Blog

  1. WireGuard on AWS ECS

    by Justin Ludwig
    (blog)
  2. WireGuard
  3. Cloud
  4. AWS
  5. Containers
  6. Jumphost
    7.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more...

  7. Installing WireGuard on Amazon Linux

    by Justin Ludwig
    (blog)
  8. WireGuard
  9. Cloud
  10. AWS
    11.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2022.
    Read more...

  11. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
    (blog)
  12. WireGuard
  13. Networking
  14. Firewall
  15. firewalld
    16.
    How to use firewalld policies for network access control.
    Read more...

  16. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
    (blog)
  17. WireGuard
  18. Security
  19. Monitoring
  20. Pro Custodibus
    21.
    How to connect Pro Custodibus to Datadog.
    Read more...

  21. WireGuard DNS Configuration for Systemd

    by Jennifer Ormond
    (blog)
  22. WireGuard
  23. DNS
    24.
    Systemd-resolved DNS settings for WireGuard.
    Read more...

  24. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
    (blog)
  25. WireGuard
  26. Networking
  27. Firewall
  28. nftables
    29.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more...

  29. WireGuard Over TCP

    by Justin Ludwig
    (blog)
  30. WireGuard
  31. Networking
    32.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more...

  32. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
    (blog)
  33. WireGuard
  34. Containers
    35.
    How to safely expose container services through WireGuard.
    Read more...

  35. Wg-quick Default Firewall Rules

    by Justin Ludwig
    (blog)
  36. WireGuard
  37. Firewall
  38. iptables
  39. nftables
    40.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more...

  40. WireGuard With AWS Split DNS

    by Jennifer Ormond
    (blog)
  41. WireGuard
  42. Cloud
  43. AWS
  44. DNS
    45.
    Use a Route 53 private hosted zone to access internal AWS resources with WireGuard.
    Read more...

  45. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
    (blog)
  46. WireGuard
  47. Networking
    48.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more...

  48. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
    (blog)
  49. SSH
  50. WireGuard
  51. Jumphost
    52.
    Why WireGuard is better for jump servers than SSH.
    Read more...

  52. How to Use WireGuard With Nftables

    by Justin Ludwig
    (blog)
  53. WireGuard
  54. Networking
  55. Firewall
  56. nftables
    57.
    How to set up nftables for WireGuard under five different scenarios.
    Read more...

  57. Building, Using, and Monitoring WireGuard Containers

    by Justin Ludwig
    (blog)
  58. WireGuard
  59. Pro Custodibus
  60. Containers
    61.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more...

  61. High Availability WireGuard Site to Site

    by Justin Ludwig
    (blog)
  62. WireGuard
  63. Networking
  64. Routing
    65.
    How to connect sites with redundant WireGuard routers.
    Read more...

  65. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
    (blog)
  66. WireGuard
  67. Security
  68. Pro Custodibus
    69.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more...

  69. Add a WireGuard Peer With the Pro Custodibus GUI

    by Jennifer Ormond
    (blog)
  70. WireGuard
  71. Pro Custodibus
    72.
    How to add a WireGuard peer with the Pro Custodibus web UI.
    Read more...

  72. Securing Operational Technology With WireGuard

    by Justin Ludwig
    (blog)
  73. WireGuard
  74. Networking
  75. iptables
    76.
    How to secure Operational Technology systems with WireGuard
    Read more...

  76. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
    (blog)
  77. WireGuard
  78. Pro Custodibus
    79.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more...

  79. How to Use WireGuard With Firewalld

    by Justin Ludwig
    (blog)
  80. WireGuard
  81. Networking
  82. Firewall
  83. firewalld
    84.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more...

  84. DNS Updates to WireGuard Endpoints

    by Jennifer Ormond
    (blog)
  85. WireGuard
  86. Pro Custodibus
  87. DNS
    88.
    How to solve the DNS re-resolution problem for WireGuard endpoints with Pro Custodibus.
    Read more...

  88. High Availability WireGuard on Azure

    by Justin Ludwig
    (blog)
  89. WireGuard
  90. Cloud
  91. Networking
    92.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more...

  92. WireGuard SysV Init Script

    by Justin Ludwig
    (blog)
  93. WireGuard
    94.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more...

