dotfiles/wireguard

• Wireguard Quick Start
  • Linux CLI
    • Setup the Interface
    • Create Keys
    • Add Peer To Server
    • Start/Stop Interface

Wireguard Quick Start

https://www.wireguard.com/quickstart/

Level 3 VPN Protocol. Designed for Linux (works on BSD, MacOS and Windows too). Network Interface as most basic foundation of operation.

Linux CLI

Cheat Sheet: https://gist.github.com/chrisswanda/88ade75fc463dcf964c6411d1e9b20f4

Setup the Interface

  # ip link add dev wg0 type wireguard
  # ip address add dev wg0 10.1.0.2/24
  # ip address add dev wg0 10.1.0.2 peer 10.1.0.1

Create Keys

  $ umask 077
  $ wg genkey > privatekey
  $ wg pubkey < privatekey > publickey

or just

  $ wg genkey | tee privatekey | wg pubkey > publickey

Add Peer To Server

  # add peer
  wg set wg0 peer <client_pubkey> allowed-ips 10.0.0.x/32

  # verify connection
  wg

  # save to config
  wg-quick save wg0

Start/Stop Interface

  # Start/stop interface
  wg-quick up wg0
  wg-quick down wg0

  # Start/stop service
  $ sudo systemctl stop wg-quick@wg0.service
  $ sudo systemctl start wg-quick@wg0.service