[email protected]

Hetzner consulting, architecture, and migration

WZ-IT designs and delivers Hetzner infrastructure for applications, platforms, and private clouds. From selection and sizing to networking, security, and migration, the result is a documented and operable target state.

  • Cloud & Dedicated
  • Proxmox & Kubernetes
  • Migration & integration
Reviews
Cloud Wolke HerausforderungServer NachhaltigkeitIT Beratung Service Consulting SoforthilfeTimo Wevelsiep Robin ZinsExperten für Innovation Migration AWSHetzner Hosting zuverlässig

Companies worldwide trust WZ-IT

  • Stadtwerke Brühl
  • DGHO e.V.
  • ABCO Water Systems
  • Golem.de
  • EVADXB
  • nextGYM
  • AInergy
  • ml&s
  • Odiseo Solutions
  • Annota
  • ARGE
  • SweetConnect GmbH
  • Aphy AG
  • CORGOS
  • Rekorder
  • SolidProof
  • Yonju
  • Keymate
  • Paritel
  • Mr. Clipart
  • Millenium
  • Negosh
  • Führerscheinmacher
  • Boese VA
Read client reviews

Services

From server selection to a production-ready target architecture

We do not resell Hetzner products. You keep your own account and receive independent technical support for selection, build, and migration. The intro call is free; the consulting itself is delivered as a defined starting package or as part of the migration project.

Platform selection and sizing

We compare Hetzner Cloud, dedicated servers, and storage against workload profile, availability, data volume, and budget.

  • Cloud or dedicated

  • Capacity and growth

  • Location and redundancy

Target architecture and security

Networks, access, firewalls, backup, and recovery are designed as one coherent architecture.

  • Private networks and routing

  • Identity and administrative access

  • Backup, RPO, and RTO

Migration and commissioning

We handle build, test migration, cutover, and rollback planning for existing applications and data.

  • Current-state assessment

  • Testing and cutover

  • Documented handover

Automation and integration

Terraform, APIs, deployment processes, and existing corporate networks can be integrated into the target platform.

  • Infrastructure as code

  • CI/CD and provisioning

  • Network and identity integration

Platform choice

Hetzner Cloud or dedicated servers: design around the workload

The cheapest individual server is not the deciding factor. Workload profile, data placement, availability, scaling, and ongoing operations need to fit together.

ModelTypical fitStrengthsPlanning focus
Hetzner CloudVariable workloads, separate development and production environments, and horizontally scalable applicationsFast provisioning, API automation, private networks, firewalls, and load balancersPersistent data, quotas, failure scenarios, and separation of stateful services need deliberate planning.
Dedicated serversSustained compute load, virtualisation, large local data volumes, and predictable platform capacityDedicated resources, your own hypervisor, and flexible storage or network architecturesRedundancy, hardware replacement, recovery, and capacity reserves depend more heavily on the target architecture.
Cloud and dedicated combinedPlatforms with elastic front ends, sustained compute demand, or phased migrationCloud and bare-metal resources can be assigned according to each workloadRouting, private address space, vSwitch coupling, security zones, and troubleshooting become more complex.

Project types

Typical Hetzner projects

  • Cloud and dedicated infrastructure

    Individual systems, multi-stage environments, or hybrid architectures combining Cloud and dedicated resources.
  • Proxmox on Hetzner

    Planning nodes, networking, storage, backup, and high availability around provider-specific constraints.
  • Kubernetes on Hetzner

    Cluster architecture on Cloud or bare metal, including networking, storage, observability, and operating model.
  • Cloud exit and provider migration

    Migration from AWS, Azure, GCP, or other providers to an appropriately sized Hetzner target architecture.

Networking & security

The target architecture does not end at the server

We connect Hetzner resources with secure administrative access, existing identities, deployment processes, and a viable recovery model.

Networking and segmentation

Private Cloud Networks, vSwitch, routing, load balancers, and public endpoints are arranged to keep management, database, and application paths separate.

