Use your Litport proxy as a WireGuard VPN

Connect a supported phone, computer or router to your Litport proxy with a WireGuard profile. Profiles are included; your proxy's own traffic price and limits apply.

  • iPhone, Android, Windows, macOS, Linux and routers
  • Servers in the US, Europe and Singapore
  • Change the IP without touching the device
  • Included with every proxy

Already have a proxy? Follow the setup guide.

litport-vpn.conf
[Interface]
PrivateKey = ••••••••
Address = ••••••••
DNS = ••••••••
MTU = 1280

[Peer]
PublicKey = ••••••••
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn-us-7.litport.net:51830
PersistentKeepalive = 25
Scan the QR code in the WireGuard app, or import the config file.

Where your traffic goes

The device connects to a Litport VPN server, and its traffic leaves through your proxy. Websites see the proxy's IP.

  1. Your devicePhone, computer or router
  2. WireGuard tunnelEncrypted, UDP 51830 or 443
  3. Litport VPN serverUS, Europe or Singapore
  4. Your proxyStatic or rotating residential IPMobile carrier IPDatacenter IPThe location you set on the profile
  5. The websiteSees your proxy's IP

DNS lookups take the same route.

The config never changes. Link the profile to another proxy or press Get new IP, and the device carries on with the new IP.

How it works

  1. Buy a proxy, or use one you already have.

  2. Create a VPN profile in your dashboard and link the proxy to it.

  3. Scan the QR code in the WireGuard app, or import the config file.

Which IP you get

Residential proxies

Pay-per-GB: set the location on the profile where the pool supports it, and get a new IP when you want.

Unlimited traffic

Coming soon

Pay-per-GB

From$1.19per GB

Up to 5 profiles per unlimited proxy. Pay-per-GB proxies share your account's limit.

Supported setups

Without a kill switch, traffic can leave the device outside the tunnel at times, for example while the tunnel reconnects.

DeviceAppKill switch
iPhone and iPadOfficial WireGuard appOn-Demand reconnects, but is not a kill switch
AndroidOfficial WireGuard appAlways-on VPN and Block connections without VPN
WindowsOfficial WireGuard appBlock untunneled traffic (kill-switch)
macOSOfficial WireGuard appOn-Demand reconnects, but is not a kill switch
Linuxwg-quickFirewall snippet
RouterGL.iNet or OpenWrt WireGuard clientThe router's kill switch

Good to know

  • Pick the server nearest to your device: US, Europe or Singapore.
  • UDP works on proxies that carry it, such as pay-per-GB pools marked UDP. Other proxies refuse UDP, and apps fall back to TCP.
  • DNS stays in the tunnel and is looked up through the proxy route. Where a lookup lands depends on the provider.
  • IPv6 is refused inside the tunnel, so apps use IPv4.
  • TCP to web ports, SSH, mail (465, 587, 993, 995) and RDP is open. Port 25 and other TCP ports are closed; ask support if an app needs one.
  • Use one profile per device at a time.
  • On pay-per-GB, VPN traffic is billed per GB, like proxy traffic.
  • Torrents, spam, scanning and fraud are prohibited, as with proxies. See the Appropriate Use Policy.

Frequently asked questions

No. It is another way to use the proxies you buy from Litport. You pay for the proxy as usual, and the VPN profile is included.
Nothing extra. A profile uses its proxy's traffic: included in a package's price, or billed per GB on pay-per-GB.
Devices with the official WireGuard app: iPhone and iPad, Android, Windows, macOS and Linux, plus GL.iNet and OpenWrt routers.
Yes. On a GL.iNet or OpenWrt router, every device behind the router uses the proxy. Turn on the router's kill switch.
Yes. Press Get new IP, or link the profile to another proxy. Apps reconnect through the new IP, and the config on the device stays the same.
No. It is not a tool for getting around censorship, and networks that block WireGuard block it too.
It keeps the device consistent with its proxy: DNS stays in the tunnel and IPv6 is refused. Websites still see a proxy IP, and Litport records the destinations of VPN traffic as it does for proxy traffic.