How to Make a VPN?

Step 1: Rent a VPS (Virtual Private Server)

Choose a VPS provider: DigitalOcean, Linode, Vultr, Hetzner, or AWS Lightsail. Select a location for your VPN server (choose a country with good privacy laws if possible). Basic plan ($5-10/month) is sufficient for personal use. Recommended OS: Ubuntu 22.04 LTS or Debian 12.

Step 2: Connect to your VPS via SSH

Open terminal (Linux/Mac) or PowerShell (Windows). Connect using: ssh root@your-server-ip (or the username provided by your VPS provider).

Step 3: Update system and install WireGuard

Run: apt update && apt upgrade -y then apt install wireguard -y

Step 4: Generate server keys

Run: cd /etc/wireguard then wg genkey | tee server_private.key | wg pubkey > server_public.key

Step 5: Create WireGuard server configuration

Create file /etc/wireguard/wg0.conf with:

[Interface]
PrivateKey = [your server private key]
Address = 10.0.0.1/24
ListenPort = 51820
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

[Peer]
PublicKey = [client public key]
AllowedIPs = 10.0.0.2/32

Step 6: Enable IP forwarding and start WireGuard

Enable IP forwarding: sysctl -w net.ipv4.ip_forward=1 and make permanent in /etc/sysctl.conf. Start WireGuard: systemctl enable wg-quick@wg0 && systemctl start wg-quick@wg0

Step 7: Generate client configuration

On your local machine, generate a key pair: wg genkey | tee client_private.key | wg pubkey > client_public.key. Create a client config file and add the client's public key to the server config.