Your current IP
The default: only the address you deployed from can use the proxy. Right when the app runs on your own machine.
Mysterium Gateway 1.39.6 Networking
Free credit available Limited time
Deploy Mysterium VPN Gateway Your apps, routed through the Mysterium network.
Mysterium VPN Gateway is an HTTP proxy for routing your apps through the Mysterium network, on a server we provision, secure and run. Point an app at port 3128 and its requests leave from a node in the country you choose. Only the IP addresses you allow can use it.
No login to leak: the allow-list you set at deploy time is the lock.
Mysterium VPN Gatewayone-click template ready
- proxyHTTP, port 3128
- accessyour IP allow-list
- loginnone, by design
- exitcountry and service type you pick
- trafficMYST per GB, to the network
European 4 GB server$0.02/hr
In one line
What is a Mysterium VPN Gateway?
What it is
A Mysterium VPN Gateway is Mysterium's consumer node running as an HTTP proxy. Your apps send requests to it. It buys exit traffic from node operators on the Mysterium network, paid in MYST per GB.
Where to start. Open the console with Mysterium VPN Gateway selected
Who it is for
Developers who want a script, a container or a whole app to reach the web from another country, without a VPN client on each machine.
When to use it
When the traffic comes from software rather than a person. To protect your own phone or laptop, the Mysterium VPN app fits better.
Path
How the Mysterium VPN Gateway works
The Mysterium VPN Gateway sits between your apps and the Mysterium network. An app sends its request to the proxy on port 3128. The gateway passes it to a node in the country and service type you chose and pays for that traffic from its own MYST balance. The site sees the node's address, not yours.
The stack, end to end
Callers
Your apps and containers
Edge
Your IP allow-list
Your project server
Proxy
Gateway, port 3128
Pays in MYST
Funded identity
Exit
Mysterium node
Destination
The site you reach
| Step | What happens | Who runs it |
|---|---|---|
| Your app | Sends requests to the proxy endpoint, via HTTP_PROXY and HTTPS_PROXY | You |
| The gateway, port 3128 | Mysterium's consumer node behind an HTTP proxy that answers only your allowed IPs | This template, on your server |
| The gateway's identity | Pays for traffic in MYST per GB, once you register and fund it | You fund it |
| A Mysterium node | Carries the request out from its own IP address, in the country you picked | An independent node operator |
The site sees the node's address, not your server's. Deploy the stack
Access
Who can use the Mysterium VPN Gateway proxy
The proxy has no password, so who can use it is decided by where requests come from. You choose that when you deploy and can change it later in Settings. Every byte the proxy carries is paid from your MYST, so keep the list as short as your apps allow.
Custom
One IP address or range when you deploy, up to 16 in Settings afterwards, such as the servers your apps run on.
Anywhere
Anyone who reaches port 3128 can use the proxy and spend your MYST. Only in Settings, after you confirm it; we advise against it.
Server
Mysterium VPN Gateway requirements
Mysterium VPN Gateway requirements are light because the gateway only forwards traffic. It starts on 4 GB, the smallest server we offer, on x86 or ARM. The other requirement sits outside the server: a funded MYST identity.
What it needs
- Server
- 4 GB, the smallest server we offer; x86 or ARM
- Mysterium node software
- 1.39.6 (
mysteriumnetwork/myst:1.39.6-alpine), an exact tag - Gateways per project
- One
- Ports
- 3128 for the proxy, open only to your allowed IPs
- To carry traffic
- An identity registered and funded with MYST
Server size: 4 GB, enough for Mysterium VPN Gateway. Deploy on a 4 GB server
Quickstart
How to deploy Mysterium VPN Gateway in 3 steps
Allow your IPs, fund the identity, point your apps at the proxy.
-
Choose the gateway and who can use it
Launch opens the Mysterium VPN Gateway template in the console. Keep your current IP or enter the address or range your apps run from, then pick an exit country and service type if you want one. The template deploys in about ten minutes.
-
Fund its identity
Find the gateway's identity address in its logs in the console, then register and fund that identity with MYST. Until then the gateway runs but the proxy on port 3128 does not answer.
-
Point your apps at the proxy
Set
HTTP_PROXYandHTTPS_PROXYin each app to the proxy endpoint the console shows, on port 3128. Requests now leave from a Mysterium node.
Deploy Mysterium VPN GatewayStep 1 starts in the console.
Launch Mysterium VPN Gateway Billing
What the Mysterium VPN Gateway costs
The Mysterium VPN Gateway has two costs, paid to two places. We bill the server by the hour from prepaid credits. A European 4 GB server is $0.02/hr, about $15 to $16 a month. The traffic is paid in MYST per GB from the gateway's identity to the Mysterium network, never to us.
