← Blog

How to Install WireGuard on a VPS

A VPS provides a public address and datacenter connection for a personal VPN. The installation is short; routing, firewall ownership, and private-key handling are the important parts.

Choose a suitable VPS

Select Linux, public IPv4, UDP support, enough monthly bandwidth, and a region near the devices that will connect.

Install the base system

sudo apt update
sudo apt full-upgrade
sudo apt install wireguard
Use SSH keys where possible and keep the provider recovery console available.

Create the server interface

Set the server to 10.8.0.1/24 on UDP 51820. Add each device as a peer with a unique /32 address. The server needs each client public key, never a client private key.

Enable internet routing

Turn on IPv4 forwarding, add POSTROUTING MASQUERADE on the public interface, start wg-quick@wg0, and reboot once to confirm persistence.

Quick checklist

  • The VPS has public IPv4 and UDP access.
  • SSH recovery access is preserved.
  • Each peer has a unique IP.
  • Reboot persistence and outbound routing are verified.

This guide focuses on practical self-hosting. See the complete WireGuard server guide for the full setup. Tired of maintaining the server yourself? ZeroBlock handles the VPN infrastructure so you can connect without managing a VPS.

Download APK See pricing