OpenVPN server hosting
on a VPS.
OpenVPN has been the workhorse of self-hosted VPN for two decades. Universal client support, runs over TCP or UDP, plays nicely with deep-packet inspection. Pair it with a Pulsar67 VPS for a tunnel you fully control. From $3/mo.
The VPN that runs anywhere.
WireGuard is newer, but OpenVPN still wins on compatibility. Old routers, locked-down corporate firewalls, and environments where TCP mode needs to look like HTTPS are OpenVPN territory.
Every operating system has a client. Every consumer router supports it. Every cloud platform speaks it. If you need a VPN that "just works" for non-technical users, OpenVPN is still the answer.
Universal clients
Windows, macOS, Linux, iOS, Android, OpenWrt, pfSense, Mikrotik. If it does VPN, it does OpenVPN.
TCP or UDP
Run on UDP/1194 for speed or TCP/443 to slip through restrictive firewalls that only allow HTTPS-looking traffic.
Cert-based auth
Easy-RSA does the PKI lift. Issue, revoke, rotate. Per-user certificates without per-user pain.
Battle-tested
Audited, patched, deployed since 2001. Conservative defaults, well-known knobs, well-understood failure modes.
Sizing for your client count.
OpenVPN is heavier than WireGuard but still light. CPU only matters when you have many simultaneous connections.
- 1 vCPU
- 1 GB RAM
- 1 TB Bandwidth
- Phones, laptop, tablet - fine
- 1 vCPU
- 2 GB RAM
- 2 TB Bandwidth
- Headroom for streaming on the tunnel
- 4 vCPU
- 8 GB RAM
- 8 TB Bandwidth
- Multi-thread OpenVPN with mtproxy
A working tunnel in fifteen minutes.
Or use angristan/openvpn-install for a quick script-based setup.
- A Pulsar67 VPS (Pulsar Nano for personal, Starter for households)
- Ubuntu 22.04 or Debian 12 (we ship both as stock images)
- The openvpn + easy-rsa packages:
apt install openvpn easy-rsa - A built CA and server cert (Easy-RSA walks you through it)
- UDP/1194 (or TCP/443 for restrictive networks) open in the firewall
- IPv4 forwarding + iptables NAT for the tun0 subnet
- Optional:
easy-rsain a tmpfs so private keys live in RAM
A clean exit IP, no shady neighbors.
Your IP, not shared
Dedicated IPv4. You won't get blacklisted because someone scraped Wikipedia from your "neighbor."
Snapshot before changes
Migrating from a paid provider? Snapshot the working config before touching anything.
Engineer support
If the tunnel won't come up, we'll help you read the OpenVPN log and narrow down the route, firewall, or client profile issue.
Pay in crypto
BTC and ETH accepted for customers who prefer privacy-friendly billing options.
Ready to host your tunnel?
One VPS, one config file, one .ovpn for every device. Done before lunch.