Amnezia VPN: self-hosted VPN without manual server setup
Amnezia VPN is an open-source client that deploys a VPN server on your VPS by itself. No command-line work: you connect to the wizard with SSH credentials, choose a protocol, and in 3–5 minutes you have a ready server with an autogenerated client config.
The main difference from ready-made VPN services is control. The server is yours, the IP is yours, the keys are yours. Nobody sees your traffic, nobody will shut down the server “by regulator decision,” and no affiliate program will leak logs. The downside is that you pay for the VPS yourself, and stability depends on how often your provider’s IPs are blocked.
Below: how it works, which protocols are supported, and the core difference from buying a ready-made service.
In brief
- Amnezia is a client that installs a VPN server on your VPS by itself.
- No CLI: enter the IP and SSH login, choose a protocol, and the wizard deploys everything.
- Supports WireGuard, AmneziaWG, OpenVPN, OpenVPN+Cloak, Shadowsocks, IKEv2.
- AmneziaWG is its own obfuscated version of WireGuard and holds up better against DPI.
- Suitable if you already have a VPS or are ready to rent one (3–7 $/month).
- The server is yours — but responsibility for updates and security is yours too.
What Amnezia does and how it differs from ready-made services
A ready-made VPN service, any commercial one, gives you an app and access to its servers. Convenient, but: you do not know what is in the logs, you do not control the IP, you do not choose the location more precisely than “a list of 30 countries,” and you depend on the service continuing to exist at all.
Amnezia is a different model. It is a client-installer that turns your VPS into a VPN server. You pay for the VPS itself (from 3 $ per month), but you get a fully owned server where nobody except you has root access.
Setup wizard instead of CLI
Technically, the same scenario can be done manually: rent a VPS, install WireGuard through apt, write the config. Amnezia does all of this for you with one button. If you are not a sysadmin, this is the difference between “I cannot handle it” and “5 minutes.”
Several protocols at once
You can run several protocols on one server and switch between them. If one starts getting cut by TSPU filtering systems, you switch to another without reconfiguring the server. More about the project itself and installation is in the official Amnezia documentation.
AmneziaWG is the project’s key feature
AmneziaWG is a fork of WireGuard with its own obfuscation. Regular WireGuard is detected by TSPU filtering systems by its characteristic handshake; AmneziaWG masks that handshake. In the Russian network right now, this is one of the most resilient options for “your own WG + light DPI resistance.”
OpenVPN with Cloak and Shadowsocks
If AmneziaWG is not suitable, Amnezia can deploy OpenVPN with a Cloak wrapper (masking as HTTPS) or classic Shadowsocks. All these protocols are supported “out of the box” without manually editing configs.
When Amnezia is suitable, and when it is not
| Situation | Is Amnezia suitable? | What matters to know |
|---|---|---|
| I want my own VPN, but I am afraid of Linux and CLI | Yes, this is the main scenario | The wizard does everything for you; you only need SSH access to the VPS |
| I already have a VPS and want to set up a VPN quickly | Yes | Minimum: Ubuntu 20.04+, root or a sudo user |
| I need a VPN for 10+ people / a family | Yes | One VPS means several clients; configs are generated separately |
| I need “press a button and it works,” without a VPS | No | Amnezia is an installer, not a service; a VPS is required |
| I need 50 servers in 50 countries | No | You will have as many locations as the number of VPSs you rent |
| I need corporate SSO / centralized management | No | This is a personal/family scenario, not enterprise |
How to check right now
If you have already deployed a server through Amnezia and something does not work, diagnostics split into two parts. First, check whether the server itself is reachable: whether the VPS is alive and whether the port is open. Second, check whether the selected protocol is being cut by your operator. AmneziaWG holds up well, but “bare” WireGuard and OpenVPN without wrappers are often detected by signature in the Russian network.
Comparison by operators and regions through Freedom Checker helps you understand whether it is your server that is not working or mass filtering of the protocol. Client releases and the firmware itself are on GitHub Amnezia-Client, and the general page for the self-hosted scenario is at amnezia.org/self-hosted.
Failure or blocking?
A failure on Amnezia’s side is rare: the client is stable, the setup wizard is tested, and it installs the config and then leaves the server alone. If something does not connect immediately after installation, it is usually either the VPS firewall not allowing the required port through, or the VPS provider not allowing UDP traffic on standard ports at all.
Blocking is different. This is when the server is alive, the keys are valid, it works for one person and not for another. The sign is traffic filtering by a specific operator. The fix is to change the protocol inside Amnezia, for example WireGuard → AmneziaWG or OpenVPN+Cloak. If the filter has been updated and cuts all protocols, it is time to change the server IP: sometimes the block is applied by IP.
What to pay attention to
- Choose a VPS in a country without strict filtering of incoming connections (NL, DE, FI are standard).
- The server’s geolocation affects ping — for voice calls and games, Europe is better than the US.
- Run several protocols on one VPS at once — this is insurance against a single-protocol block.
- AmneziaWG first; regular WireGuard as a fallback, not as the main option.
- A self-managed server requires security updates — log in over SSH once every couple of months and run apt upgrade.
- The VPS firewall must allow the UDP port of your WG, otherwise the client will stay silent.
- Compare “your own VPN on a VPS” vs “paid service” — each has its own risk profile; one is not better than the other on every metric.
Conclusion
Amnezia is a sensible way to get a personal VPN without knowing Linux. You pay for a VPS, click through the wizard, and get a server with several protocols to choose from. AmneziaWG as “obfuscated WireGuard” is the project’s main feature and a real argument against regular WG in the Russian network.
If you already have a VPS, this is probably the fastest way to set up your own VPN. If you do not have a VPS and do not plan to get one, use a ready-made service; self-hosted does not exist without a server.