For a person looking to use a VPN solution for personal use, what are the pros and cons of paying for a VPN service as opposed to just hosting a VPN on your own rented, in the cloud server, except for the obvious managed vs unmanaged argument?

  • 4
    A server you physically control or a server you rent? The former has the obvious it-has-to-be-at-your-house argument. Jan 19, 2017 at 4:12
  • Indeed, for this question to be answerable "your own server" needs to be clarified. Do you have physical possession of the server? Is it colo? Is it vps? Jan 19, 2017 at 4:23
  • For anyone looking for a simple way to set up a personal VPN server, I can vouch for Streisand.
    – tlng05
    Jan 19, 2017 at 5:44
  • 8
    Known VPN providers are blocked from region-locked streaming services, such as the BBC iPlayer. Your own personal box may not be. This is not a security consideration, hence it's a comment, not an answer.
    – TRiG
    Jan 19, 2017 at 10:05
  • I am using a commercial VPN and have zero problems using iPlayer Jan 19, 2017 at 18:40

3 Answers 3


VPNs are designed around the concept of trust between 2 or more parties, and were intended for corporate/enterprise use.

The popularity of offering "Free VPN" or "Hosted VPN" solutions to the consumer market has dramatically increased. A lot of people seem to forget there has to be a "trust" involved. You wouldn't want to have some random person on your home network, so why would you tolerate that on a virtual up scale of that idea?

Hosting your own private VPN solution has a key distinct advantage, you trust yourself. You know how data is handled, you know who can view VPN data as it's relayed, you can ensure it's quality, reliability, and anonymity. Most people will use a VPS (Virtual Private Server) for hosting a VPN.

Using a third-party hosted solution does come at a cost of some trust, corporations are legally bound entities which may be required to hand over subscriber information. Some self-hosted solutions over come this with payments by bitcoins (for the virtual private server or physical hardware). In some countries, a corporation may also be required to log usage by their clients. Beyond this, you will have to address each company's privacy policy and terms of use.

Tor was the answer for the consumer's idea of anonymity on the internet. This again has some issues with trust, mainly that entry/exit nodes have full implicit trust. It is not made apparent if a "rogue" node was to log your connections, or pass your information in the clear.

If you are not overly concerned about "trust", here are some bullet points to think about:


  • Security and anonymity to your standards
  • Can be faster, as you are the only one using the service
  • Must keep up to date with patches/security of software
  • Your information is known to the hoster, which could be a third-party
  • Only your hosting platform is aware of your IP address

Out Sourced Hosting

  • Cheaper, and generally more reliable/constant service
  • Don't have to worry about patches/security of software
  • Simple payment plans, and generally cheaper
  • What happens to your data in between is anyone's guess
  • Your data/connections might be logged for legal reasons
  • Your data might be altered on the fly for advertisement revenues


  • Easy, usable by the general population
  • Free, no real costs
  • What entry/exit points do with your data, is anyone's guess
  • Slow, due to the number of relays, and non-profit architecture
  • 3
    Using HTTPS wherever possible alleviates a few of these issues (but not the issue of misspelling "rogue"). Jan 19, 2017 at 7:23
  • 2
    @dark_st3alth easily tricked? really? Jan 19, 2017 at 8:47
  • 2
    @SargeBorsch Most users don't inspect who is the issuing authority, "green means good" mentality. carbonwind.net/blog/… Jan 19, 2017 at 9:11
  • 7
    @dark_st3alth so, making your CA installed on another user's machine or cracking another CA is easy? Jan 19, 2017 at 10:34
  • 3
    @SargeBorsch You only have to find one of the many default CAs that doesn't do proper security checks. Like Comodo, or GoDaddy. Just check how many root CAs are installed on your system. An attacker needs to trick only one of them.
    – Cephalopod
    Jan 19, 2017 at 12:22


If you use the VPN to hide your activity, this is less than ideal. To use it as a proxy, someone else clearly needs to host the exit point. Using a machine registered to you personally makes attribution much easier, and plausible deniability much harder.

Cost / performance

If the DigitalOcean box is just for the VPN, you will have a lot of idle CPU cycles at a constant maximum cost. Because the VPN provider can use up every cycle and byte, you might get a bulk rate compared to a dedicated box.

Stability / security

Depending on your skill level, you might enable a weak cipher suit, have no redundancy, or install vulnerable services on the machine, allowing it to be compromised. If you pick the right VPN provider, they will have extensive experience with configuring secure tunnels, and have the hardware behind enterprise-grade firewalls and IDSses

  • I couldn't agree more. However for me, there is always the matter of being "hostage" to the company that provides the VPN service, as all of your traffic goes through them.
    – devnull
    Jan 18, 2017 at 23:34
  • Then stack it upon another open-source anonimity service like TOR. Then if they mess with the encryption, they can only see secure traffic. But in that way, you are much more of a hostage to your ISP; there is a much wider choice in VPN providers than internet providers in arguably all locations
    – J.A.K.
    Jan 19, 2017 at 0:23

Some fantastic answers already but I think one of the key ones missing is where there is a difference in countries or legal jurisdiction.

People who pirate content or are accessing or writing things that in their country are otherwise illegal or subject to intense scrutiny (i.e. speaking out against a dictator) that wish to avoid all that may pick a VPN provider in a different country, ideally where both the content is legal and/or that country has pretty poor relationship with your country's legal system and/or the added complication in the legal process would assist you.

Of course if "your server" is based in one of those countries already then this doesn't matter so much but if your server is in your lab at your home address then this is one of the reasons a lot of people speak of the "privacy" a VPN provides them.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .