BLOG · FIELD NOTES

VPNSmith Guides & Benchmarks

Understand how a WireGuard tunnel works, what a GDPR VPS truly costs, and how to forge your own infra. Long-form, sourced, kept up to date.

All · 63 VPS Comparisons · 6 Self-host VPN · 38 clusters.commercial-vpn · 1 Tunneling & Obfuscation · 8 clusters.self-host-vpn-head · 6 clusters.wireguard · 1 Cloud Privacy · 1 clusters.vps-hosting · 2

A modern server rack with blue lighting in a secure data center environment

FeaturedSelf-host VPN2026-07-14

Oracle Cloud Free Tier WireGuard VPN (2026): Setup, and Why It Sometimes Fails

Run a free WireGuard VPN on Oracle Cloud Always Free in 2026: create the instance, open UDP 51820 in the security list, fix the OCI iptables rule that silently blocks traffic, and configure clients. Plus the honest limits of the free tier.

4 min readRead the article

A home ISP router and modem beside a television

Self-host VPN

2026-07-093 min

WireGuard Behind CGNAT: Why Port Forwarding Fails and How to Fix It (2026)

WireGuard works on your LAN but won't connect from outside? The culprit is usually CGNAT - your ISP sharing one public IP, so port forwarding does nothing. How to confirm it, and the honest fixes from a public-IP VPS to NAT-traversal meshes.

Read

A columned government building in New Delhi with the Indian flag flying above it

Self-host VPN

2026-07-044 min

India's VPN Crackdown 2026: What the New Rules Could Mean

India is reportedly drafting a new law to regulate VPN providers - local offices, compliance officers, and blocking orders. Here is what has been reported, what is still unconfirmed, and where a self-hosted VPN fits in.

Read

Rows of server racks in a data centre with status lights, the kind of host that runs a public-IP WireGuard server

Self-host VPN

2026-06-297 min

WireGuard PersistentKeepalive: keep the tunnel reachable behind NAT (2026)

Your WireGuard peer goes silent after a minute behind NAT? Set PersistentKeepalive = 25 on the client. Here's what it does, why 25 seconds, and where to put it.

Read

A black desktop PC tower with blue-lit case fans glowing in a dark room

Self-host VPN

2026-06-287 min

How to Set Up WireGuard on Windows (Step by Step, 2026)

Set up WireGuard on Windows in 2026: install the official client, import or create a tunnel, activate it, and verify the handshake. Understand every .conf field, fix the common 'no handshake' and DNS issues, and run the tunnel as an auto-start service.

Read

Teal fibre-optic network cables plugged into the ports of a rack switch

Self-host VPN

2026-06-287 min

How to Set Up WireGuard on an OpenWrt Router (Client & Server, 2026)

Set up WireGuard on an OpenWrt router in 2026: install luci-proto-wireguard, then configure OpenWrt as a VPN client (route the whole LAN out) or as a server (remote access to your home network). Firewall, DNS, MTU and no-handshake fixes included.

Read

A small NETGEAR network switch on a wooden floor with several Ethernet cables plugged in and coiled around it

Self-host VPN

2026-06-269 min

WireGuard Site-to-Site VPN: Link Two Networks (2026 Guide)

Connect two whole LANs over WireGuard - office to home, two data centres, or branch to HQ. Subnet routing, AllowedIPs, NAT and firewall, step by step on a VPS.

Read

Dark data-centre aisle with rows of server racks glowing with green, yellow and blue status LEDs reflected on the floor

Self-host VPN

2026-06-257 min

wg-easy (2026): the web-UI way to self-host WireGuard in minutes

wg-easy gives WireGuard a browser dashboard: create clients, scan QR codes, watch live traffic. The full 2026 setup - docker-compose, the v14 password change, locking down the admin panel, and when to pick it over the CLI.

Read

Wireless router with an Ethernet cable plugged into a yellow LAN port

Self-host VPN

2026-06-247 min

WireGuard MTU: the right value and how to fix the stalled tunnel (2026)

WireGuard connects but web pages hang? It's almost always MTU. Find your optimal WireGuard MTU with a do-not-fragment ping, set it per link type, and fix the stall.

Read

A source-code editor open on a dark theme, showing nested config blocks

Self-host VPN

2026-06-239 min

WireGuard handshake did not complete: the full fix list (2026)

WireGuard handshake did not complete? Ordered checklist: firewall, port, keys, AllowedIPs, NAT, clock, MTU. Diagnose with wg show and fix it in minutes.

Read

Abstract glowing network connections between nodes

Self-host VPN

2026-06-223 min

What Is Tailscale? The Mesh VPN Explained (2026)

Tailscale is a mesh VPN built on WireGuard that connects your devices directly into one private network, with almost no setup. What Tailscale is, how it works, what it is good for, and its honest limits and pricing.

Read

Self-host VPN

2026-06-156 min

WireGuard Default Port: UDP 51820, and How to Open, Forward or Change It (2026)

WireGuard's default port is UDP 51820. What that means, how to open it in your firewall, forward it through your router, change it to a custom port, and fix the connection problems the port causes.

Read

Self-host VPN

2026-06-145 min

WireGuard on iPhone & iPad: Complete iOS Setup (2026)

Set up WireGuard on iPhone/iPad in 2026: install the app, import your server config by QR or file, enable On-Demand (always-on), and fix handshake/MTU issues. Works with PiVPN, NetBird or a manual server.

Read

Don't feel like reading? Run the diagnostic.

5 minutes, no signup, and you see exactly what sites detect about you.

Run the diagnostic Get Contabo