UniFi
VPN
Protect every device at home, smart TVs and consoles too, with IPHush on your UniFi. Load the WireGuard file from your account, then choose one device or the whole network. Zero connection logs.
UniFi VPN at a glance
How to set up IPHush on UniFi
1 · Before you start
- Save a backup of the router’s settings
UniFi Network → Settings → System → Backups → Download
- Keep a way back in
Keep a cable to the router and its admin password at hand while you change it.
2 · Your file
- Make the file for your router
Sign in at iphush.com/app, open Devices, add a Router and choose UniFi. The app makes IPHush.conf for your router and shows this guide with your own values filled in.
3 · Add the tunnel
- Create the VPN client
Settings → VPN → VPN Client → Create New → VPN Type: WireGuard → Name: IPHush → Configuration file: IPHush.conf → Apply Changes
The file has no DNS line. If the import refuses it without one, add the line DNS = 10.96.0.1 under [Interface] and import it again.
- See the handshake
Settings → VPN → VPN Client shows IPHush as connected.
4 · Choose who uses it
One device
Only the devices you choose use IPHush; the others keep your normal connection.
- Route the device
- IPv6: no leak
The whole network
Every device on the network uses IPHush. The order matters: the router must reach the IPHush server outside the tunnel before the default route moves into it.
- Keep the IPHush server on your normal connection
- Default route through IPHush · Settings → Routing → Policy-Based Routes → Create Entry → Interface: IPHush → Source: the whole network → Apply
- DNS through IPHush · Settings → Networks → your LAN → DHCP Service Management → DNS Server: 10.96.0.1
- IPv6: no leak · Settings → Networks → your LAN → IPv6 Interface Type: None
- Optional kill switch · Settings → Routing → Policy-Based Routes → the IPHush entry → Kill Switch: on
5 · Check it works
- The tunnel is up
Settings → VPN → VPN Client shows IPHush as connected.
- Check from a device
On a device that should use IPHush, open https://whoami.iphush.com/ in a browser. It must show "iphush": true and an IPHush address. A device outside the option you chose shows false: that is expected.
UniFi VPN: questions
Which UniFi firmware works with IPHush?
UniFi gateways with UniFi Network 8 or newer.
Can the whole home go through IPHush on UniFi?
Every device on the network uses IPHush. The order matters: the router must reach the IPHush server outside the tunnel before the default route moves into it.
Is there a kill switch on UniFi?
Your choice: with it, routed devices have no internet while IPHush is down.
Which plan includes a router?
Family and Pro each include 1 router, and the router counts as one connection: every device behind it is protected. On Pro it leaves from your dedicated IP.
Has IPHush tested these steps on UniFi?
The steps follow the vendor’s current documentation; we have not yet run them on this router in our lab, and the guide in your account says so. Menu names can differ slightly between firmware versions.
More routers
Every device at home, one router
Family and Pro include a router and all 57 locations.