**Lantern 需要您的帮助**：您的捐款为数百万人提供无审查的互联网服务。**[立即捐款](/donate)!**


lantern

## The trust problem with VPNs

Here's something the VPN industry doesn't love talking about: when you use a traditional VPN, you're not eliminating the middleman. You're choosing a different one.

Without a VPN, your ISP can see your traffic. With a VPN, your VPN provider can see your traffic instead. You've shifted trust, not removed it. For most people, that tradeoff is fine. If you're using a reputable VPN provider with an audited no-log policy, it can be a real improvement over an ISP that may be legally compelled to hand over your browsing history.

But what if you didn't have to trust anyone?

## What is Lantern Private Server?

Lantern Private Server lets you run your own VPN server on infrastructure you control. Your traffic flows through a server you set up, on a cloud account you own, in a region you choose. No third party touches your data.

It's a free feature. Lantern doesn't charge anything for it. You pay only what your cloud provider charges for the server itself, typically a few dollars per month.

There are two ways to set it up, depending on how much control you want.

## Why private servers matter for circumvention

If you're in a censored region, private servers solve a specific problem that centralized VPN services struggle with.

Large VPN providers run thousands of servers, but those servers live on well-known data center IP ranges. Censors maintain blocklists of these ranges and can shut down access to entire VPN networks in one move. During the 2022 protests in Iran, many circumvention tools were blocked within days1 as authorities targeted known VPN infrastructure.

A private server is different. It's a single server on a standard cloud provider, running on an IP address that isn't associated with any VPN company. Censors would have to identify and block it individually. That's much harder than blocking a known VPN network's IP ranges, and doing it at scale risks collateral damage to legitimate cloud services.

You can also share access with trusted friends and family. If someone you know is in a censored region, you can generate a secure link that gives them access to your server. More on that below.

## Quick Setup: a few clicks in the Lantern app

This is the path for people who want the benefits of a private server without touching a terminal.

**What you need:** The Lantern app on any platform and a DigitalOcean account. That's it.

**How it works:**

1. Open the Lantern app and navigate to Private Server setup.  
2. Connect your DigitalOcean account.  
3. Choose a server location. For example, if you're sharing access with someone in Iran, a server in a nearby uncensored country will give them better speeds than one on the other side of the world.  
4. Lantern handles the rest. It provisions the server, configures the protocols, and connects your app automatically.

Once it's running, you connect through the Lantern app just like you would with Lantern's regular network. You can also toggle back to Lantern's network anytime if your private server is down or you want access to a different region.

**Sharing access** is straightforward. Generate a link in the app and send it to someone you trust. Each share link is unique per user and timestamped, so they expire. This isn't open access. You decide who gets in.

## Manual Setup: full control for technical users

If you want to run Lantern's server software on your own infrastructure, the [Lantern Server Manager](https://github.com/getlantern/lantern-server-manager) is open source and gives you complete visibility into what's running.

### Deployment options

You can deploy the server manager in a few ways:

* **Docker.** Pull the image and run it in a container. This is the fastest path if you already have Docker on your server.  
* **Single binary.** Download and run directly on a Linux machine. No container runtime needed.  
* **Cloud marketplace.** Deploy through DigitalOcean, Google Cloud, or AWS marketplace listings for a more guided setup.

Any VPS provider will work. You're not locked into a specific cloud platform.

### What happens at startup

When the server starts for the first time, it automatically generates random TLS certificates and access keys. You don't need to configure cryptographic material yourself unless you want to provide your own.

The server creates a "root" access key and stores it in a config file. This key is how you authenticate to manage the server. **Keep it safe.** If you lose this key, you'll need to start over with a fresh deployment. There's no recovery mechanism, by design. Nobody, including Lantern, has a backdoor to your server.

### Managing your server

The server manager gives you three interfaces:

* **Web UI.** A browser-based dashboard for managing users and monitoring the server.  
* **Console UI.** A terminal interface for the same management tasks.  
* **REST API.** For scripting and automation. If you want to build your own tooling on top of the server, this is how.

### Connecting clients

After setup, the server generates a QR code. Scan it with the Lantern app to connect. You can also generate share links through any of the management interfaces. Each link is unique to the recipient and has an expiration timestamp.

