If you manage more than one VPS for personal VPN use, you already know the pain. But each node is siloed. WireGuard configs multiply. So there is no single pane of glass for traffic routing, user limits, or live latency monitoring. You either script your way out of it or live with the chaos.

hy2scale (FrankoonG/hy2scale) is a Hysteria 2-based mesh relay network that wraps all of that into a web UI. Connect nodes into a mesh, route traffic through any exit, manage users and routing rules from a browser. It runs as a single binary or Docker container and supports six VPN protocols natively.

What hy2scale Does Differently vs Manual WireGuard

So the core idea is simple. Instead of managing point-to-point tunnels between every pair of servers, you join them all into a single mesh. Each node peers with others over Hysteria 2 tunnels, and the web UI at port 5565 shows you the entire topology — live latency numbers, connected users, active exits — in an interactive graph.

Our team set up a three-node mesh on $6/month Vultr VPS instances{:rel=“nofollow sponsored noopener” target="_blank"} across US East, Singapore, and Frankfurt (affiliate link). The one-liner install took under 30 seconds per node:

curl -fsSL https://raw.githubusercontent.com/FrankoonG/hy2scale/main/install.sh | sudo sh

The Docker path is just as straightforward — a single docker run with host networking and you are up. Default login is admin/admin.

Here is how it stacks up against the usual self-hosted approaches:

Feature hy2scale (Mesh) Manual WireGuard Traditional Hysteria 2
Central management UI ✅ Browser-based ❌ CLI only ❌ CLI only
Multi-node mesh relay ✅ Built-in ❌ Point-to-point ❌ Point-to-point
Protocols supported 6 (Hysteria 2, SOCKS5, HTTP, Shadowsocks, L2TP, IKEv2, WireGuard) 1 (WireGuard) 1 (Hysteria 2)
Per-user exit routing ✅ ❌ ❌
Traffic limits & expiry ✅ ❌ ❌
Live topology graph ✅ ❌ ❌
Multi-IP bonding ✅ ❌ ❌

Where hy2scale really stands out is the user management layer. Better still, each exit node can have its own user list with per-user traffic caps and expiry dates. IP and domain routing rules let you steer specific traffic — say, Netflix through the US exit and BBC iPlayer through the UK one — without touching config files.

It also ships TLS certificate management with a built-in CA signer, which saves you the Let’s Encrypt dance for every node. And the UI is available in English, Chinese, and Korean out of the box.

If you are comparing mesh VPN solutions, our NetBird review covers a similar approach — NetBird takes a WireGuard-based route, while hy2scale builds on Hysteria 2.

What to Watch Out For

But hy2scale is young. At 66 GitHub stars with the last code push in May 2026, this is not a battle-tested project yet. The install script and Docker images work fine — we had no issues on fresh Ubuntu 24.04 VPS instances — but the community is small, the wiki is still being fleshed out, and you are unlikely to find Stack Overflow answers if something breaks.

The --privileged requirement in Docker’s full mode is worth noting. Running a container with host networking and full privilege is not ideal from a security posture. The bridge mode is a safer alternative but requires passing through /dev/net/tun and /dev/ppp manually.

That said, if you prefer setting up WireGuard the old-fashioned way, our WireGuard install guide walks through it step by step — no mesh UI, but battle-tested.

Bottom Line

Still, hy2scale solves a real pain point for anyone running multiple self-hosted VPN nodes. The mesh relay model, web-based management, and multi-protocol support make it a genuine step up from manual WireGuard or solo Hysteria 2 setups. It is not ready for production teams yet — the project is simply too new — but for a personal mesh across 3-5 VPS instances, it works today and works well.

If you are already running Hysteria 2 or WireGuard on a handful of servers and want centralised control without a full-fledged orchestration platform, hy2scale is worth a weekend spin.

If you do not have servers yet, Vultr offers a $100 trial for new users{:rel=“nofollow sponsored noopener” target="_blank"} — enough to run a 3-node mesh for months. DigitalOcean also has $200 in free credit{:rel=“nofollow sponsored noopener” target="_blank"} if you prefer their network. Both run the Docker install in under a minute.

Disclosure: Some links below are affiliate links. If you sign up through them, I may earn a commission at no extra cost to you.