pfSense Plus / CE 2.7+ WireGuard Client & Policy Gateway: High-Speed 10Gbps WireGuard VPN Setup Guide
Step-by-step pfSense Plus / CE 2.7+ WireGuard package configuration. Set up peer tunnels to SWEEPR London 10Gbps RAM-only nodes, gateway monitoring, and outbound NAT rules.
Why Run SWEEPR VPN WireGuard on pfSense Plus / CE 2.7+ WireGuard Client & Policy Gateway?
Unlike proprietary VPN clients that lock you into closed-source daemons, SWEEPR VPN provides one-click native WireGuard configuration generator files alongside our featherlight ~3.7 MB desktop app. Running SWEEPR VPN on pfSense Plus / CE 2.7+ WireGuard Client & Policy Gateway (Enterprise Firewall & Gateway) gives you:
- 10Gbps RAM-Only Bare-Metal Endpoints: Direct peering in London (
4ms), Amsterdam (8ms), Frankfurt (11ms), Stockholm (14ms), Zurich, and New York. - In-Tunnel DNS & Smart-TV ACR Shield: Point DNS to
10.66.0.1to block ISP DNS hijacking and Smart-TV Automatic Content Recognition (ACR) screenshot telemetry across your LAN. - Zero Disk Persistence: All SWEEPR VPN WireGuard nodes boot from cryptographically verified RAM images with zero connection or DNS logs.
Step-by-Step Configuration Commands for pfSense Plus / CE 2.7+ WireGuard Client & Policy Gateway
# In pfSense WebGUI:
# VPN -> WireGuard -> Tunnels -> Add Tunnel (Listen Port 51820, MTU 1412/1420)
# VPN -> WireGuard -> Peers -> Add Peer (Endpoint lon01.sweeprvpn.com:51820, AllowedIPs 0.0.0.0/0)
# Interfaces -> Interface Assignments -> Assign tun_wg0 -> Set IPv4 Static (10.66.x.x)
# Firewall -> NAT -> Outbound -> Hybrid Outbound NAT Rule -> Interface SWEEPR_WGRecommended Endpoint & MTU Reference Table
| Endpoint Node | Hostname / Port | Typical UK/EU Latency | Recommended MTU |
|---|---|---|---|
| London Docklands (UK-LON-01) | lon01.sweeprvpn.com:51820 | 4 ms | 1420 (Cable/DHCP) / 1412 (PPPoE) |
| Amsterdam Core (NL-AMS-01) | ams01.sweeprvpn.com:51820 | 8 ms | 1420 (Cable/DHCP) / 1412 (PPPoE) |
| Frankfurt IX (DE-FRA-01) | fra01.sweeprvpn.com:51820 | 11 ms | 1420 (Cable/DHCP) / 1412 (PPPoE) |
| Stockholm Core (SE-STO-01) | sto01.sweeprvpn.com:51820 | 14 ms | 1420 (Cable/DHCP) / 1412 (PPPoE) |
Transparent Anchor Pricing & 14-Day Money-Back Guarantee
Unlike legacy VPNs that trap you in 24-month renewals or 250 MB bloated installers, SWEEPR VPN offers straightforward pricing with an instant free 30-second Home Wi-Fi Device Scanner:
| Plan Tier | Billing Cycle | Effective Monthly Cost | Included Features |
|---|---|---|---|
| Yearly Plan (Core Cash Cow — Save 50%) | £74.99 / year ($95.99 USD | €89.99 EUR) | £6.25 / mo | 10Gbps RAM-Only WireGuard (UK, NL, DE, SE, CH, US), 10 Devices, Kernel Kill-Switch, 14-Day Guarantee |
| 6-Monthly Plan (Mid-Tier Anchor — Save 35%) | £48.99 / 6 months ($61.99 USD | €58.99 EUR) | £8.17 / mo | All 10Gbps WireGuard Core Locations, In-Tunnel DNS, Port-Forwarding & Streaming Support |
| Monthly Plan (Flexible + £1.99 1st Month) | £1.99 1st Month, then £12.49 / mo | £12.49 / mo | Cancel anytime in 1 click, full 10Gbps WireGuard & Wi-Fi diagnostic access |
| SWEEPR Wi-Fi Radar & Smart-TV Shield Add-On | +£14.99/yr | +£9.99/6mo | +£1.99/mo | Optional Add-On | 24/7 Unknown Wi-Fi Intruder Alerts + Samsung/LG/Sony/Roku/Fire TV ACR Spy Blocker |
Frequently Asked Questions
Can I run pfSense Plus / CE 2.7+ WireGuard Client & Policy Gateway alongside the SWEEPR VPN desktop app?
Yes. Every SWEEPR VPN plan supports up to 10 simultaneous WireGuard peers across routers, NAS appliances, Linux servers, Windows, macOS, iOS, and Android.
What DNS server should I use on pfSense Plus / CE 2.7+ WireGuard Client & Policy Gateway?
Always set your WireGuard interface DNS to 10.66.0.1 so DNS queries travel inside the encrypted WireGuard tunnel and cannot be intercepted by your ISP.
Why are my HTTPS pages stalling after enabling WireGuard on pfSense Plus / CE 2.7+ WireGuard Client & Policy Gateway?
If your ISP uses PPPoE (such as BT, Sky, TalkTalk, Plusnet, or Vodafone FTTP), lower the WireGuard interface MTU from 1420 to 1412 and enable TCP MSS clamping to 1352–1360.