WireNets OpenVPN

Private tunnels from real servers, delivered as ready-to-import OpenVPN files for customers who need a clean connection without wrestling with certificates.

Choose region Generate .ovpn

Canada United States Europe Global bundle

Global VPN network routes across server regions

Canada Toronto route, 2 .ovpn profiles

Checkout

.ovpn delivery Customer manager Certificate provisioning Region selection Monthly checkout Admin approval workflow

Choose region, seats, and delivery.

The storefront is built for a checkout flow where payment creates a customer account, then the manager generates a unique certificate and `.ovpn` file from the assigned server pool.

Personal

Single Tunnel

CAD $12/mo

One customer login with one region and two downloadable OpenVPN profiles.

Profiles: 2
Region: 1
Devices: 2
Type: .ovpn

Popular

Team Pack

CAD $29/mo

Five profiles, region switching by request, and manager access for profile rotation.

Profiles: 5
Region: 1+
Devices: 5
Type: .ovpn

Global

Global Bundle

CAD $49/mo

Multi-region access for customers who need several server routes in one account.

Profiles: 10
Region: All
Devices: 10
Type: .ovpn

Custom

Managed Pool

Quote

Dedicated server pool, branded customer access, and admin-controlled certificate lifecycle.

Profiles: Scoped
Region: Custom
Devices: Scoped
Type: .ovpn

Checkout

Single Tunnel

CAD $12/mo Canada route with 2 generated OpenVPN profiles.

Add services Extra profile + CAD $4/mo Priority setup + CAD $15 once Managed certificate rotation + CAD $9/mo

Email for manager login Profile label

Live payment should run through Stripe Checkout or a processor-hosted page. Certificate generation should happen only after paid status and admin-side server assignment.

Customer manager and .ovpn generator.

After checkout, the customer sees a manager that can request or rotate an OpenVPN profile. The backend should talk to server-side provisioning scripts over SSH/SFTP with secrets stored outside the repo.

Customer manager Canada / Single Tunnel

Ready

Profile laptop-home-ca.ovpn

Status Awaiting checkout

Expires 30 days after issue

client
dev tun
proto udp
remote ca.wirenets.example 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-256-GCM
auth SHA256
verb 3

# Certificate blocks are generated after checkout.

Provisioning flow

Paid checkoutStore creates order, customer, plan, selected region, and device allowance.
Server assignmentAdmin pool picks the best OpenVPN node without exposing root credentials.
Certificate issueBackend runs a locked provisioning command to create a client certificate and config.
Manager deliveryCustomer downloads the `.ovpn`, rotates it, or requests support from one place.

Admin pieces to wire next.

These are the production pieces that should sit behind the storefront before selling live VPN access.

Secrets vault

Move server passwords into environment variables or a vault, rotate the pasted passwords, and use SSH keys with limited sudo commands.

Provisioning worker

Queue paid orders and generate certificates from EasyRSA/OpenVPN scripts on the assigned node.

Customer portal

Store generated config metadata, support profile downloads, rotation, revoke, and expiry notices.

Checkout webhooks

Use processor webhooks to unlock generation only after payment succeeds and to pause accounts on failed renewal.