Your own WireGuard VPN on unmetered bare-metal.
A private, fast VPN exit that's yours alone — kernel WireGuard on an unmetered port, your own IP, and a jurisdiction you pick. No shared VPN service reading your traffic, no bandwidth meter, from $20/mo.
Why self-host WireGuard instead of a VPN app.
A commercial VPN is a shared server you have to trust. Self-hosted WireGuard runs on a single-tenant machine you control — no other customers on the exit, no provider policy on what's logged. You hold the keys.
Kernel WireGuard is fast, and the port is unmetered — no throttling once you've used 'your' quota, no per-GB meter. Route everything, all month, at line rate.
Amsterdam or Warsaw for an EU exit, Kyiv for non-EU, Miami for the Americas. Choose where your traffic surfaces and get a stable, dedicated IP that isn't on every VPN blocklist.
Team site-to-site, a private exit for your phone and laptop, or a secure hop to your seedbox and home lab — one small box handles it all, with clients for every platform.
Sized for WireGuard VPN.
Starter / Production / High-load — with capacity in the metrics that matter for this app.
- CPU2 vCore
- RAM4 GB
- Storage40 GB NVMe
- Port1 Gbit/s
- Trafficunmetered
- CPU4 vCore
- RAM8 GB
- Storage80 GB NVMe
- Port10 Gbit/s
- Trafficunmetered
- CPU8 vCore
- RAM16 GB
- Storage160 GB NVMe
- Port25 Gbit/s
- Trafficunmetered
On by default.
Kernel WireGuard configured with a first peer ready, plus wg-easy or a simple config workflow to add devices in seconds.
1–25 Gbit/s at flat pricing — route all your traffic all month with no per-GB meter and no throttle.
A dedicated IPv4 (and IPv6) that's yours alone — cleaner reputation than a shared VPN pool, and it doesn't change under you.
Standard WireGuard configs work with client kill-switches so nothing leaks if the tunnel drops.
Official WireGuard clients for Windows, macOS, Linux, iOS and Android — scan a QR code and you're on.
1.6 Tbit/s of always-on scrubbing keeps your exit reachable under attack.
Self-hosted WireGuard VPN hosting — your own private exit, unmetered
WireGuard is the modern VPN protocol: tiny, fast, and built into the Linux kernel, with clean clients for every platform. Running your own WireGuard server instead of subscribing to a VPN app changes the trust model completely — the exit is a single-tenant machine you control, with your keys and your IP, and no provider deciding what gets logged or throttled.
Hostfory is a natural home for it. The port is unmetered, so unlike a consumer VPN there's no 'fair-use' throttle after a few hundred gigabytes — route everything, all month, at full speed. You get a dedicated static IPv4 and IPv6 that isn't shared with thousands of other users (and isn't already on every blocklist), and you choose where your traffic surfaces: Amsterdam or Warsaw for an EU exit, Kyiv for a non-EU jurisdiction, Miami for the Americas.
One small box covers a lot of ground — a private exit for your phone and laptop, a team site-to-site tunnel, or a secure hop to your seedbox and home lab. It provisions in under an hour with WireGuard installed and a first peer ready; add devices by scanning a QR code.
WireGuard VPN questions, answered.
How is this different from a VPN app like NordVPN?
Is the traffic really unmetered?
Do I get my own IP?
Can I add multiple devices and users?
Which client platforms are supported?
Can I pick where my traffic exits?
How fast is setup?
Pairs with the rest of the fleet.
Deploy WireGuard VPN today.
In-stock configs provision in 1–3 hours. Migration from another host is on us.