People ask us why they'd run their own WireGuard box instead of paying a big VPN brand a few euros a month. The honest answer from the NOC side: when you self-host a WireGuard VPN on a VPS, you stop sharing an exit IP with ten thousand strangers, you sit under a jurisdiction you actually chose, and the "no-logs" promise stops being a marketing line — it becomes a config file you wrote. This post walks through what that setup really looks like, what hardware you need (less than you think), and — because we run networks for a living — where a personal VPN genuinely can't help you.
Why self-host a WireGuard VPN at all
A commercial VPN gives you a shared exit. Hundreds of users leave the internet through the same handful of IPs, which is great for blending in and terrible for anything that trips a reputation filter — you inherit every other user's captchas, blocks, and rate limits. Self-hosting flips that: you get a clean, dedicated IP that only you use, plus root on the box so the tunnel is yours end to end.
WireGuard is the reason this is now trivial. It's a few hundred lines of kernel code, uses modern crypto with no cipher-suite roulette, and reconnects instantly when your laptop hops from Wi-Fi to LTE. On our side we see it as a single UDP flow that barely registers on the CPU graph. That efficiency is exactly why the hardware bar is so low.
EU jurisdiction on our own AS60982
Where your exit lives is a legal question before it's a technical one. NODED.CLOUD is operated by X ZONE IT SRL, a Romanian company, and your exit IP is announced from our own AS60982, connected through IP transit from one upstream carrier. That matters for two reasons. First, an EU-registered operator sits under EU data-protection norms rather than whatever regime a cheap offshore box happens to fall under. Second, because the IP is announced from our own ASN (see our network page), its provenance is transparent — anyone can look up who originates it.
If regulated data is part of your picture, our GDPR-compliant hosting notes are worth a read alongside this — the same EU-jurisdiction argument applies to a VPN exit as to any other workload.
No-logs is a decision you make, not a badge
On a self-hosted box, "no logs" isn't a claim you have to trust — it's the default. WireGuard keeps no connection log of its own; the only records are whatever your OS decides to write. Turn off connection tracking in your syslog, don't run accounting on the interface, and there is simply nothing to hand over, subpoena or not. We don't inspect what runs inside your tunnel — it's your VPS, your keys, your rules. That is the practical meaning of a no-logs VPN on a VPS: you are the only party who could keep a log, and you choose not to.
1 vCPU and 2 GB is genuinely plenty
This is the spec that surprises people. WireGuard's overhead is tiny, so the smallest box we sell handles a personal exit without breaking a sweat. Here's how our KVM VPS tiers line up for this job:
| Tier | Spec | Price | Good for |
|---|---|---|---|
| VPS I | 2 GB / 1 vCPU / 20 GB | EUR 4/mo (EUR 0.0056/hr) | Personal WireGuard exit, a few devices |
| VPS II | 4 GB / 2 vCPU / 40 GB | EUR 6/mo | Family/household, many peers, headroom |
| VPS III | 8 GB / 2 vCPU / 60 GB | EUR 10/mo | VPN plus a self-hosted app or two |
For one person or a couple of devices, VPS I at EUR 4/mo is the box. The CPU won't be your ceiling; even at line rate WireGuard's encryption cost stays low. Because we bill by the hour (EUR 0.0056/hr), you can also spin one up, test it for an evening, and destroy it — you pay for the hours it existed, not a month.
Unmetered bandwidth is the real win
Here's the thing the spec sheet buries: for a VPN, RAM and cores don't matter much, but bandwidth is everything. Every byte you browse, stream, or download goes through the tunnel and out the box, so a metered plan with a transfer cap turns your private VPN into an anxiety machine. All our VPS plans ship unmetered and symmetric — no transfer cap, upload as fast as download, on a port shaped from 100 Mbps (VPS I) to 300 Mbps (VPS VI). That symmetry is what makes it comfortable to route everything through the tunnel full-time, back up over it, or seed your own files without watching a meter. On a VPN the bottleneck is the pipe, and this is where a self-hosted exit on real network beats a bargain box every time. Every tier also includes a dedicated IPv4, plus free IPv6 in Romania, the Netherlands and Germany, so peers on modern networks can route natively there.
