Blog

  1. Best Linux Firewall for WireGuard

    by Jennifer Ormond
  2. WireGuard
  3. Networking
  4. Firewall
  5. firewalld
  6. nftables
    7.
    Best options for setting up a simple firewall for WireGuard on Linux.
    Read more…

  7. How to Set Up a WireGuard Jumphost

    by Jennifer Ormond
  8. WireGuard
  9. Networking
  10. Firewall
  11. nftables
  12. Point to Site
    13.
    A simple WireGuard jumphost tutorial.
    Read more…

  13. Installing Libsodium on Amazon Linux 2022

    by Justin Ludwig
  14. Cloud
  15. AWS
    16.
    How to install libsodium on Amazon Linux 2022.
    Read more…

  16. WireGuard in Podman Rootless Containers

    by Justin Ludwig
  17. WireGuard
  18. Containers
    19.
    13 common patterns for running WireGuard in Podman containers.
    Read more…

  19. OPNsense Push Routes Through WireGuard Via OSPF

    by Justin Ludwig
  20. WireGuard
  21. Networking
  22. Routing
  23. Site to Site
    24.
    How to use OSPF to share routes from an OPNsense router over WireGuard.
    Read more…

  24. OPNsense WireGuard Site to Site

    by Justin Ludwig
  25. WireGuard
  26. Networking
  27. Site to Site
    28.
    How to connect an OPNsense router to a Linux router over WireGuard.
    Read more…

  28. WireGuard Port Forwarding From the Internet

    by Justin Ludwig
  29. WireGuard
  30. Networking
  31. Routing
  32. Point to Site
    33.
    How to forward inbound traffic from the Internet to another server using WireGuard.
    Read more…

  33. Zero Trust Architecture With WireGuard

    by Justin Ludwig
  34. WireGuard
  35. Networking
  36. Firewall
  37. nftables
  38. Hub and Spoke
    39.
    How to get started implementing a zero-trust architecture.
    Read more…

  39. Connecting WireGuard and OpenVPN

    by Justin Ludwig
  40. WireGuard
  41. Networking
  42. Hub and Spoke
    43.
    How to connect WireGuard and OpenVPN networks.
    Read more…

  43. WireGuard Automatic Key Rotation With Pro Custodibus

    by Jennifer Ormond
  44. WireGuard
  45. Security
  46. Keys
  47. Pro Custodibus
    48.
    Why and how to set up automatic WireGuard preshared key rotation with Pro Custodibus.
    Read more…

  48. Set Up a New User Device With WireGuard MFA

    by Jennifer Ormond
  49. WireGuard
  50. Security
  51. Pro Custodibus
    52.
    How to enroll a new user and device into WireGuard MFA with Pro Custodibus.
    Read more…

  52. WireGuard Multi-Factor Authentication With Pro Custodibus

    by Justin Ludwig
  53. WireGuard
  54. Security
  55. Pro Custodibus
    56.
    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more…

  56. Multi-Hop WireGuard

    by Justin Ludwig
  57. WireGuard
  58. Networking
  59. Routing
  60. Hub and Spoke
  61. Point to Site
    62.
    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more…

  62. Configure WireGuard via AWS SSM Parameter Store

    by Justin Ludwig
  63. WireGuard
  64. Cloud
  65. AWS
  66. Containers
    67.
    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more…

  67. WireGuard on AWS ECS

    by Justin Ludwig
  68. WireGuard
  69. Cloud
  70. AWS
  71. Containers
  72. Point to Site
    73.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more…

  73. Installing WireGuard on Amazon Linux

    by Justin Ludwig
  74. WireGuard
  75. Cloud
  76. AWS
    77.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2022.
    Read more…

  77. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
  78. WireGuard
  79. Networking
  80. Firewall
  81. firewalld
    82.
    How to use firewalld policies for network access control.
    Read more…

  82. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
  83. WireGuard
  84. Security
  85. Monitoring
  86. Pro Custodibus
    87.
    How to connect Pro Custodibus to Datadog.
    Read more…

  87. WireGuard DNS Configuration for Systemd

    by Jennifer Ormond
  88. WireGuard
  89. DNS
    90.
    Systemd-resolved DNS settings for WireGuard.
    Read more…

  90. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
  91. WireGuard
  92. Networking
  93. Firewall
  94. nftables
  95. Hub and Spoke
    96.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more…

  96. WireGuard Over TCP

    by Justin Ludwig
  97. WireGuard
  98. Networking
  99. Point to Point
    100.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more…

  100. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
  101. WireGuard
  102. Containers
    103.
    How to safely expose container services through WireGuard.
    Read more…

  103. Wg-quick Default Firewall Rules

    by Justin Ludwig
  104. WireGuard
  105. Firewall
  106. iptables
  107. nftables
    108.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more…

  108. WireGuard With AWS Split DNS

    by Jennifer Ormond
  109. WireGuard
  110. Cloud
  111. AWS
  112. DNS
    113.
    Use a Route 53 private hosted zone to access internal AWS resources with WireGuard.
    Read more…

  113. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
  114. WireGuard
  115. Networking
  116. Hub and Spoke
    117.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more…

