Primary IP's assignee_type property now returns unassigned if the IP is not assigned (assignee_id is null). This change is required to eventually allow assigning Primary IPs to other resources. assignee_type assignee_id Previously server null As of 01 Aug. 2026 unassigned null
As announced on 30 Jun. 2026 the EC2 compatible routes were now removed from Server Metadata.
The image opensuse-15 (IDs 204457491 (x86) & 204457492 (arm)) is no longer available when creating new servers.
When updating the PTR record (reverse DNS) for a Primary IP, Floating IP, Server, or Load Balancer, the value of dns_ptr is no longer optional and must be provided starting on 30 September 2026. For the endpoints below, the dns_ptr value must be set to the desired domain name, or to null to reset it. Leaving the value empty will no longer reset the pointer. Instead, the request will fail. POST /se…
When updating the TTL of an RRSet, the value of ttl is no longer optional and must be provided starting on 30 September 2026. For the endpoint below, the ttl value must be set to the desired TTL, or to null to use the Zone's default TTL. Leaving the value empty will cause the request to fail. POST /zones/{id_or_name}/rrsets/{rr_name}/{rr_type}/actions/change_ttl
We removed the datacenter property in the request body and response of Servers and Primary IPs as announced on 16 December 2025.
Until now Server Metadata also responded to EC2-compatible routes besides the officially documented /hetzner/v1/*. This behaviour is now deprecated and will be removed after 1 Aug. 2026. This includes the following schemas: /2009-04-04/meta-data /2009-04-04/meta-data/{key} /2009-04-04/user-data /latest/meta-data /latest/meta-data/{key} /latest/user-data
The image fedora-42 (IDs 232895138 (x86) & 232895264 (arm)) is no longer available when creating new servers.
After making the Load Balancer idle timeout values for HTTP/HTTPS services configurable via the API in April, you can now also use the Console to change the previously fixed timeout of 50 seconds for each service separately.
To communicate deprecations more clearly to API users and align with server types, we have added the deprecation field to all endpoints that return "Load Balancer Types". The field describes if, when, and how the resource was deprecated. If this field is set to null, the resource is not deprecated. If it has a value, it is considered deprecated. Learn more about the field in our API docs. This new…
The response field deprecated of all endpoints that return "Load Balancer Types" is deprecated. Please use the new field deprecation instead.
The API endpoints GET /v1/datacenters and GET /v1/datacenters/{id} are now deprecated and will be removed after 1 Oct. 2026. After this date, requests to these endpoints will return HTTP 410 Gone.
Two new Rapid Deploy Images are now available. The Ubuntu 26.04 image can be used as ubuntu-26.04 (IDs 387894169 for x86 and 387894171 for arm). Also the latest Fedora 44 release can be deployed to all Cloud servers as fedora-44 (IDs 387893188 (x86) & 387893189 (arm)).
Images using cloud-init 25.3 or later support auto-configuration of Private Networks via cloud-init. Currently this is available in Ubuntu 22.04, 24.04 and 26.04 as well as Fedora 44. For these images, the configuration of Private Networks has been removed from hc-utils. If you are using an older version of hc-utils, you can find the latest hc-utils for these images in our documentation.
Deleting assigned Primary IPs & Floating IPs is no longer be possible. You need to unassign the Primary IP or the Floating IP before being able to delete it. You will see the error code must_be_unassigned when you try to delete an assigned Primary or Floating IP.
All GET /<resource>/{id}/actions/{action_id} operations are now deprecated, without planned removal: GET /certificates/{id}/actions/{action_id} GET /firewalls/{id}/actions/{action_id} GET /floating_ips/{id}/actions/{action_id} GET /images/{id}/actions/{action_id} GET /load_balancers/{id}/actions/{action_id} GET /networks/{id}/actions/{action_id} GET /primary_ips/{id}/actions/{action_id} GET /serve…
Load Balancers now have configurable idle timeout values for HTTP/HTTPS services. A new property, http.timeout_idle, has been added to the Load Balancer HTTP Service schema. You can change the value using the POST /load_balancers/{id}/actions/update_service endpoint. The new property allows you to adjust the previously fixed timeout of 50 seconds to a value between 30 and 300 seconds. The connecti…
The image opensuse-15 (IDs 204457491 (x86) & 204457492 (arm)) is deprecated and will no longer be available when creating new servers after 30 July 2026.
The property assignee_type of the operation POST /v1/primary_ips is now optional. Primary IPs created without assignee_type return assignee_type = server until 1 August 2026, after this date, its value will be unassigned.
As of 1 Aug. 2026, Primary IP's assignee_type property will return unassigned if the IP is not assigned (assignee_id is null). This change is required to eventually allow assigning Primary IPs to other resources. assignee_type assignee_id Previously server null As of 01 Aug. 2026 unassigned null
Load Balancers no longer offer SHA-1-based signature algorithms during TLS handshakes. Only modern SHA-256, SHA-384, and SHA-512 signature algorithms are now supported. The following signature algorithms have been removed: Algorithm Removed signature algorithms RSA RSA+SHA1 ECDSA ECDSA+SHA1 The following signature algorithms continue to be supported: Algorithm Supported signature algorithms RSA (P…
Leading whitespace characters in newly created SSH Keys now lead to a validation error. For a short period we trimmed leading and trailing whitespace characters, but that change has been reverted. In the API, this affects the field public_key of the SSH Key creation endpoint POST /ssh_keys.
Cloud server and label selector targets of a Load Balancer are automatically removed as soon as the target server is removed. However, targets for dedicated servers must be manually removed after a server is canceled. Otherwise, they remain in an invalid state. We will remove these invalid targets from the Load Balancers on Monday, 20 April 2026. This ensures accurate health reporting and prevents…
The following Server Types response fields are now available: server_types.locations.available server_types.locations.recommended The following Data Centers response fields are now deprecated: datacenter.server_types datacenter.server_types.supported datacenter.server_types.available datacenter.server_types.available_for_migration recommendation Starting on 1 October 2026, the fields will be dropp…
The image fedora-42 (IDs 232895138 (x86) & 232895264 (arm)) is deprecated and will no longer be available when creating new servers after 30 June 2026.
Load Balancers now support key agreement using post-quantum hybrid ECDHE-MLKEM key agreement for TLS 1.3. Here's how this change will affect your Load Balancers: New Load Balancers: This change applies immediately Existing Load Balancers: This change will be rolled out in the coming weeks Please note that this change only applies to TLS 1.3 connections to services with the Load Balancer protocol h…
We have limited the following aspects of Certificates: Maximum size of private keys: 5 kB (5,000 bytes) Maximum length of certificate chains: 5 certificates Maximum size of certificate chains (all certificates): 30 kB (30,000 bytes) This change does not impact any customers, as all existing certificates already comply with the new requirements. This change allows us to ensure that all certificates…
The image fedora-41 (IDs 199030328 (x86) & 199030407 (arm)) is no longer available when creating new servers.
Deleting assigned Primary IPs & Floating IPs is deprecated and will no longer be possible after 1 May 2026. You need to unassign the Primary IP or the Floating IP before being able to delete it. After 1 May 2026 you will see the error code must_be_unassigned when you try to delete an assigned Primary or Floating IP. If you are using our Terraform Provider or Ansible Collection, please update to a…
So far, the user_data property for cloud-init was only available during Server creation. Now, it is possible to override that field during the Server rebuild process. The new, optional user_data property is: Available for the endpoint: POST /servers/{id}/actions/rebuild Functionally identical to the already existing user_data property available for the endpoint: POST /servers