Run your own travel VPN for about $5 a month.
A private Outline or WireGuard server on a cheap VPS, plus a $2.99 smart-routing client on your iPhone. No subscription, no shared IP addresses, no VPN company between you and the internet. Here's the whole setup, in about ten minutes.
Why self-host a travel VPN?
Commercial VPNs put thousands of strangers behind each server IP. That's why banks challenge logins from them, streaming services block them, and censors can blocklist their address ranges wholesale. A server you rent yourself is the opposite: one ordinary cloud IP, one user, no reputation, and nobody's logging policy to take on faith, because there's no company in the path at all.
The math works too. A capable VPS is $5 to $6 a month and covers every device you own. Commercial VPNs run $60 to $360 a year. The one thing self-hosting historically lacked on iPhone was a smart client, one that routes only the traffic that needs your server through it and leaves local apps alone. That's the gap Traveler's VPN fills, and why this guide exists.
What you need
- A VPS. Any provider works: DigitalOcean, Vultr, Hetzner, Linode. The cheapest tier (1 GB RAM) is plenty for a personal VPN.
- Ten minutes before your trip. Set everything up while you're still home; app stores and VPN sites are unreachable from inside China.
- Traveler's VPN on your iPhone, iPad, or Mac, with the $2.99 one-time bring-your-own-server unlock.
Step 1: rent the server
Create a VPS in your home country (or wherever you want your traffic to appear from). For a US traveler heading to Asia, a US region is right: your Instagram, Gmail, and streaming exit from a domestic IP, exactly like you never left. Pick the smallest plan, Ubuntu as the OS, and note the server's IP address.
Step 2: install Outline (the easy path)
Outline is Google Jigsaw's open-source, self-hosted VPN based on Shadowsocks. Install the Outline Manager app on your computer, choose "Set up Outline anywhere," and paste the one-line install command it gives you into your server over SSH:
sudo bash -c "$(wget -qO- https://raw.githubusercontent.com/Jigsaw-Code/outline-server/master/src/server_manager/install_scripts/install_server.sh)"The script prints a JSON snippet; paste it back into Outline Manager and you have a working server. Create a key and copy it. It looks like ss://…, and that one string is your whole credential.
Prefer WireGuard or Trojan? Traveler's VPN speaks those too. WireGuard is the fastest option on an uncongested path; Trojan disguises traffic as ordinary HTTPS, which travels better through restrictive networks. Paste a standard WireGuard config or a trojan:// URI instead of an Outline key; everything else in this guide is identical.
Step 3: connect the smart client
In Traveler's VPN, unlock bring-your-own-server ($2.99, one-time), paste your Outline key, pick a travel profile for where you're going, and connect. The routing is the point: WeChat, Alipay, Didi, and local maps stay direct and fast, while Instagram, WhatsApp, YouTube, Gmail, and the rest of the blocked half of your phone go through your server. Automatically, with the tunnel up the whole time, up to ~10x faster on local apps than an all-or-nothing VPN. Your key syncs to your iPad and Mac via iCloud, so one server covers everything.
What it costs
| First year | Every year after | |
|---|---|---|
| Self-hosted (this guide) | ~$63 to $75 (VPS) + $2.99 once | ~$63 to $75 |
| Commercial VPN | $60 to $100 intro pricing | $80 to $360 at renewal rates |
Roughly a wash on price in year one, cheaper after, and the differences that matter aren't on the invoice: your own IP with no shared reputation, open protocols you can verify, and no operator who could log you. See how that stacks up against the big brands in our comparison pages, or against the other power-user client in Traveler's VPN vs Shadowrocket.
Honest caveats
- Set up before you fly. From inside China you can't reach app stores, VPN sites, or most cloud-provider consoles. Everything in this guide happens at home.
- One region per server. Your traffic exits where the VPS lives. That's ideal for travel (you want home), less flexible than a commercial VPN's country picker if you hop exit locations for streaming.
- It's your server. Reboots, provider outages, and OS updates are on you. In practice an Outline droplet needs attention about never, but "about never" isn't "never."
- Not into any of this? The same app runs the same smart routing on a private server we provision for you: a $9.99 7-day Travel Pass or $14.99/month, with a free 3-day trial and no account. Self-hosting is the enthusiast path, not the toll gate.