## When to use a private server vs. Lantern's network

A private server isn't better in every situation. Here's a practical breakdown.

**A private server makes more sense when:**

* You want zero third-party involvement in your traffic.  
* You're sharing access with specific people in censored regions and need an IP that isn't on any blocklist.  
* You need a server in a specific geographic location for latency or legal reasons.  
* You want full visibility into the server software and configuration.

Lantern's network makes more sense when:

* You need access to many server locations across different regions.  
* You want Lantern's protocol diversity and automatic fallback when one protocol gets blocked. With 15+ years of experience in censorship circumvention, Lantern's network is optimized for exactly this.  
* You don't want to manage infrastructure at all.  
* Your private server's IP gets blocked and you need an immediate alternative.

The good news is you don't have to choose permanently. The Lantern app lets you toggle between your private server and the Lantern network whenever you want.

## Get started

**Quick setup:** Download Lantern and look for Private Server in the app settings. You'll need a [DigitalOcean](https://www.digitalocean.com/) account to get started.

**Manual setup:** Head to the [Lantern Server Manager repo on GitHub](https://github.com/getlantern/lantern-server-manager) for documentation, deployment instructions, and the source code. Everything is open source.

If you run into issues, check our support documentation or reach out to the Lantern team.

---

## Footnotes

1. "Iran Shuts Down Internet Access as Mahsa Amini Protests Intensify," NetBlocks, September 2022\. Multiple circumvention tools reported widespread blocking as Iranian authorities expanded Deep Packet Inspection (DPI) filtering during the nationwide protests. ↩



Your Own VPN Server. No Middleman.

*After a year of shutdowns, Lantern is working across Iran again, and people are coming back fast. Here is what that means, and how you can help keep them online.*

> "Perhaps you're not fully aware of the impact you have on our lives. Many of us earn our livelihood through the internet, gain education, and connect with loved ones we miss dearly. You help us survive day by day." **- Single mother, Iran**

**On September 1, about 32,000 people in Iran used Lantern each day. By October 27, more than 275,000 did: nearly eight times as many in under two months.**

![lantern-iran-daily-users-oct27.png](https://media.lantern.io/lantern_iran_daily_users_oct27_668fb4e98b.png)

Most people in Iran can't reach the open internet without a tool like Lantern, and most can't pay for one. That's why Lantern is free there, and always has been. Your support keeps it that way.

**Our ask: give to keep Lantern free for people in Iran. $10 a month keeps about 90 people online.** [Give at lantern.io/donate](https://lantern.io/donate)

## Why now

Iran spent much of 2026 offline. The [longest nationwide shutdown on record](https://en.wikipedia.org/wiki/2026_Internet_blackout_in_Iran) began January 8, and a second hit on February 28. At its worst, traffic fell to about 1% of normal. 

Access returned in late May, but not the open internet. Iran moved to a tiered system: pre-approved sites for most people, fuller access for a favored few. For everyone else, a circumvention tool is the difference between the state's version of the internet and the real one.

Now Lantern is climbing fast in Iran. After months of engineering work, recent versions connect on a much wider range of Iranian networks, and people who couldn't connect for years are coming back. One user told us: *"After three years, I downloaded Lantern again ... It's honestly working really well, better than any other VPN I have."* Iranian digital rights groups and independent media are helping spread the word.

We've been here before. During the 2022 Women, Life, Freedom protests, more than 10 million people in Iran used Lantern each month, and at its peak Lantern carried up to 13% of the country's internet traffic. We've been doing this since 2010.

## How Lantern keeps people connected

A typical VPN runs a few standard connection types on a fixed set of servers. In Iran, censors recognize those connection types and block known servers quickly. Lantern runs many ways of connecting at once, disguises them as ordinary web traffic, and replaces servers as they're blocked.

