Manage WireGuard, OpenVPN & IKEv2 from a single, powerful web interface.
Free for up to 50 users — with full API access.
v2.1 is production-ready and free to use.
PUQVPNCP v2.1 introduces a hierarchical architecture. Create networks, add clients, then enable any combination of VPN protocols per client. Optionally route entire networks through external WireGuard Upstream tunnels.
PUQVPNCP v2.1 is the first version to support all three major VPN protocols, managed from a unified interface.
Modern, ultra-fast protocol with state-of-the-art cryptography. QR code generation, one-time config links, per-peer bandwidth control.
The most widely-deployed VPN protocol, now fully integrated. Policy-based routing, connmark firewall support, and full client management.
Enterprise-grade VPN with EAP authentication. Native support on iOS, macOS, Windows — no third-party app required.
PUQVPNCP v2.1 is a complete rewrite with a modern architecture designed for scale and flexibility — now with built-in DNS ad blocking.
New hierarchical architecture. Create networks, add clients, then enable WireGuard, OpenVPN, or IKEv2 per client. One client can use all three protocols simultaneously.
Fine-grained permission system with custom groups: Admin, Operator, Viewer, or create your own. 36+ granular permissions for complete access control.
156+ API endpoints with built-in Swagger documentation. Per-user API tokens with IP restrictions, expiration, and rate limiting. Free tier includes full API access.
Modern Bootstrap 5 interface with native dark/light mode toggle. User preference saved per account. Clean, responsive design on any device.
Connect networks together with bidirectional peering. Automatic firewall rules for allowed traffic between peered networks, isolation for the rest.
Global pre/post network firewall rules, per-network filter/NAT/DNAT/mangle chains, policy routing, and centralized peering & isolation management.
Block ads and trackers for all VPN clients at the DNS level — no client-side software needed. 130,000+ domains blocked by default with built-in lists, custom lists, whitelist, and auto-updates every 24h.
Route entire network traffic through external WireGuard VPN servers. Geographic IP rotation, multi-hop privacy, ISP bypass — per network, with one click.
Per-client bandwidth limits, real-time traffic statistics, syslog/InfluxDB integration, and detailed usage monitoring.
Generate secure, expiring configuration links for WireGuard and IKEv2. Clients can self-configure without manual setup.
Automated backup scheduling with FTP upload. One-click restore, configuration export, and disaster recovery.
Real-time diagnostics for all VPN protocols, traffic control, and system services. 9-phase integrity checker audits and auto-fixes firewall, routing, ipset, and TC rules.
Unlike v1, PUQVPNCP v2.1 gives you complete API access on the free tier. Automate VPN user provisioning, integrate with your billing system, or build custom dashboards.
# Create a new VPN client
curl -X POST https://vpn.example.com/api/v1/client \
-H "Authorization: Bearer YOUR_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"name": "user-001",
"network": "office-vpn",
"wireguard": true,
"openvpn": true,
"download": 100,
"upload": 50
}'
# Response
{
"success": true,
"data": {
"name": "user-001",
"network": "office-vpn",
"wireguard_ip": "10.0.1.2",
"openvpn_ip": "10.0.1.2",
"status": "enabled"
}
}PUQVPNCP v2.1 is a generational leap forward with a completely new architecture, UI, and feature set.
| Feature | v1.x | v2.1 |
|---|---|---|
| VPN Protocols | WireGuard + IKEv2 | WireGuard + OpenVPN + IKEv2 |
| Architecture | Flat (WG servers + accounts) | Network → Client → Protocol |
| Free API Access | Restricted | Full access (162+ endpoints) |
| Authentication | Single access hash | Per-user API tokens + sessions |
| Access Control | Single admin user | RBAC with custom permission groups |
| UI Framework | Legacy Bootstrap | Bootstrap 5.3 + modern design |
| Theme | Light only | Dark & Light theme toggle |
| Network Peering | Not available | Bidirectional peering |
| Global Firewall | Basic filter rules | Pre/Post rules + peering/isolation |
| OpenVPN Policy Routing | Not available | Connmark-based routing |
| API Documentation | External wiki | Built-in Swagger UI |
| Multiple Admin Users | Single admin | Unlimited admin users |
| Form Handling | Page reloads | Full AJAX (no page reloads) |
| Upstream Tunnels | Not available | WireGuard upstream routing |
| Diagnostics | Not available | 9-phase integrity checker |
| Free Users | 50 users | 50 users + full API |
50 VPN users free forever — with full API access. Upgrade only when you need more capacity.
Up to 50 VPN users
150 users (100 + 50 free)
250 users (200 + 50 free)
550 users (500 + 50 free)
1050 users (1000 + 50 free)
5050 users (5000 + 50 free)
Version 2.1 is fully functional and available for download. All features are implemented and production-ready. Your feedback helps us make it even better.
Quick Install
# Download and install on Debian/Ubuntu
wget https://puqvpncp.com/download/puqvpncp_latest_amd64.deb
dpkg -i puqvpncp_latest_amd64.deb
# Access the web panel
# http://your-server-ip:8098
# Default login: admin / adminFound a bug or have feedback? Let us know on the community forum.
Download PUQVPNCP v2.1 for free and start managing WireGuard, OpenVPN & IKEv2 in minutes.
Yes! PUQVPNCP v2.1 is completely free for up to 50 VPN users. This includes all features: WireGuard, OpenVPN, IKEv2 support, the web management panel, and — unlike v1 — full REST API access. No credit card, no trial period, no feature restrictions.
Version 2.1 is a complete rewrite. Key differences include: OpenVPN support (new), Network→Client→Protocol architecture, role-based access control (RBAC), per-user API tokens, dark/light theme, network peering, centralized global firewall management, built-in Swagger API docs, and a modern Bootstrap 5 AJAX-driven UI. See the comparison table for full details.
Yes! This is one of the biggest changes in v2. In v1, API access was restricted in the free tier. In v2.1, all 156+ API endpoints are available on the free plan. You can automate user provisioning, monitor traffic, manage firewall rules, and integrate with external systems like WHMCS.
PUQVPNCP runs on Debian 11+ and Ubuntu 20+ (amd64 architecture). We recommend a clean OS installation with a public IP address, at least 1 CPU core, and 1 GB RAM.
Yes! With the new Network→Client→Protocol architecture, a single client can have WireGuard, OpenVPN, and IKEv2 enabled simultaneously. Each protocol is configured independently within the client's tabbed interface.
Network peering allows traffic between two VPN networks. You can create bidirectional peerings that automatically configure iptables rules for allowed traffic. Non-peered networks are isolated from each other by default through centralized firewall rules.
Yes. PUQVPNCP v2.1 includes automatic migration from v1 data. Your existing WireGuard servers, accounts, API keys, and firewall rules are automatically converted to the new architecture on first startup.
Free users can get help through the community forum. Licensed users get priority support via the ticket system. Full documentation is available at puqvpncp.com/doc.