This setup isolates guest VMs on a private bridge, letting the gateway VM handle all IPv4 traffic. In this guide, we use an ipvtap interface to work around Hetzners MAC‑address filtering, because the ...