WireGuard · ChaCha20 · kernel space

WireGuard VPN

WireGuard access on our gateways in Germany: every device gets its own key, you decide per device whether all traffic or only your networks go through the tunnel, and you link private networks site-to-site. You reach the internet via the gateway’s IPv4.

ChaCha20-Poly1305 encryption 5 to 512 devices per access 100 Mbit/s to 2.5 Gbit/s, upgradable Unlimited traffic, fair daily limit

Plans & pricing

Term of 1, 6, 12 or 24 months, extra speed and devices can be added at any time.

Coming Soon

What makes this system stand out

Modern cryptography

ChaCha20-Poly1305, Curve25519 and BLAKE2s – no cipher zoo, no legacy fallbacks. Every device has its own key pair and can be revoked on its own.

Full or split tunnel per device

For each device you decide whether all traffic goes through the tunnel (0.0.0.0/0) or only the networks you enter.

Site-to-site with private networks

Private networks behind a device, such as 192.168.10.0/24 at a site, are routed through the gateway to your other devices. Other customers’ networks stay separate.

Unlimited traffic, fair daily limit

No monthly volume. If you transfer more than your plan’s limit within 24 hours, you continue at 10 % of the speed – released automatically once the last 24 hours drop below 90 % of the limit.

Every platform

Config file or QR code for Windows, macOS, Linux, iOS and Android. Routers such as OPNsense, pfSense and MikroTik take the same file.

All in your client area

Add devices, set networks, port and DNS, download configs and keep an eye on the last 24 hours of usage.

How the setup works

  1. Choose a plan

    Pick plan and term, add more speed or devices right away if you like.

  2. Access gets set up

    After payment you automatically get your own tunnel range on the gateway.

  3. Add devices

    In the client area add an access per device, choose full or split tunnel, download the file or scan the QR code.

  4. Connect

    Start the tunnel – connection and usage are shown on your service.

Typical use cases

On the road & home office

Encrypted from hotel, train or café – or, with a split tunnel, only to the company servers.

Linking sites

Add the router at a site as a device, enter its private network – office, warehouse and home office can reach each other.

Secure server management

Expose SSH, databases and panels through the tunnel only and close them off publicly.

Securing public Wi-Fi

With a full tunnel your traffic leaves the foreign Wi-Fi only encrypted and reaches the internet through our gateway in Germany.

Technical specifications

Protocol
WireGuard (UDP)
Encryption
ChaCha20-Poly1305
Key exchange
Curve25519 (ECDH)
Devices
5 to 512 per plan, more can be added
Speed
100 Mbit/s to 2.5 Gbit/s, upgradable
Traffic
Unlimited; above the 24 h limit 10 % of the speed
Routing per device
Full tunnel (0.0.0.0/0) or your own networks
Site-to-site
Private networks behind your devices
Internet exit
Via the gateway’s IPv4
IP in the tunnel
IPv4 (no IPv6)
Port and DNS
Freely selectable
Location
Germany
Management
Right in your client area

Frequently asked questions

How is WireGuard different from OpenVPN?
WireGuard consists of far less code, runs in kernel space and uses a fixed, modern cipher suite. The result: faster connection setup, higher throughput and a smaller attack surface.
How many devices can I connect?
As many as your plan includes – from 5 (Solo) to 512 (Enterprise). You can add more devices to every plan. Each device gets its own key pair.
What is the difference between full and split tunnel?
With a full tunnel (0.0.0.0/0) all traffic goes through the gateway and you appear on the internet with its IPv4. With a split tunnel only the networks you enter go through the tunnel; everything else uses your own connection. You set this per device.
Do I get my own IP address?
No. You reach the internet via the gateway’s IPv4, which several customers share. We do not route public networks, and there is no IPv6 in the tunnel. For your own addresses a VPS is the right product.
Is traffic throttled?
Only if you transfer more than your plan’s limit within 24 hours. Your access then continues at 10 % of the speed until the last 24 hours drop below 90 % of the limit – this happens automatically. Booking more speed also raises the limit.
Can I increase the speed later?
Yes, in every plan in steps up to 2.5 Gbit/s; the surcharge is monthly and can be changed again at any time. Switching to a larger plan works too, and your tunnel range grows with it.
Can I link sites?
Yes. On a device, such as the router at a site, enter the private networks behind it. The gateway routes them to your other devices. Other customers’ networks are separate; networks overlapping your tunnel range are rejected.

Location

Maincubes & Firstcolo, Frankfurt am Main

DDoS protection

DDoS-Schutz inklusive (Layer 4)

Network

Eigenes AS, redundante Uplinks, bis 5 Gbit/s (L)

Processor

AMD EPYC 7713 / 7763 / 7543 (WireGuard-Endpoints als eigene Systeme)

More about our tech

A good fit if you …

… want to browse safely on the go

On hotel or café Wi-Fi your traffic runs encrypted through our network.

… want to link sites

Site-to-site: office, warehouse and home office reach each other via their private networks.

… want to connect many devices

5 to 512 devices per plan, managed right in the client area.

How to get started

  1. Pick a sizeBy number of devices and bandwidth.
  2. PayThe endpoint is set up automatically.
  3. Add devicesCreate a device in the client area, scan the QR code or download the config – done.

Good to know before you order

  • You reach the internet via the gateway IPv4 (shared); there is no own IP and no IPv6 in the tunnel.
  • Traffic is unlimited; above your plan’s daily limit the access runs at 10 % of the speed until the last 24 hours drop below 90 % of the limit.
  • You set full or split tunnel per device in the client area.

Questions about WireGuard VPN

Does it work on my phone?
Yes, with the official WireGuard app for iOS and Android. Just scan the QR code.
Can I change the port?
Yes, the port is freely selectable – handy in networks that block standard ports.

Not sure which plan fits? Open a ticket and we will tell you honestly what you need – even if that is a smaller plan. Ask a question

Technology of this line

Ready-made WireGuard endpoints on our own network.

Processor
AMD Ryzen 9 9950X
Devices
5 to 512 per plan, more can be added
Storage
NVMe
Network
AS201687, 100 Mbit/s to 2.5 Gbit/s
Platform
WireGuard (UDP), ChaCha20-Poly1305

Included

  • Management in the client area
  • Full or split tunnel per device
  • Site-to-site with private networks
  • Port and DNS freely selectable
  • Unlimited traffic, fair daily limit
  • DDoS protection

Runs on

Ryzen node

Internet access via the gateway IPv4, IPv4 only inside the tunnel. More speed and devices as options.

Hardware and network in detail

Spec sheet per node

What is inside the servers your services run on – read directly from the nodes. How much of it is yours is defined by your plan.

Ryzen 01

in operation
Processor
AMD Ryzen 9 9950X16 Kerne / 32 Threads · bis 5,7 GHz
Memory
192 GB DDR5
System
2 × 1 TB NVMe · RAID 1
Data
Ceph-Cluster · 20 TB NVMe · 3-fach repliziert
Network
2 × 10 Gbit/s · 20 Gbit/s gebündelt
Runs here
VDS · WireGuard · Ryzen-Option für Gameserver und RS

EPYC 01

being set up
Processor
AMD EPYC 776364 Kerne / 128 Threads · bis 3,5 GHz
Memory
768 GB DDR4-3200
System
2 × 1 TB NVMe · RAID 1
Data
4 × 3,84 TB NVMe · RAID 10
Network
2 × 10 Gbit/s · 20 Gbit/s gebündelt
Runs here
Pico · VPS · RS · Webspace