Creating a Kubernetes Cluster on Hetzner Cloud with Hetzner CCM, Rancher, Traefik and Cloudflare

is it correct that you can only reach the load balancer from the outside via the public IP ? The 3 servers (1Server -2Worker) communicate exclusively within the private network ans has no external ip ?