Why host WireGuard Server on a VPS?
WireGuard is built on a deliberately small source code (about 4,000 lines), which makes it easier to audit and significantly less exposed to security flaws than its alternatives. By hosting it on a dedicated VPS, you obtain a fixed IP address under your control, throughput close to the server's native bandwidth, and the ability to grant or revoke access at the client's granularity. It is the preferred solution of developers and distributed teams who want to secure their communications without sacrificing performance.
What you can do with WireGuard Server
- Secure the connections of your remote-working team via a private corporate VPN
- Access your internal network (servers, databases, internal services) from anywhere in an encrypted way
- Bypass network restrictions and access your resources hosted in a specific region
- Create a secure tunnel to protect communications between several VPSs or cloud environments
- Replace a commercial VPN with a self-hosted, log-free solution with no monthly subscription
- Connect mobile devices (Android, iOS) or workstations (Linux, Windows, macOS) via the official WireGuard clients
Install WireGuard Server on your ServOrbit VPS
Order a ServOrbit Cloud VPS
Go to /vps-cloud and choose the plan suited to your usage. For standard WireGuard usage (up to around twenty simultaneous clients), a VPS with 1 vCPU and 1 GB of RAM is more than enough. Select the Ubuntu 22.04 LTS distribution for optimal compatibility, finalize the order and wait for the activation email — your VPS is ready in under a minute.
Access the Marketplace in the client area
Log in to your ServOrbit client area, open the page of your newly created VPS, then navigate to the Marketplace tab. There you will find the catalog of applications available for 1-click installation, organized by category. Select the Security category to find WireGuard Server more quickly.
Start the WireGuard Server installation
Click the WireGuard Server card, check the summary (installed version, default port used: UDP 51820), then confirm the installation. The deployment script automatically configures WireGuard, generates a server key pair and opens port 51820/UDP in the firewall. The operation usually takes less than two minutes.
Retrieve your credentials and access the management interface
Once the installation is complete, the client area displays the access URL for the web management interface (WireGuard UI, accessible by default on port 51821 over HTTP or HTTPS depending on the configuration). The initial administrator credentials (username and password) are provided to you on this same confirmation screen — keep them and change the password on your first connection.
Add your first client and test the connection
In the WireGuard UI interface, click New client, enter a name (for example your first name or the device name), then download the generated configuration file or scan the displayed QR code. Import this file into the official WireGuard application (available on Android, iOS, Windows, macOS and Linux), enable the tunnel, then check that your public IP indeed matches that of your ServOrbit VPS.
By default, WireGuard listens on UDP port 51820. If you are in a network environment that blocks non-standard UDP, consider changing this port to 443/UDP or 53/UDP, two rarely filtered ports. Change the ListenPort value in the server configuration (/etc/wireguard/wg0.conf) and update the firewall rule accordingly before restarting the service with systemctl restart wg-quick@wg0. Also remember to enable IPv4 forwarding (net.ipv4.ip_forward=1 in /etc/sysctl.conf) if it is not already done by the installation script — it is essential to route your clients' traffic to the Internet.
The official documentation
For advanced configuration, tool-specific options and version changes, refer to the official WireGuard documentation. This guide covers going live on a ServOrbit VPS; the vendor documentation remains the reference for fine-tuning.
