HACKER Q&A
📣 shivajikobardan

Deploying WireGuard on VPS to bypass censorship?


Since government just banned facebook, youtube, instagram, reddit, discord among many others, I need a VPN for me and my family. The budget is not fixed as of yet but I would prefer it remain under 10 bucks.

I just heard that vpn server can be misused and since they are shared among many users. And that cause your applications to get flagged and be unusable.

That has led me to wanting a private virtual server and hosting a vpn server over it.

What do you think? Is this recommended?


  👤 Centrino Accepted Answer ✓
It works. Just make sure you install and configure wireguard correctly on the VPS and on the client computers. Make sure IP forwarding is enabled on the VPS. That should suffice to have your personal VPN running.

Some censorship-heavy countries are blocking Wireguard though. And if VPN use is prohibited by law in your country, your use of Wireguard can be detected if they want to.


👤 jere_id
Think about the risks: you’ll need to install, configure, update, and secure the server yourself. It will be a single point of failure, and the new VPS IP can still be blocked by some platforms (I see you Red*it). You must trust the VPS provider or choose a privacy‑friendly region, since the host can see metadata and some providers don’t allow tunneling. if you can afford to do this then yes sure.

👤 tears-in-rain
That depends on how strictly is censor.

On public VPN providers, "double hop" isn't working anymore. And explotation of misconfigured virtual network interfaces.

VPN servers becomes compromised. Important part of creation of own server is traffick obfuscation and reshaping.

Providers ASN stops being clean, they "mixing" IPs with shared pools of other ASN.

Also, goverment starts exploit VPN providers to take control over traffick, they're reroute traffick over their own servers with DPI, and even possible able to do MITM.

Important part to check DNS leakage, and trace IP chain to VPN provider.

And that's, only half, you're breached only inner perimeter. Now you should breach outer perimeter, that ban you by ASN, because of your government actions.


👤 shivajikobardan
Fck government has throttled (likely) all these vpn selling sites.

👤 Bender
Before going through the effort of setting up a VPN, first test whichever cheap VPS provider you choose using an SSH Socks proxy. There are articles showing how to use your SSH connection as a Socks proxy for your browser. Once you find a VPS node that is not blocked then go through the setup of configuring a VPN so all your other devices can use it. I only suggest this as I am lazy and projecting my laziness on others. Try to build a list of VPS providers that charge by the minute to avoid wasting money on providers that are blocked.

In my experience the cheaper the VPS provider the more likely everyone is blocking it due to the phrase, "And this is why we can't have nice things." from others abusing it.