Kernel WireGuard
KVM runs a full kernel, so WireGuard uses the in-kernel module, not a slower userspace fallback.
WireGuard VPN VPS
Your own WireGuard VPN.
WireGuard is fast, small and built into the Linux kernel. One VPS gives you a private VPN for your phone, your laptop and your home network, under your own control.
Monthly, quarterly (5% off) or yearly (2 months free). Refunds within 72 hours of payment.
Why a VPS for this
One port is enough
WireGuard listens on a single UDP port. Use one from your block and you are done.
Connect your own places
Reach your home server or lab from anywhere, even when your home connection is behind CGNAT.
Get started
- 01
Install WireGuard
On Debian or Ubuntu run
apt install wireguard, then create keys withwg genkey | tee private.key | wg pubkey > public.key. - 02
Write wg0.conf
Set
ListenPortto a UDP port from your block, give the server a private address such as10.8.0.1/24and add a[Peer]for each device. - 03
Enable forwarding
Set
net.ipv4.ip_forward=1in /etc/sysctl.conf and add a masquerade rule if devices should browse through the VPN. - 04
Start it
Run
systemctl enable --now wg-quick@wg0and import the peer config on your phone with the WireGuard app.
Which plan fits
VPS plans
VPS S handles a WireGuard VPN for a household with room to spare. WireGuard uses very little CPU and memory.
Fits this best
VPS S
$1.96/mo
Billed monthly
- 1 vCPU
- 2 GB RAM
- 30 GB NVMe
- Shared IPv4, 20 ports
- IPv6 address
- KVM, full root
Dedicated IPv4: +$3/mo
Create a VPSVPS M
$3.92/mo
Billed monthly
- 2 vCPU
- 4 GB RAM
- 60 GB NVMe
- Shared IPv4, 20 ports
- IPv6 address
- KVM, full root
Dedicated IPv4: +$3/mo
Create a VPSVPS L
$7.84/mo
Billed monthly
- 4 vCPU
- 8 GB RAM
- 120 GB NVMe
- Shared IPv4, 20 ports
- IPv6 address
- KVM, full root
Dedicated IPv4: +$3/mo
Create a VPSVPS XL
$15.68/mo
Billed monthly
- 6 vCPU
- 16 GB RAM
- 200 GB NVMe
- Shared IPv4, 20 ports
- IPv6 address
- KVM, full root
Dedicated IPv4: +$3/mo
Create a VPSShared IPv4 with 20 ports and IPv6 included; dedicated IPv4 +$3/mo
Your VPS is usually ready in minutes. During busy times it may take up to 48 hours to create; you'll get an email the moment it's ready. The same goes for a dedicated IPv4 address.
NAT · IPv6
NAT IPv4 and IPv6, in plain words
How people and programs reach your VPS, and what that means for what you run on it.
IPv4: one shared address, 20 ports of your own
IPv4 addresses are scarce, so several VPSes share one public IPv4 address. Your VPS gets its own block of 20 ports on it. Traffic to those ports goes straight to your VPS. The panel shows your address and your port range.
IPv6: an address that is only yours
Your VPS also has its own public IPv6 address. Every port on it is yours, including 80 and 443, so a website or service can listen on its normal port.
Running a website
Ports 80 and 443 on the shared IPv4 address are not yours. Point your domain's AAAA record at your IPv6 address and put Cloudflare's proxy in front: it accepts IPv4 visitors and passes them to your VPS over IPv6. A tunnel such as Cloudflare Tunnel works too, or add a dedicated IPv4 for $3 a month.
Going out is not limited by the port block
The 20 ports are for incoming connections. Your VPS can reach the internet as usual: updates, APIs, Discord and Git all work without opening anything.
Clients connect to your shared IPv4 address on your chosen UDP port, or to your IPv6 address. Outgoing traffic from the VPN leaves through the VPS's addresses.
Example: SSH on the first port of your block looks like ssh -p 40001 root@203.0.113.10. Your real address and ports are in the panel.
Need a whole IPv4 address of your own? Add a dedicated IPv4 for $3 a month and every port on it is yours.
VPS questions
A personal VPN for your own devices is fine. Running a public or commercial VPN service, or using it for abuse, is against our terms.
No. WireGuard needs one UDP port, and your block has 20 of them. A dedicated IPv4 ($3 a month) is optional.
Yes. Run a WireGuard peer at home that connects out to the VPS, then route your home subnet through the tunnel. This works even behind CGNAT.
Your VPS shares one public IPv4 address with other VPSes. You get your own block of 20 ports on that address, and connections to those ports go straight to your VPS. Other ports on the address belong to other customers. A dedicated IPv4 add-on ($3 a month) gives you a whole address instead.
Yes. Every VPS has its own public IPv6 address, and every port on it is yours, including 80 and 443.
Yes. Shared IPv4 with 20 ports and IPv6 are included in every plan; a dedicated IPv4 address is $3 a month extra, and every port on it is yours.
Your VPS is usually ready in minutes. During busy times it may take up to 48 hours to create; you'll get an email the moment it's ready. A dedicated IPv4 add-on works the same way.
More VPS guides
- Minecraft server VPSYour own stack · VPS L
- Discord bot VPSNo ports needed · VPS S
- Node.js VPSAny Node.js version · VPS S
- Docker VPSNative Docker · VPS M
- Game panel VPSWings runs natively · VPS L
- Cheap VPSNo shortcuts on the machine · VPS S
- Debian VPSStable and lean. A safe default for servers. · VPS S
- Ubuntu VPSThe most tutorials and packages. Easy start. · VPS S
- AlmaLinux VPSEnterprise Linux compatible, long support. · VPS M
- Rocky Linux VPSEnterprise Linux compatible, community run. · VPS M
Related on Enzonic
No lock-in
72-hour refunds
Not what you expected? Ask within 72 hours of paying and get your money back.
Cancel anytime
No contracts. Stop renewing whenever you like; quarterly and yearly terms simply run to their end.
People who answer
Tickets in the panel and a Discord community, run by the same team as the game servers.
Enjoying Enzonic? Share it and earn rewards with the referral program.