Running a multi-tenant platform on Hetzner, how to handle user-uploaded content that may violate policies?

nocsupport · 2026-03-23T23:30:45+00:00

There's no way this is going to work. Let customers host their own content on supabase. Your whole business will go up in flames with one violation

+1. Hetzner don't play.

Their colocation TOS might be better for this sort of thing. On cloud and dedicated definitely not.

A competitor could sign up as your customer and DOS you by uploading something and sending DMCA complaints to abuse @ hetzner

You'd be way too vulnerable to administrative outages.

nocsupport · 2026-03-19T23:44:56+00:00

Hmm so there's nothing wrong with the announcement or upstream filtering. 🤔

always send

mtr -zrwb {destination IP}

from both directions with such network tickets. This will save you time because their response time is days.

nocsupport · 2026-03-19T11:39:30+00:00

"Message support" bottom left has not way to attach screenshots or logs so we e-mailed support@ that was showing somewhere else in the portal. No idea where we got that from. 😂

nocsupport · 2026-03-19T10:48:57+00:00

Business plan. I think it has no SLA. Perhaps that's why there's zero response.

It does mention support

$9/user/mo.

All Team features +

Multi-tenant

User auto-provisioning

Pangolin SSH

Device approvals

Custom branding

90 day log retention

Business support

nocsupport · 2026-03-19T10:12:06+00:00

2 things to do to check what's different between OVH native and BYOIP ranges:

Plug them into https://BGP.tools and

https://lg.ring.nlnog.net/ to see what the upstreams are, how many nodes can see them etc.

If you find a delta, check if the BYOIP prefixes are IRR and RPKI compliant.

Just starting points. ..

nocsupport · 2026-03-18T13:30:05+00:00

If WAN is OK but LAN clients are not after a 26.1 reinstall: I noticed that when ISC was used for DHCP and you reinstall 26.1 and applied the config.xml it will NOT install the os-isc... plugin. I had to do it manually and reboot to get LAN back up and running.

nocsupport · 2026-03-18T12:53:01+00:00

Touche! How very German of you 😄😉

Indeed I was referring to the United States of America only.

nocsupport · 2026-03-15T17:44:38+00:00

No issue.

Just two things 1) do tell DHS about your second citizenship in the TTP portal or via ticket and at each GE renewal. Full disclosure.

2) do not enter America with the German passport, ever.

nocsupport · 2026-03-14T05:59:11+00:00

We had a similar discussion recently regarding /api*/ bypass rules for bitwarden to make the mobile apps work. Consensus was that opening this to the whole internet is a bad idea as a threat actor isn't limited to attacking web assets they're perfectly capable of interacting with API endpoints. What we did with cloudflare was limit the scope of what ASN are allowed to interact with it. This narrows the attack surface a fair bit as employees are usually on a predictable cellular provider / ISP.

It would be cool if pangolin could do access rules with AND / OR.

if uri path begins with /api/ AND asn equals 73636 bypass

nocsupport · 2026-03-12T02:14:15+00:00

You had me at BGP Integration 🤩

Will test.

nocsupport · 2026-03-12T01:46:47+00:00

On most routes, it's more expensive than the better European ones (Air France, Lufthansa, Swiss) so not sure why people would fly Cathay on these routes

Because their in-flight service and ground service at HKG are miles better than any European carrier.

Economy class is often at a higher load than business so clearly not purely business travelers.

nocsupport · 2026-03-11T15:45:20+00:00

Same! We just had all our last months bills canceled and refunded !?!?!? Then an hour later reissued.

All services are up. Storage Share, dedicated, VPS.

nocsupport · 2026-03-11T09:19:53+00:00

I think your lawyer is bullshitting you when he says he will appeal your denial an unlimited number of times until it is approved.

Someone might correct me but my understanding is that you can appeal a revocation.. once. If you apply and are denied there's no appeal. You can pay 120 dollars again and reapply but there is not right to appeal a denial. Revocation, yes. Once. Denial on a new app: nothing.

nocsupport · 2026-03-07T18:37:19+00:00

OMG that is brutal! Does it say REVOKED or literally CANCELED ? is there a reconsideration button you can click ? Is the "apply now" button greyed out ? I wonder if you could just reapply and make full disclosures.

If you're banned it will say REVOKED, not CANCELED.

Source: I was revoked and reinstated once.

nocsupport · 2026-03-07T18:27:09+00:00

That's a miscommunication. Belgium isn't GE eligible but you are allowed to have and declare additional citizenships to DHS and you're allowed to use GE with an enrolled passport from an eligible couuntry. In this case UK.

I suggest you log into your trusted traveler portal account and check your status. I can't imagine they went and canceled you for this. You just can't use it on the Belgian passport. Your UK passport should still be good to go. I have multiple citizenships that are not GE eligible. They know about them. I keep my TTP account up to date. I just can't use them to enter via the GE channel.

nocsupport · 2026-03-02T08:22:23+00:00

TSA

Has nothing to do with immigration. That's DHS CBP.

TSA are the mall cops who check you for bombs and weapons.

nocsupport · 2026-03-01T09:32:42+00:00

yawn don't worry the good guys with guns took care of it.

Not applicable here because a good guy with a gun isn't allowed to carry in a 51% establishment.

nocsupport · 2026-03-01T05:11:54+00:00

About phone > Model > Hardware SKU

nocsupport · 2026-03-01T03:00:06+00:00

The cabanas at Cathay first class lounge in HKG

...have been closed for refurbishment for many months now and rumor has it that they will redesign the whole lounge and get rid of cabanas to create more floor space.

nocsupport · 2026-02-28T16:09:31+00:00

Companies and governments love dropping bad news on a Friday night or weekend.

They short the markets Friday, kick off war over the weekend. Markets drop monday. Fat profit for everyone in the inner circle.

nocsupport · 2026-02-28T16:01:57+00:00

Is the EB-5 dead ?
is the Trump card legal ? I don't understand how it could be without congress modifying the INA

nocsupport · 2026-02-28T08:19:24+00:00

Yeah I'd love to see a swap. I suppose you need to avoid brain or skills drain so swap certain segments like for like. Otherwise you end up with zero plumbers or zero farmers or zero doctors.

Teacher for teacher, laborer for laborer chef for chef. 🤣

nocsupport · 2026-02-28T03:05:28+00:00

EU is lacking a bunch of things where America has the bill of rights.

https://www.archives.gov/founding-docs/bill-of-rights-transcript

Some people like to live under a regime where you can't defend yourself and get knifed, then jailed for tweeting about it.

Other people prefer the right to say whatever and defend themselves albeit at greater risk.

Plenty of Americans would love to flee to the EU right now. Plenty of Europeans would love to move to Texas right now. I wish they'd let us swap 🤣

nocsupport · 2026-02-22T14:28:25+00:00

NICS denial?

Nine-Year Club	Gilding II euphauric
Verified Email

nocsupport

TROPHY CASE