https://muisti.atk-neuvos.fi/tags/wireguard/Recent content in Wireguard on TerminalHugoenMon, 09 Nov 2026 00:00:00 +0000https://muisti.atk-neuvos.fi/posts/wireguard/Mon, 09 Nov 2026 00:00:00 +0000https://muisti.atk-neuvos.fi/posts/wireguard/<h1 id="background">Background</h1> <p>As easier or ad-hoc VPN solution to openvpn, wireguard provides user space tools for point-to-point networking with roaming clients.</p> <p>One static public host is needed.</p> <h1 id="network-topology">Network topology</h1> <h2 id="server">Server</h2> <p>Any publicly reachable host with optional DNS name.</p> <p>It also has private address 172.16.0.1 for WG interface.</p> <h2 id="roaming-peer-1">Roaming peer 1</h2> <p>Using any network anywhere. WG address is 172.16.0.2</p> <h1 id="package-setup-for-all-hosts">Package setup for all hosts</h1> <pre tabindex="0"><code>sudo apt install wireguard-tools </code></pre><h1 id="key-generation">Key generation</h1> <h2 id="server-1">Server</h2> <pre tabindex="0"><code>wg genkey &gt;/root/wg/srv.key wg pubkey &lt;/root/wg/srv.key &gt;/root/wg/srv.pub </code></pre><h2 id="peer-1">Peer 1</h2> <pre tabindex="0"><code>wg genkey &gt;/root/wg/stinky.key wg pubkey &lt;/root/wg/stinky.key &gt;/root/wg/stinky.pub </code></pre><h1 id="server-setup">Server setup</h1> <h2 id="allow-traffic-at-udp12345">Allow traffic at udp/12345</h2> <pre tabindex="0"><code>ufw allow udp/12345 comment &#39;wireguard&#39; </code></pre><h2 id="public-server-config">Public server config</h2> <p>The peer key below is stinky.pub contents</p>