Phantom-WG¶
Your Server. Your Network. Your Privacy.
Phantom-WG is a modular tool for setting up and managing WireGuard VPN infrastructure on your own server. Beyond basic VPN management, it provides censorship-resistant connections, multi-layer encryption, and advanced privacy scenarios.
Quick Start¶
Requirements¶
Server:
- A server with internet access, a public IPv4 address, and a supported operating system
- Root access
Operating System:
- Debian 12, 13
- Ubuntu 22.04, 24.04
Resource Usage: WireGuard runs as a kernel module, consuming minimal system resources. For detailed performance information, see WireGuard Performance.
Installation¶
Phantom-WG
Terminal RecordingScenarios¶
Core - Central Management¶
Client management, cryptographic key generation, automatic IP allocation, and service control are managed from a single interface.
Key Features:
- Add/remove clients and share configurations via QR code
- Server status and connection statistics
- Firewall management
- Subnet changes and IP remapping
Multihop - Dual VPN Layer¶
Chain your traffic through external WireGuard servers. Create a dual encryption layer using your own servers or commercial VPN providers.
Key Features:
- Import any WireGuard configuration file
- Automatic routing rules and NAT configuration
- Connection monitoring and automatic reconnection
- VPN connection tests
Ghost - Stealth Mode¶
Your WireGuard traffic is disguised as standard HTTPS web traffic. Bypass DPI (Deep Packet Inspection) systems and firewall blocks for censorship-resistant connectivity.
Key Features:
- WebSocket tunneling (wstunnel)
- Automatic Let's Encrypt SSL certificates
- Client configuration export via
phantom-casper
MultiGhost - Maximum Privacy¶
Combine Ghost and Multihop modules for the highest level of privacy and censorship resistance. Your connection is disguised as HTTPS and routed through a dual VPN layer.
Activation:
# 1. Enable Ghost Mode
phantom-api ghost enable domain="cdn.example.com"
# 2. Import external VPN
phantom-api multihop import_vpn_config config_path="/path/to/vpn.conf"
# 3. Enable Multihop
phantom-api multihop enable_multihop exit_name="vpn-exit"
Access Methods¶
| Method | Command | Description |
|---|---|---|
| Interactive CLI | phantom-wg |
Rich TUI-based user interface |
| API | phantom-api <module> <action> |
Programmatic access, JSON output |
| Ghost Export | phantom-casper <client> |
Ghost Mode client configuration |
Trademark Notice¶
This project is an independent VPN management implementation that uses the WireGuard protocol. It is not affiliated, associated, authorized, endorsed by, or in any way officially connected with Jason A. Donenfeld, ZX2C4 or Edge Security.
WireGuard® is a registered trademark of Jason A. Donenfeld.
License¶
Copyright (c) 2025 Riza Emre ARAS r.emrearas@proton.me
This software is licensed under the AGPL-3.0 license. See LICENSE for details.
For third-party licenses, see THIRD_PARTY_LICENSES.
🎖️ Acknowledgments¶
This project would not be possible without the following open source projects:
Support¶
Phantom-WG is an open-source project. If you'd like to support the project:
Monero (XMR):
Bitcoin (BTC):