The censorship keeps getting more advanced. Iran is building its system on the model of China's Great Firewall, with China's help. Chinese companies have supplied equipment for Iran's filtering since [at least 2010](https://www.article19.org/resources/tightening-the-net-chinas-infrastructure-of-oppression-in-iran/), and this year [officials said](https://www.rferl.org/a/iran-china-internet-blackout-censorship-tool/33764398.html) they imported Chinese equipment to make the new restrictions permanent. A tool that stays the same eventually stops working, so Lantern keeps changing:

- When censors block one way of connecting, we can send users a new one within hours, without an app update.
- Each person is routed through whatever is working on their network that day.
- Some of Lantern's connection methods are designed and tested by AI systems against the censor's current behavior.
- When our servers are blocked, users' devices can help each other find a way through.

### For the technically curious

- [Protocols](https://lantern.io/circumvention). Hysteria2 and TUIC (built on QUIC for lossy, high-latency connections), and VLESS, plus obfuscation layers like AnyTLS and ShadowTLS that make VPN traffic look like ordinary web browsing to deep packet inspection.
- **WATER** (WebAssembly Transport Executables Runtime). We ship new transport protocols from the server side, so a fix reaches users in hours rather than after an app-store review.
- **AI-generated protocols.** [Samizdat](https://github.com/getlantern/samizdat) and [Reflex](https://github.com/getlantern/lantern-box/blob/main/protocol/reflex/inbound.go) are running in production. 
- **Per-user routing.** A machine-learning system assigns each user the routes that are working on their network that day.
- **CounterPunch.** Users' devices share connection details with each other when central servers are blocked.

Our code is open source on [GitHub](https://github.com/getlantern).

## Coming soon: a connection from someone you trust

Our next step turns Iran's diaspora into a lifeline. With **Invites**, anyone in Iran will be able to ask a friend or relative abroad to be their private connection to the open internet.

1. Someone in Iran invites a friend or relative outside the country.
2. The friend accepts and becomes their personal bridge.
3. Traffic runs through that one person's home connection. No public list holds the address, so there is nothing for the censor to block.

Public servers end up on blocklists. A private invite route doesn't. And every invite is a person outside Iran hearing about Lantern from someone they love.

## What it takes to keep one person online

Keeping someone in Iran connected costs Lantern about 11¢ a month. That means **$10 a month keeps about 90 people online**, and every new person who connects adds to what it takes to keep them there. Your gift pays for the servers and bandwidth they use, the engineering each new block demands, and the capacity to scale up the moment censorship tightens.

We work hard to make every dollar go further:

- **We keep cutting what each connection costs.** Since September, our cost per gigabyte has fallen about 85%, and the cost per person dropped from about 20¢ to about 11¢ a month, while the number of people grew nearly eightfold.
- **A small team.** Lantern serves more than a million users a month with a team of fewer than 20.
- **Paying users help fund free ones.** Lantern Pro subscriptions from people in open countries help cover free access for people in places like Iran.
- **Free distribution.** In Iran, Lantern spreads through Iranian digital rights groups, independent media and word of mouth, so our spending there goes to keeping people connected.
- **Volunteers carry traffic.** With [Action Mode](https://actionmode.lantern.io), people in uncensored countries share their own connection with people in censored ones.
- **Open source.** Our code and findings are shared with other circumvention tools, so one discovery protects more people than ours.

## Help keep Iran connected

The technology is working. People are connecting. Help us keep it that way.

- **Give.** [Donate at lantern.io/donate](https://lantern.io/donate), or [give monthly](https://lantern.io/donate/monthly). Gifts are tax-deductible.
- **Give stock, crypto or through a donor-advised fund.** Email give@lantern.io and we'll help.
- **Share your connection.** Turn on [Action Mode](https://actionmode.lantern.io) and lend your bandwidth to someone who is blocked. It takes a minute.
- **Be someone's connection.** When Private Proxy launches, say yes when a friend or relative in Iran asks you to be their bridge.
- **Share this post.** Send it to one person who cares about Iran or an open internet.

*Lantern is built by Brave New Software Project, Inc., a U.S. 501(c)(3) nonprofit (EIN 27-3272909), and has kept people online since 2010. Gifts are tax-deductible to the extent allowed by law. Press and major gifts: give@lantern.io*

Iran Is Coming Back Online. Help Keep It There.

Latest Posts

Your Own VPN Server. No Middleman.

— Lantern Blog

Iran Is Coming Back Online. Help Keep It There.

Latest Posts

Your Own VPN Server. No Middleman.