Live data from Hacker News

Hetzner Introduces ARM64 Cloud Servers

hetzner.com

241–250 of 342 posts

Re: Hetzner Introduces ARM64 Cloud Servers

#241

Earlier quoted context omitted.

New Hetzner ARM: sign verify sign/s verify/s rsa 512 bits 0.000070s 0.000006s 14268.2 159885.6 rsa 1024 bits 0.000405s 0.000021s 2468.4 47757.7 rsa 2048 bits 0.002847s 0.000078s 351.3 12830.1 Hetzner x86: sign verify sign/s verify/s rsa 512 bits 0.000067s 0.000004s 14893.9 240902.8 rsa 1024 bits 0.000127s 0.000009s 7845.9 114300.9 rsa 2048 bits 0.000874s 0.000027s 1144.6 36800.6

If it's of any value to anyone, perhaps as an indication of hardware/environment implementation, I get identical numbers (<1% difference) on Oracle's Ampere Altra servers with OpenSSL 1.1.1n on Debian 11.

Due to a peculiar design issue, Neoverse N1 underperforms when using RSA. It doesn't affect other use cases and is fixed on newer Arm cores.

Re: Hetzner Introduces ARM64 Cloud Servers

#242
post #228

Earlier quoted context omitted.

I'm curious what distro you're using where there are missing packages. I've never run across missing distro packages on arm64 Debian (which I regularly use at work).

Have you faced issues with packages being too old on Debian Stable though? "Missing packages" may be packages missing important features or bugfixes.

I certainly have...

Arch and SUSE are ARM friendly though.

Re: Hetzner Introduces ARM64 Cloud Servers

#243

I implemented a Virtual Private Cloud (VPC) on AWS with Elastic Container Service (ECS) using Terraform so that I could run Docker, and it ended up being about 2 orders of magnitude more expensive than Hetzner after all of the services were configured. For example, something as simple as AWS NAT Gateway costs $30 per month, and it can be challenging to get everything right if you don't use one. I haven't tried Heroku…

I think one disadvantage of putting everything (nginx, web server, database, monitoring tools, etc.) in one machine is that suddenly your machine is exposing a myriad of ports to the internet and one mistake on your side (e.g., misconfigured auth module) is all what's needed to compromise your entire service. Having some sort of vpc where you can safely put your db server that only listens to requests from servers wi…

Hm, why? You can run services without exposing their ports to the whole world. Or use unix sockets..

Re: Hetzner Introduces ARM64 Cloud Servers

#244
post #201
post #7

Earlier quoted context omitted.

Power delivery and cooling are not cheap at datacenter levels.

Power is especially expensive in Europe right now. The war in Ukraine caused price increases between 300% and 1000%

Is that still the case? The prices seem to have peaked around August and are now back to their pre war levels. Before that prices have already been steadily rising since September, 2021 though.

e.g. average price in August was over 400% higher than this March

https://www.nordpoolgroup.com/en/Market-data1/Dayahead/Area-...

Re: Hetzner Introduces ARM64 Cloud Servers

#245
post #3

Could somebody walk me through why ARM based servers are so inexpensive compared to their x86 counterparts? Is performance much lower? 16 cores & 32gb of RAM for less than 25 euros seems like a bargain.

ARM's N-series cores are targeted at a somewhat lower performance point than top line x86 cores. That saves a bunch of transistors since there's a lot of diminishing returns. There's also design compromises not being made in order to hit clock speeds that server parts never try to hit anyways. Not having to decode complicated x86 instructions but simple RISC ones is also a small advantage, somewhere on the order of 5% power savings.

Also, x86 backwards compatibility and SMT don't cost much in terms of power or transistors but both have large costs in of verification work.

Re: Hetzner Introduces ARM64 Cloud Servers

#247
post #220

I implemented a Virtual Private Cloud (VPC) on AWS with Elastic Container Service (ECS) using Terraform so that I could run Docker, and it ended up being about 2 orders of magnitude more expensive than Hetzner after all of the services were configured. For example, something as simple as AWS NAT Gateway costs $30 per month, and it can be challenging to get everything right if you don't use one. I haven't tried Heroku…

Cloud is about elasticity. At ${work} we spin up a ton of EC2 instances in anticipation of huge traffic spikes that happen predictably several times a day, in different regions, and spin them down afterwards. It's also about simplicity. Many services come pre-configured on.AWS, with clustering, failover, backups, etc already present. When you are small, you can sysadmin your server fine, and you don't yet need the cl…

How much would it cost to handle your peak load with dedicated servers and no scaling?

Re: Hetzner Introduces ARM64 Cloud Servers

#248
post #228

Earlier quoted context omitted.

Have you faced issues with packages being too old on Debian Stable though? "Missing packages" may be packages missing important features or bugfixes.

I certainly have... Arch and SUSE are ARM friendly though.

Isn't running Arch in prod considered brave still? Or has it become stable and predictable in the last few years I did not watch it?

Re: Hetzner Introduces ARM64 Cloud Servers

#249

Earlier quoted context omitted.

I would go further and have a small server/NAS running locally in an office. The best backup is one you sit on the top off.

This does not pay out in Germany due to the high energy costs in private house holds or office spaces.

For a "small server/NAS"?

Re: Hetzner Introduces ARM64 Cloud Servers

#250

I implemented a Virtual Private Cloud (VPC) on AWS with Elastic Container Service (ECS) using Terraform so that I could run Docker, and it ended up being about 2 orders of magnitude more expensive than Hetzner after all of the services were configured. For example, something as simple as AWS NAT Gateway costs $30 per month, and it can be challenging to get everything right if you don't use one. I haven't tried Heroku…

I think one disadvantage of putting everything (nginx, web server, database, monitoring tools, etc.) in one machine is that suddenly your machine is exposing a myriad of ports to the internet and one mistake on your side (e.g., misconfigured auth module) is all what's needed to compromise your entire service. Having some sort of vpc where you can safely put your db server that only listens to requests from servers wi…

> I think one disadvantage of putting everything (nginx, web server, database, monitoring tools, etc.) in one machine is that suddenly your machine is exposing a myriad of ports to the internet and one mistake on your side (e.g., misconfigured auth module) is all what's needed to compromise your entire service.

All the Linux distributions I got to know use sensible defaults so that critical services don't bind to a public-facing interface / bind only to localhost, e.g. mariadb and mysql on Debian.

Besides that, Hetzner's "Robot" interface allows to configure which ports/IP addresses you allow access to your Hetzner server.

Post reply on HN