HELPER VPS

WireGuard VPS hosting: a VPN you set up yourself

  • Installed on Ubuntu with apt and wg-quick
  • Public IPv4 and IPv6 addresses and root access
  • Choose from 40 cities in 31 countries

The HELPER VPS WireGuard VPS is a Linux cloud server where you run the light, fast VPN protocol WireGuard yourself, billed by invoice from $25.00 per month. Choose Ubuntu (or the Docker app image) when you create the server, connect over SSH, install wireguard with apt and turn it on with wg-quick, and your VPN server runs on UDP port 51820.

    What is WireGuard?

    WireGuard is a modern VPN protocol built into the Linux kernel. Its code is short and simple, so it is easy to review, and it uses modern cryptography such as Curve25519, ChaCha20 and Poly1305 for fast, light connections. Server and devices register each other's public keys, so a few lines in a config file create a secure tunnel.

    WireGuard communicates over a single UDP port (usually 51820), and the connection carries on smoothly as your phone switches between Wi-Fi and mobile data. Official apps exist for Windows, macOS, iOS, Android and Linux, so just load the config file or QR code created on the server onto a device to start using the VPN.

    What can I do with a WireGuard VPS?

    One self-hosted WireGuard server covers everything from personal security to connecting office networks.

    How do I buy a WireGuard server?

    From payment to your first connection takes three steps.

    1. Step 1. Choose a city and plan

      Pay with USDT, choose the city you want your IP to be in, and start with a small plan.

    2. Step 2. Create with the Ubuntu image

      Choose Ubuntu 24.04 LTS as the image to install right away; the same commands also work on a server created with the Docker app image.

    3. Step 3. Connect over SSH and configure

      Connect over SSH as root, run the commands below, and register your device keys as [Peer] entries to connect the VPN.

    How do I install WireGuard?

    Connect over SSH to your Ubuntu server and run the commands below in order. They create the server keys, set up the wg0 interface with the private address 10.8.0.1 and UDP port 51820, turn on packet forwarding and start the wg-quick service. Each device creates its own keys and is registered like sudo wg set wg0 peer DEVICE_PUBLIC_KEY allowed-ips 10.8.0.2/32; if you use a server firewall, open UDP port 51820.

    Terminal
    sudo apt update
sudo apt install -y wireguard
sudo bash -c 'umask 077; wg genkey > /etc/wireguard/server.key; wg pubkey < /etc/wireguard/server.key > /etc/wireguard/server.pub'
NIC=$(ip -o -4 route show to default | awk '{print $5}')
sudo tee /etc/wireguard/wg0.conf > /dev/null <<EOF
[Interface]
Address = 10.8.0.1/24
ListenPort = 51820
PrivateKey = $(sudo cat /etc/wireguard/server.key)
PostUp = iptables -I FORWARD -i %i -j ACCEPT; iptables -I FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o $NIC -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o $NIC -j MASQUERADE
EOF
sudo chmod 600 /etc/wireguard/wg0.conf
echo 'net.ipv4.ip_forward=1' | sudo tee /etc/sysctl.d/99-wireguard.conf
sudo sysctl --system
sudo systemctl enable --now wg-quick@wg0
sudo wg show

    Why install WireGuard on your own VPS?

    Run your own WireGuard VPS and you decide how connections work and what is logged.

    Operating systems you can install WireGuard on

    WireGuard works on HELPER VPS's various Linux images and the Docker app image.

    Place your server close to your users

    Create WireGuard servers at the same price anywhere in 40 cities across 31 countries.

    Which city should I choose for a WireGuard VPS?

    The location of your VPN server becomes the location of the IP you use on the internet. To use a service in a particular country with that country's IP, choose a city there; if connection speed comes first, choose a city close to where you are. HELPER VPS lets you create servers in 40 cities across the Americas, Europe, the Middle East, Africa and Asia Pacific with the same plans and prices.

    If you need several locations, place a small server in each city and load several config files on your device to switch on the one you need. You can create up to 10 servers per account, which makes it easy to manage WireGuard servers in different regions from one account. Each server just needs its own keys and private address range.

    Is self-hosting WireGuard difficult?

    WireGuard has few settings, so it suits people setting up their first VPN server too. After starting the server with the commands above, create a key on your device with wg genkey; on the server, add the device's public key and a private address such as 10.8.0.2, and on the device, add the server's public key and the address SERVER_IP:51820 to complete the connection. For phones, turn the config file into a QR code with qrencode and scan it in the app for an even faster setup.

    If you would rather manage devices in a web interface, you can run a management tool such as wg-easy as a container on a Docker app image server. Either way, use the VPN for your own security and remote access; leaving it open for anyone like an open proxy is against our usage rules, so please give each device its own key.

    WireGuard hosting FAQ

    Common questions when choosing and installing a WireGuard VPS.

    Is WireGuard installed with one click on a WireGuard VPS?

    Create a server with Ubuntu (or the Docker app image), then run an apt install and a few setup commands over SSH. Paste the commands above as they are and key generation, wg0 setup, packet forwarding and service start are all done at once.

    Which port does WireGuard use?

    By default it uses a single port, UDP 51820. If you turned on a server firewall (such as ufw), open it with sudo ufw allow 51820/udp; to use another port, change the ListenPort value in wg0.conf.

    Is the smallest plan enough?

    Yes. WireGuard runs lightly inside the Linux kernel, so even a 6 vCPU, 12 GB plan comfortably connects several devices for you and your family. For many users or heavy traffic, choose a plan with more included traffic.

    How many devices can I connect?

    Give each device its own key and private address and register it as a [Peer]; a 10.8.0.0/24 range lets you register more than 250 devices. The price stays the server plan price no matter how many devices.

    How do I connect from my phone?

    Install the official WireGuard app for iOS or Android, then import the device config file created on the server or scan a QR code made with qrencode to connect right away.

    Can I use the VPN over IPv6?

    Yes, every server comes with a public IPv6 address. Add an IPv6 private range to Address in wg0.conf and turn on net.ipv6.conf.all.forwarding=1, and IPv6 traffic passes through the tunnel too.

    Does it work on a Docker app image server?

    Yes. The Docker app image is also built on Ubuntu 24.04, so it installs with the same apt commands. The setup above puts the FORWARD allow rules first to account for the forwarding rules Docker changes.

    Can I manage it in a web interface?

    Run a WireGuard management tool such as wg-easy as a container on a Docker app image server, and you can add devices and get QR codes in your browser. We recommend protecting the management interface with a password and making it reachable only from your IP.

    Does the VPN server's IP change?

    As long as you do not delete the server, it keeps the same public IPv4 and IPv6 addresses. Even if you reinstall the operating system, the addresses stay as long as the server does, so you do not need to change your device settings.

    Can I make it public for anyone to use?

    Please run the VPN by handing out keys to your own and your team's devices. Leaving it open for anyone like an open proxy, or using it for spam, attacks or scanning, is against our usage rules.

    How do I pay for a WireGuard server?

    Pay the invoice for your chosen period when you create the server and it starts right away. Pay the renewal invoice before the period ends to keep your server running.

    WireGuard is an open source project created by Jason A. Donenfeld, and the rights to the WireGuard name and logo belong to their owner. Installing and updating WireGuard, key management and support for connecting devices are your responsibility. WireGuard has no extra cost, and the server price is exactly the price of the plan you choose.

    WireGuard server guides

    Good things to do first after you get your server.