VPN and secure access

Administrative access can use WireGuard, NetBird, Tailscale, Headscale, or another suitable access model instead of unnecessarily exposed services.

Identity and permissions

Technical accounts, SSH keys, MFA, SSO, and roles are separated according to teams, service providers, and automation.

Backup and recovery

Storage targets, encryption, retention, restore tests, and recovery are derived from data volume and agreed RPO and RTO targets.

Automation and deployment

Terraform, cloud APIs, configuration management, and CI/CD reduce manual exceptions and make changes traceable.

Monitoring and operational handover

Metrics, logs, alert paths, runbooks, and responsibilities are defined before go-live, regardless of who operates the platform later.

Technical foundations at Hetzner: Cloud Networks, vSwitch, and Cloud Firewalls.

Approach

A controlled path from requirements to handover

Architecture, migration, and ongoing operations are decided separately and documented before implementation.

  1. 01

    Clarify requirements

    Record workloads, dependencies, availability, and cost constraints

  2. 02

    Design target state

    Combine compute, networking, storage, backup, and access

  3. 03

    Build and test

    Provision infrastructure and validate migration or commissioning

  4. 04

    Handover or operate

    Documented handover to your team or transition into Managed Operations

What the project delivers

  • Evaluated selection of Cloud, dedicated, or a combined architecture
  • Sizing and cost assumptions with documented growth reserves
  • Architecture diagram covering compute, networking, storage, and external dependencies
  • Access, security, backup, and recovery design according to the agreed scope
  • Automation, configuration, and technical documentation for handover
  • Migration, cutover, and rollback plan where an existing system is moved

Migration

Migrate existing systems to Hetzner with control

A migration is more than copying virtual machines. Data consistency, external dependencies, cutover windows, and rollback paths are planned together.

Estate and dependencies

Record applications, databases, DNS, certificates, access, integrations, and current operating procedures.

Target environment and testing

Build infrastructure reproducibly, perform a test data transfer, and validate function, performance, and recovery.

Synchronisation and cutover

Transfer remaining data, switch over in an agreed window, and keep a viable rollback path available.

Acceptance and handover

Document the result, verify monitoring and backups, and hand the platform to your team or Managed Operations.

Managed Operations

Already running Hetzner servers and looking for ongoing operations?

For existing root and cloud servers, we offer a separate operations service covering patching, hardening, backup management, monitoring, and agreed incident response.

Frequently asked questions about Hetzner projects

Platform selection, networking, migration, and ongoing operations

Architecture and platform selection

Migration and engagement

More questions? We are happy to help!

Knowledge

More about Hetzner

Related tutorials & guides

Reviews & projects

Client feedback and projects worldwide

WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbH
View project

International

Built in Germany's Ruhr Valley. Running worldwide.

WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.

Selected projects

Read client reviews

  • Secure your Proxmox & backup setup
  • Modernize your infrastructure - sovereign
  • Plan a sovereign open-source stack
  • Integrate a local AI solution
  • Modernize your legacy software
  • Cut cloud cost - up to −81%
  • Build a high-availability Proxmox cluster
  • Virtualize with Managed Proxmox
  • Design an open-source AI architecture
  • Get collaboration fully managed
  • Ship your prototype to production
  • Connect sites and clusters securely

Hetzner consulting and delivery

Request a technical assessment of your Hetzner project

Name the workloads, data, and required operating model. We assess cloud, dedicated servers, networking, migration, and subsequent operations.

  • Straight with Timo and Robin - no sales team, no pitch
  • An honest take, including when we are not the right fit
  • Concrete next steps for infrastructure, software or AI

No risk: worst case, you leave with a clearer understanding of your project than before.

WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
Timo and Robin, founders of WZ-IT

Which Hetzner service do you need?

Choose the appropriate starting point or simply describe the situation.

We usually respond within one business day. Please do not submit credentials.

WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH