Order Debian or Ubuntu
Nano for a personal endpoint. Starter if several people will stay connected at once.
WireGuard
A VPN endpoint you actually control.
Host your own WireGuard endpoint for remote access, site-to-site tunnels, or private browsing. Every plan includes a dedicated IPv4 address.
Why self-host
An endpoint with an address you control.
Personal VPNs, site-to-site tunnels, and road-warrior access all fit a small VPS. Peers connect to a dedicated IPv4, not a shared CGNAT pool.
Dedicated IPv4
One address per VPS, included. DNS and peer configs stay stable for as long as the server does.
Minutes to install
Debian or Ubuntu, then WireGuard from the distro repos. Manage peers with wg-quick or the tooling you already use.
Tampa routes
Southeast US, Caribbean, and Latin America from the live Tampa region. Run MTR from the looking glass before you buy.
Hourly, from prepaid credit
Nano is enough for a personal endpoint. Destroy the VPS and billing stops. Nothing renews behind your back.
How it works
A VPN you can rebuild from a unit file.
Personal use fits Nano. Small teams with several peers usually want Starter for CPU headroom.
Install WireGuard
apt install wireguard, generate keys, and write the interface config. The upstream docs apply as written.
Add peers
Each laptop or phone gets a unique IP on the tunnel subnet. Keep the private keys off the VPS if you can.
Firewall the host
Allow UDP 51820, or whichever port you chose, and nothing else you do not need.
Plan fit
Peer count decides the size.
A road-warrior endpoint is a Nano workload. Teams should start on Starter. Transfer is a 2 TB account pool plus up to 500 GB per server each month, prorated by time provisioned.
LayerOne Nano
Personal endpoint
One or two devices, light browsing, and remote SSH into home or cloud boxes.
- 1 vCPU
- 1 GB RAM
- 20 GB SAS SSD
LayerOne Starter
Small teams
Several peers and a bit more CPU. Transfer is shared from the account pool.
- 1 vCPU
- 2 GB RAM
- 40 GB SAS SSD
LayerOne Pro
Site-to-site and heavier use
Office tunnels, more throughput, and room to run DNS filtering beside WireGuard.
- 4 vCPU
- 8 GB RAM
- 160 GB SAS SSD
Need exact specs and order links?
Get a VPN VPS
FAQ
Frequently asked questions
Straight answers on billing, the platform, and what is included on every plan.
Can I run WireGuard on any plan?
Yes. WireGuard works on all Linux plans with a dedicated IPv4 address.
How many peers can I support?
Peer count depends on plan CPU. Nano works for personal use; Pro fits small teams. Transfer is 2 TB included per account, plus up to 500 GB for each server per UTC calendar month, earned in proportion to time provisioned and shared across the pool.
Is outbound bandwidth metered?
General Compute includes a 2.5 Gbps port. Network Optimized includes a 10 Gbps port. Transfer is a separate account pool: 2 TB included per account, plus up to 500 GB for each server per UTC calendar month, earned in proportion to time provisioned and shared across the pool. Stopped and suspended servers keep earning instance credits; destroying a server stops new credits, with earned transfer retained until the monthly reset. Extra transfer is $3.00/TB per calendar month, whether you add Extra Bandwidth blocks in advance or usage goes beyond the pool. Bought mid-month, blocks are charged for the days remaining.
Can I put a WireGuard endpoint on a private network?
Yes. Attach the VPN VPS to a virtual network so peers on that LAN reach it without a public address, or keep a dedicated IPv4 on the WAN and use the VNet for east-west traffic. The platform does not route between VNets. See Using pfSense with LayerOne if the VPN lives on a firewall appliance.
Ready to deploy a VPS?
Tampa is live. Pick a plan, pick an OS, and the server is online in under a minute.