The honest part: what a personal VPN can't do
We'd rather you buy the right thing than be disappointed. A single-user WireGuard exit is excellent for privacy from your local network and ISP, a clean dedicated IP, geo-consistency, and securing yourself on hotel Wi-Fi. It is not anonymity. A dedicated IP that only you use is, by definition, easy to associate with you — the opposite of hiding in a crowd. It won't defeat a determined adversary who can correlate traffic, and it won't magically unblock every streaming service (many actively fingerprint datacenter ranges). If your threat model is "a nation-state is after me," a self-hosted box is the wrong tool. If it's "I want my own trustworthy exit under EU law with a clean IP and no transfer cap," it's close to perfect.
Running a VPN business on Noded
Everything above is written for a personal exit, but a commercial VPN service is just as welcome on our network. You can sell VPN subscriptions to your own customers from any NODED.CLOUD VPS or dedicated server. No special licence, no special product and no written approval from us are needed.
- Unmetered both ways, really. No transfer cap, no fair use threshold, no throttle after a set volume, no overage charges. Sustained VPN traffic 24/7 is ordinary use.
- Authenticated access only. Keys, certificates or member logins. The one thing we do not allow is an open proxy anyone can use without logging in, plus spam and attacks through the tunnel.
- Answer abuse reports. We forward complaints about your IPs to you. Deal with them promptly and your service keeps running.
- Scale by country. Add exits in more countries as your customer base grows. To resell servers under your own brand, see our reseller programme.
How Noded Can Help
We built our network for people who want to own their own exit, not rent a slice of someone else's. Every VPS in our six EU countries runs on our own AS60982, and each box comes with root SSH — so a one-command WireGuard install has you tunneling in minutes, with a clean dedicated IP under EU jurisdiction. Deploy takes about a minute, and 100 Gbps of DDoS protection sits in front of every plan whether you asked for it or not. If you want the full rundown of the VPN angle, our VPN hosting page covers it; if you just want to start, VPS I is EUR 4/mo and billed by the hour, so there's no month-long commitment to try it.
FAQ
What VPS specs do I need to self-host a WireGuard VPN?
Very little. WireGuard is lightweight, so our smallest box — VPS I at 2 GB RAM / 1 vCPU for EUR 4/mo — handles a personal exit for several devices comfortably. Bandwidth, not CPU or RAM, is the real limit, which is why all our plans ship unmetered and symmetric (100 Mbps on VPS I, up to 300 Mbps on VPS VI).
Is a self-hosted WireGuard VPN really no-logs?
It can be, because you control it. WireGuard keeps no connection log of its own, and on your own VPS the only party who could log anything is you. Disable connection tracking in your syslog and there is nothing to keep. We don't inspect what runs inside your tunnel.
Why does EU jurisdiction and your own ASN matter for a VPN?
Your exit sits under the legal regime of wherever it's hosted. NODED.CLOUD is operated by a Romanian company and announces its IPs from our own AS60982 — not a reseller's borrowed range — so your exit falls under EU data-protection norms with transparent IP provenance.
Can I try it hourly instead of committing to a month?
Yes. Our VPS is billed by the hour (VPS I works out to EUR 0.0056/hr), so you can deploy a WireGuard box, test it for an evening, and destroy it, paying only for the hours it existed. Deploy takes about a minute.
Will a personal WireGuard VPN make me anonymous?
No, and we won't pretend otherwise. A dedicated IP that only you use is easy to associate with you — the opposite of blending into a crowd. It's excellent for privacy from your ISP and local network, a clean IP, and public Wi-Fi security, but it is not anonymity against a determined adversary.