๐ฌ๐ง English | ๐น๐ท Tรผrkรงe | ๐ธ๐ฆ ุงูุนุฑุจูุฉ
โโโโโโโ โโโ โโโ โโโโโโ โโโโ โโโโโโโโโโโโ โโโโโโโ โโโโ โโโโ
โโโโโโโโโโโ โโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโโ โโโ โโโโโโโโโโโโโโ
โโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโโ โโโโโโโโโโโโโโ
โโโ โโโ โโโโโโ โโโโโโ โโโโโโ โโโ โโโโโโโโโโโโ โโโ โโโ
โโโ โโโ โโโโโโ โโโโโโ โโโโโ โโโ โโโโโโโ โโโ โโโYour Server. Your Network. Your Privacy.
Phantom-WG is a modular tool for setting up and managing WireGuard VPN infrastructure on your own server. Beyond basic VPN management, it provides censorship-resistant connections, multi-layer encryption, and advanced privacy scenarios.
Server:
- A server with internet access, a public IPv4 address, and a supported operating system
- Root access
Operating System:
- Debian 12, 13
- Ubuntu 22.04, 24.04
Resource Usage: WireGuard runs as a kernel module, consuming minimal system resources. For detailed performance information, see WireGuard Performance.
Need a provider? If you can't decide which provider to go with, try Spin & Deploy โ randomly select from privacy-focused, crypto-friendly VPS providers!
curl -sSL https://install.phantom.tc | bash
๐บ For video walkthroughs of all features, see https://docs.phantom.tc/feature-showcase/modules/core/add-client/.
install.phantom.tcis a Cloudflare Worker maintained entirely from this GitHub repository and deployed via GitHub Actions. It does not perform any data collection, telemetry, or logging. For details, see the Privacy Notice.
Upon successful installation, you will see the following output:
========================================
PHANTOM-WG INSTALLED!
========================================
Commands:
phantom-wg - Interactive UI
phantom-api - API access
Quick Start:
1. Run: phantom-wg
2. Select 'Core Management'
3. Add your first client
API Example:
phantom-api core list_clients
Client management, cryptographic key generation, automatic IP allocation, and service control are managed from a single interface.
Key Features:
- Add/remove clients and share configurations via QR code
- Server status and connection statistics
- Firewall management
- Subnet changes and IP remapping
Detailed Usage: API Documentation - Core Module
Chain your traffic through external WireGuard servers. Create a dual encryption layer using your own servers or commercial VPN providers.
Key Features:
- Import any WireGuard configuration file
- Automatic routing rules and NAT configuration
- Connection monitoring and automatic reconnection
- VPN connection tests
Detailed Usage: API Documentation - Multihop Module
Your WireGuard traffic is disguised as standard HTTPS web traffic. Bypass DPI (Deep Packet Inspection) systems and firewall blocks for censorship-resistant connectivity.
Key Features:
- WebSocket tunneling (wstunnel)
- Automatic Let's Encrypt SSL certificates
- Client configuration export via
phantom-casper
Detailed Usage: API Documentation - Ghost Module
Combine Ghost and Multihop modules for the highest level of privacy and censorship resistance. Your connection is disguised as HTTPS and routed through a dual VPN layer.
Activation:
# 1. Enable Ghost Mode
phantom-api ghost enable domain="cdn.example.com"
# 2. Import external VPN
phantom-api multihop import_vpn_config config_path="/path/to/vpn.conf"
# 3. Enable Multihop
phantom-api multihop enable_multihop exit_name="vpn-exit"Detailed Usage: API Documentation - Full Censorship Resistance
| Method | Command | Description |
|---|---|---|
| Interactive CLI | phantom-wg |
Rich TUI-based user interface |
| API | phantom-api <module> <action> |
Programmatic access, JSON output |
| Ghost Export | phantom-casper <client> |
Ghost Mode client configuration |
| Document | Description |
|---|---|
| API Documentation | Detailed reference for all API actions |
| Module Architecture | Technical architecture and data models |
This project is an independent VPN management implementation that uses the WireGuard protocol. It is not affiliated, associated, authorized, endorsed by, or in any way officially connected with Jason A. Donenfeld, ZX2C4 or Edge Security.
WireGuardยฎ is a registered trademark of Jason A. Donenfeld.
Copyright (c) 2025 Rฤฑza Emre ARAS r.emrearas@proton.me
This software is licensed under the AGPL-3.0 license. See LICENSE for details.
For third-party licenses, see THIRD_PARTY_LICENSES.
This project would not be possible without the following open source projects:
Phantom-WG is an open-source project. If you'd like to support the project:
Monero (XMR):
84KzoZga5r7avaAqrWD4JhXaM6t69v3qe2gyCGNNxAaaJgFizt1NzAQXtYoBk1xJPXEHNi6GKV1SeDZWUX7rxzaAQeYyZwQ
Bitcoin (BTC):
bc1qnjjrsfdatnc2qtjpkzwpgxpmnj3v4tdduykz57
