpriced - as if we are still living in mid 2000s.

20 TB free egress, not 2TB, and additional TB is 1€/TB

Sounds amazing, thank you guys!

Yep. You can even set up K8 networks. There is a project called 'kube hetzner' in github with which you can easily set up a cluster. There are even easier tutorials:

https://community.hetzner.com/tutorials/k3s-glusterfs-loadba...

for fun try https://www.hetzner.com/sb

Their prices have spiked because of electricity costs, the entry level used to be around 20 euros. They come with 1Gbit

Reply on news.ycombinator.com