$0.02
/hr, about $15 to $16 a month at 730 hours
European 4 GB server, $0.02/hr Deploy Mysterium VPN Gateway | Item | Cost |
|---|---|
| The gateway template | $0 |
| Traffic through the Mysterium network | MYST per GB, from the gateway's identity to the network |
| Server bandwidth | $0, traffic to the server is included in its price |
| Optional daily backups | +20% of the server price |
| Server | RAM, cores, disk | Where | Rate | About a month |
|---|---|---|---|---|
cx23 (recommended) | 4 GB, 2 cores, 40 GB | Europe | $0.02/hr | $15.18 |
cax11 (ARM) | 4 GB, 2 cores, 40 GB | Europe | $0.02/hr | $16.35 |
cpx21 | 4 GB, 3 cores, 80 GB | US | $0.12/hr | $87.75 |
cpx22 | 4 GB, 2 cores, 80 GB | Singapore | $0.10/hr | $72.56 |
Monthly figures assume 730 hours.
If your balance reaches zero
With a card on file or a past top-up, the gateway keeps running for 5 days after your balance reaches zero. Then it is stopped and kept for 24 hours before it is deleted; a top-up in that time restarts it. After the delete, a copy of the server is kept for 14 days and you can restore the project from the Projects page. We email you when the balance reaches zero and again when it stops. Welcome-credit-only servers are deleted at zero, with a 3-day copy if the project went live. Our billing never touches your MYST, but the identity that holds it lives on the server, so a server deleted for good takes the identity and its MYST with it.
Price another size or region in the calculator, no signup.
Options
Mysterium VPN Gateway vs the Mysterium VPN app
Mysterium VPN is a subscription app that protects the phone or computer it runs on. The Mysterium VPN Gateway does the same routing for software: any app or container that accepts an HTTP proxy. A Mysterium node is the third option and the opposite one: it sells your bandwidth instead of buying it.
| Option | What it covers | How you pay | Where it runs |
|---|---|---|---|
| Mysterium VPN app | The device it is installed on | A subscription to Mysterium VPN | Your phone or computer |
| Mysterium VPN Gateway | Any app or container that accepts an HTTP proxy | MYST per GB, plus the server | Your server, behind your allow-list |
| Mysterium node | Nothing of yours: it carries other people's traffic | It earns MYST instead | Your server |
App details from mysteriumvpn.com.
When the Mysterium VPN app is the better choice
When the traffic is yours, from a browser or a phone. The app covers the whole device, is paid by subscription and needs no MYST balance to keep topped up. The gateway only pays off once software, not a person, is making the requests.
Status
Five checks on every gateway
- Every service is health-checked every 60 seconds.
- A failed gateway is never re-created on its own, so its identity and the MYST it holds are kept.
- Locked from the first request. The allow-list is set before the proxy starts and changes only when you change it in Settings.
- Port 3128 is published only to the addresses you allow.
- One gateway per project, enforced. A second gateway in the same project is refused.
~10 min to deploy
The console estimates about ten minutes for the gateway template after the server is ready; first-time server provisioning adds time.
Notes
Mysterium VPN Gateway limitations
- No password of its own. The allow-list is the only lock, so a wide list lets others spend your MYST.
- Nothing moves until it is funded. The gateway runs from the first boot, but the proxy does not answer until its identity is registered and funded with MYST.
- One gateway, no web interface. A project holds one gateway. There is no dashboard or domain; you manage it from the console and its logs. Deleting the gateway loses its saved identity and the MYST it holds.
Nothing here in your way? The template deploys in about ten minutes.
Launch Mysterium VPN Gateway Setup help
Not sure which exit setup fits?
Tell us what your apps need to reach and from where. We reply with the server we would pick and how the source list should look.
Help
Frequently asked questions
What does the gateway cost beyond the server?
Selfhost.dev bills only the server it runs on. Traffic through the Mysterium network costs MYST per GB, paid from the gateway's own identity once you register and fund it. That money goes to the network, not to us. Until the identity is funded, the gateway runs but the proxy does not answer. See pricing.
Is the Mysterium VPN Gateway a decentralized VPN?
It is a way into one. Mysterium is a decentralized network where independent operators run the exit nodes. The gateway does not encrypt a whole device the way a VPN app does; it is an HTTP proxy your apps call, which then sends their traffic out through those nodes.
Is the gateway the same as running a Mysterium node?
No, it is the opposite side. A node sells your server's bandwidth to the network and earns MYST. The gateway buys bandwidth from those nodes and pays MYST per GB. If you want to earn, deploy a Mysterium node instead; a project can hold one gateway.
Can I choose the exit country?
Yes. When you deploy, you can pick a country and a service type for the nodes the gateway uses; both are optional. Requests from your apps then leave from a node that matches. Leave both empty and the gateway takes a node in any country, on the default service type.
Your apps, one proxy, your allow-list. Paid per GB, never per seat.
- An HTTP proxy on port 3128, answering only your IPs
- Exit country and service type you choose
- A European 4 GB server, about $15 to $16 a month
About Selfhost.dev
Selfhost.dev is a managed self hosting platform for developers and small teams. Open source apps and databases on dedicated servers you control, billed by the hour, in six locations across three continents.
Best for: The Mysterium VPN Gateway, Mysterium nodes, WireGuard and managed PostgreSQL, MySQL, Redis, ClickHouse, OpenSearch and Kafka.