partially related - oracle cloud with ubuntu was messing up iptables and some other configs. debian and ubuntu on amazon lightsail and digital ocean run fine. One way to avoid oracle shenanigans is to encrypt the machine completely