Hacker News Reader

> Wireguard for private networking between the servers.

I'm curious: doesn't Hetzner provide some sort of private virtual cloud? (Digitalocean calls that VPC)

They do for their cloud instances [0], but not their dedicated server offerings.

I've seen on their custom solutions page [1] you can pay extra to have your own private interconnect or manged switches, but I've never used them nor heard much about them.

[0] https://www.hetzner.com/cloud - see "FEATURES" [1] https://www.hetzner.com/custom-solutions

They do provide private networks now, but AFAIK they didn't in 2017. Today, one could use “vSwitch” or “Cloud Network”, or both, to set up private networking. But, if you want to easily encrypt all traffic, Wireguard might still be a good idea.

Good to know.

> But, if you want to easily encrypt all traffic, Wireguard might still be a good idea.

But, if one is already using https I guess encrypting the traffic would be unnecessary, no?

My guess: https hits HAProxy from external world, afterwards all is just http. There is no need to encrypt internal trafic.

Sure, but then why use WireGuard to encrypt http internal traffic if one can just let the internal traffic be https :D

Reply on news.ycombinator.com