  94. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
    (blog)
  95. WireGuard
  96. Cloud
  97. Networking
  98. Jumphost
    99.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more...

  99. WireGuard Usage Monitoring

    by Justin Ludwig
    (blog)
  100. WireGuard
  101. Monitoring
  102. Pro Custodibus
    103.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more...

  103. How to Use WireGuard With UFW

    by Justin Ludwig
    (blog)
  104. WireGuard
  105. Networking
  106. Firewall
  107. UFW
    108.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more...

  108. Friendly Names for WireGuard Peers

    by Jennifer Ormond
    (blog)
  109. WireGuard
  110. Pro Custodibus
    111.
    How to set human-readable names for WireGuard peers.
    Read more...

  111. WireGuard Point to Site Routing

    by Justin Ludwig
    (blog)
  112. WireGuard
  113. Networking
    114.
    Routing strategies for the WireGuard Point to Site topology.
    Read more...

  114. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
    (blog)
  115. WireGuard
  116. Networking
    117.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more...

  117. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
    (blog)
  118. WireGuard
  119. Networking
  120. iptables
    121.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more...

  121. WireGuard Access Control With Iptables

    by Justin Ludwig
    (blog)
  122. WireGuard
  123. Networking
  124. Firewall
  125. iptables
    126.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more...

  126. Python 3 WireGuard Health Check

    by Justin Ludwig
    (blog)
  127. WireGuard
  128. Cloud
    129.
    AWS ELB WireGuard health-check service for Python 3.
    Read more...

  129. WireGuard AllowedIPs Calculator

    by Justin Ludwig
    (blog)
  130. WireGuard
    131.
    How to "subtract" blocks from your WireGuard AllowedIPs setting.
    Read more...

  131. WireGuard Network Map

    by Jennifer Ormond
    (blog)
  132. WireGuard
  133. Pro Custodibus
    134.
    How to visualize the connections between WireGuard peers.
    Read more...

  134. Four Ways to View WireGuard Logs

    by Justin Ludwig
    (blog)
  135. WireGuard
  136. Monitoring
    137.
    How to enable and view WireGuard logging.
    Read more...

  137. When to Use WireGuard

    by Jennifer Ormond
    (blog)
  138. WireGuard
    139.
    Three use-cases for using WireGuard for secure access to business/enterprise networks.
    Read more...

  139. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
    (blog)
  140. WireGuard
  141. Security
  142. Monitoring
  143. Pro Custodibus
    144.
    How to know when your WireGuard private keys have been compromised.
    Read more...

  144. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
    (blog)
  145. WireGuard
  146. Cloud
  147. AWS
  148. Networking
    149.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more...

  149. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
    (blog)
  150. WireGuard
  151. Cloud
  152. AWS
  153. Networking
  154. Jumphost
    155.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more...

  155. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
    (blog)
  156. WireGuard
  157. Security
    158.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more...

  158. Getting Started With Pro Custodibus

    by Justin Ludwig
    (blog)
  159. Pro Custodibus
  160. Tutorial
    161.
    How to start monitoring and managing your first WireGuard host.
    Read more...

  161. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
    (blog)
  162. WireGuard
  163. Monitoring
    164.
    Best tools for checking who's connecting to your VPN.
    Read more...

  164. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
    (blog)
  165. WireGuard
  166. Networking
    167.
    How packets flow between WireGuard endpoints.
    Read more...

  167. WireGuard Terminology

    by Justin Ludwig
    (blog)
  168. WireGuard
    169.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more...

  169. WireGuard Site to Site Configuration

    by Justin Ludwig
    (blog)
  170. WireGuard
  171. Networking
  172. iptables
    173.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more...

  173. WireGuard Point to Site Configuration

    by Justin Ludwig
    (blog)
  174. WireGuard
  175. Networking
  176. iptables
  177. Jumphost
    178.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more...

  178. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
    (blog)
  179. WireGuard
  180. Networking
  181. iptables
    182.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more...

  182. WireGuard Point to Point Configuration

    by Justin Ludwig
    (blog)
  183. WireGuard
  184. Networking
  185. iptables
    186.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more...

  186. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
    (blog)
  187. WireGuard
  188. Networking
    189.
    These are the four main topologies you'd consider when deciding how to connect endpoints over a WireGuard network.
    Read more...