The problem with Hetzner's firewall service is it nukes network performance especially on ipv6.
It also killed my docker networking, so portainer stopped working.