This guide sets up Pi-hole and WireGuard on Ubuntu 24.04 using Google Cloud's free tier, with full-tunnel and split-tunnel configurations.
DSVPN
Create a VPN between a client and server across untrusted or restricted networks with DSVPN.

About DSVPN
DSVPN creates a VPN link between a client device and a server across an untrusted or restricted network, with the server providing onward access to the internet. It runs over TCP, including port 443, and connects with one command on each side using a shared secret key stored on both machines.
It uses no configuration file and requires no manual firewall or routing rules. It works on Linux with kernel 3.17 or newer, macOS and OpenBSD, with DragonFly BSD, FreeBSD and NetBSD in client and point-to-point modes. It blocks IPv6 on the client, and a DNS resolver reachable only from the local network may not work through the VPN.
Key features
- Runs over TCP, including port 443 for restricted networks
- Uses a shared secret key stored on client and server
- Connects with a single command on each side
- Operates without a configuration file or manual routing rules
- Blocks IPv6 on the client to prevent IPv6 leaks
- Small codebase around 25 KB with no external dependencies
- No configuration file or manual firewall and routing setup
- Small and constant memory footprint without heap allocations
- Uses modern cryptography with formally verified implementations
- A DNS resolver only accessible from the local network may not work through the VPN
- DragonFly BSD, FreeBSD and NetBSD work in client and point-to-point modes
- Linux support requires kernel 3.17 or newer
DSVPN at a glance
- Website
- github.com/jedisct1/dsvpn
- Category
- Privacy & Security › VPNs
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Platforms
- Linux, macOS
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
DSVPN alternatives
Tools and sites you could use instead, ranked by how closely they match.
WireHole combines WireGuard, Pi-hole, and Unbound in a Docker Compose project for a managed VPN with ad blocking and DNS caching.
Windscribe provides a VPN service that describes privacy protection, location masking, and access to global content across servers in more than 130 locations.
Connect to WireGuard or AmneziaWG servers on Android with WG Tunnel, an open-source client.
Gluetun runs a VPN client in a Docker container with multiple providers, OpenVPN or WireGuard, DNS over TLS, and built-in proxy servers.
FlClash provides an open-source, ad-free multiplatform proxy client based on ClashMeta.
Popular in VPNs
Well-known listings from the same topic.
DSVPN FAQ
How is the shared secret created?
How do the server and client connect?
What happens to DNS through the VPN?
Tell us and an editor will check it.
Claim the listing and suggest updates yourself. An editor checks every claim first.












