English
Español
Português
Français
Română
Türkçe
Русский
فارسیWireGuard VPN on your own VPS
A VPN on your own server means you are the only user of its address and nobody else keeps the logs.
WireGuard is a fast, simple VPN that runs in the Linux kernel. On your own server it gives you a private exit address that nobody else shares. Bulletproof.to gives you a KVM VPS with a dedicated IPv4 in Vilnius or Tehran from €14.99 a month, with no IP or traffic logs on our side, paid in crypto and without ID.
What it needs
- Memory
- 2 GB RAM or more
- Disk
- 20 GB or more
- System
- Debian 13
- Smallest plan
- Iron, €14.99 / mo
WireGuard needs almost nothing, the smallest plan carries a household of devices.
Ports to open
| Port | Used for | Open to |
|---|---|---|
| 51820/udp | WireGuard, the ListenPort in your config | Everyone |
| 22/tcp | SSH | Only you |
Set these in the free firewall in the panel, everything else stays closed.
Install WireGuard
1. Install WireGuard and the tools for NAT
apt install -y wireguard iptables2. Create the server keys
cd /etc/wireguard && umask 077 wg genkey | tee server.key | wg pubkey > server.pub3. Let the server forward traffic
echo 'net.ipv4.ip_forward = 1' > /etc/sysctl.d/99-wireguard.conf sysctl --system4. Write /etc/wireguard/wg0.conf, eth0 being the interface ip route shows for the default route
[Interface] Address = 10.8.0.1/24 ListenPort = 51820 PrivateKey = SERVER_PRIVATE_KEY PostUp = iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE PostDown = iptables -t nat -D POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE5. Start it at boot, then add each device as a peer
systemctl enable --now wg-quick@wg0 wg set wg0 peer CLIENT_PUBLIC_KEY allowed-ips 10.8.0.2/32
Commands from the official WireGuard docs, checked in November 2026. The project may change them, so look there if one fails.
Why run WireGuard here
An address only you use
Your VPN exits through the dedicated IPv4 of your own server, not one shared with thousands of users.
No logs on our side
We keep no IP addresses and capture no traffic. What WireGuard logs on your server is up to you.
Paid without your name
No KYC and crypto payment, so the VPN is not tied to a card in your name.
Two jurisdictions
Vilnius in the EU, Tehran outside EU and US jurisdiction. You pick per server.
Plans that fit
| Plan | vCPU | RAM | NVMe | Port | Per month |
|---|---|---|---|---|---|
| Iron | 1 | 2 GB | 20 GB | 1 Gbps | €14.99 |
| Steel | 2 | 6 GB | 40 GB | 1 Gbps | €22.99 |
| Cobalt | 4 | 8 GB | 60 GB | 2.5 Gbps | €29.99 |
| Chrome | 6 | 12 GB | 80 GB | 2.5 Gbps | €39.99 |
| Titanium | 8 | 16 GB | 100 GB | 5 Gbps | €49.99 |
| Tungsten | 12 | 20 GB | 120 GB | 5 Gbps | €59.99 |
| Carbide | 14 | 24 GB | 140 GB | 10 Gbps | €69.99 |
| Graphene | 16 | 32 GB | 160 GB | 10 Gbps | €79.99 |
Monthly prices. Pay for 3 months and save 5%, or 12 months and save 15%. Upgrade to a bigger plan from the panel any time.
Questions about hosting WireGuard
Which port do I open for WireGuard?
The ListenPort from your config, over UDP only. 51820 is the usual choice, WireGuard has no fixed default.
Why do my devices connect but have no internet?
Forwarding or NAT is missing. Check net.ipv4.ip_forward and the MASQUERADE rule on the right interface.
Is this the same as a VPN service?
No. You run the server yourself and are its only user, so the address is not shared, and you do the setup.
Do you need my ID or name?
No. You sign up with an account number, no email or ID is required, and you pay with Monero, Bitcoin, USDT or Litecoin.
Do you install it for me?
No, you get a clean server with full root access and install it yourself with the steps on this page. Support helps with the server, not with the app.
What we ask for at sign-up, and what we never collect, is on the No KYC VPS page.