  117. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
  118. SSH
  119. WireGuard
  120. Point to Site
    121.
    Why WireGuard is better for jump servers than SSH.
    Read more…

  121. How to Use WireGuard With Nftables

    by Justin Ludwig
  122. WireGuard
  123. Networking
  124. Firewall
  125. nftables
    126.
    How to set up nftables for WireGuard under five different scenarios.
    Read more…

  126. Building, Using, and Monitoring WireGuard Containers

    (updated )
    by Justin Ludwig
  127. WireGuard
  128. Pro Custodibus
  129. Containers
    130.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more…

  130. High Availability WireGuard Site to Site

    by Justin Ludwig
  131. WireGuard
  132. Networking
  133. Routing
  134. High Availability
  135. Site to Site
    136.
    How to connect sites with redundant WireGuard routers.
    Read more…

  136. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
  137. WireGuard
  138. Security
  139. Keys
  140. Pro Custodibus
    141.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more…

  141. Add a WireGuard Peer With the Pro Custodibus GUI

    by Jennifer Ormond
  142. WireGuard
  143. Pro Custodibus
    144.
    How to add a WireGuard peer with the Pro Custodibus web UI.
    Read more…

  144. Securing Operational Technology With WireGuard

    by Justin Ludwig
  145. WireGuard
  146. Networking
  147. iptables
  148. Site to Site
    149.
    How to secure Operational Technology systems with WireGuard
    Read more…

  149. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
  150. WireGuard
  151. Pro Custodibus
  152. Point to Site
    153.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more…

  153. How to Use WireGuard With Firewalld

    by Justin Ludwig
  154. WireGuard
  155. Networking
  156. Firewall
  157. firewalld
    158.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more…

  158. DNS Updates to WireGuard Endpoints

    by Jennifer Ormond
  159. WireGuard
  160. Pro Custodibus
  161. DNS
    162.
    How to solve the DNS re-resolution problem for WireGuard endpoints with Pro Custodibus.
    Read more…

  162. High Availability WireGuard on Azure

    by Justin Ludwig
  163. WireGuard
  164. Cloud
  165. Networking
  166. High Availability
    167.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more…

  167. WireGuard SysV Init Script

    by Justin Ludwig
  168. WireGuard
    169.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more…

  169. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
  170. WireGuard
  171. Cloud
  172. Networking
  173. Point to Site
    174.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more…

  174. WireGuard Usage Monitoring

    by Justin Ludwig
  175. WireGuard
  176. Monitoring
  177. Pro Custodibus
    178.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more…

  178. How to Use WireGuard With UFW

    by Justin Ludwig
  179. WireGuard
  180. Networking
  181. Firewall
  182. UFW
    183.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more…

  183. Friendly Names for WireGuard Peers

    by Jennifer Ormond
  184. WireGuard
  185. Pro Custodibus
    186.
    How to set human-readable names for WireGuard peers.
    Read more…

  186. WireGuard Point to Site Routing

    by Justin Ludwig
  187. WireGuard
  188. Networking
  189. Point to Site
    190.
    Routing strategies for the WireGuard Point to Site topology.
    Read more…

  190. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
  191. WireGuard
  192. Networking
  193. Point to Site
    194.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more…

  194. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
  195. WireGuard
  196. Networking
  197. iptables
  198. Point to Site
    199.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more…

  199. WireGuard Access Control With Iptables

    by Justin Ludwig
  200. WireGuard
  201. Networking
  202. Firewall
  203. iptables
    204.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more…

  204. Python 3 WireGuard Health Check

    by Justin Ludwig
  205. WireGuard
  206. Cloud
    207.
    AWS ELB WireGuard health-check service for Python 3.
    Read more…

  207. WireGuard AllowedIPs Calculator

    by Justin Ludwig
  208. WireGuard
    209.
    How to “subtract” blocks from your WireGuard AllowedIPs setting.
    Read more…

  209. WireGuard Network Map

    by Jennifer Ormond
  210. WireGuard
  211. Pro Custodibus
    212.
    How to visualize the connections between WireGuard peers.
    Read more…

  212. Four Ways to View WireGuard Logs

    by Justin Ludwig
  213. WireGuard
  214. Monitoring
    215.
    How to enable and view WireGuard logging.
    Read more…

  215. When to Use WireGuard

    by Jennifer Ormond
  216. WireGuard
    217.
    Three use-cases for using WireGuard for secure access to business/enterprise networks.
    Read more…

  217. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
  218. WireGuard
  219. Security
  220. Keys
  221. Monitoring
  222. Pro Custodibus
    223.
    How to know when your WireGuard private keys have been compromised.
    Read more…

  223. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
  224. WireGuard
  225. Cloud
  226. AWS
  227. Networking
  228. High Availability
    229.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more…

  229. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
  230. WireGuard
  231. Cloud
  232. AWS
  233. Networking
  234. Point to Site
    235.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more…

  235. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
  236. WireGuard
  237. Security
  238. Keys
    239.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more…

  239. Getting Started With Pro Custodibus

    by Justin Ludwig
  240. Pro Custodibus
    241.
    How to start monitoring and managing your first WireGuard host.
    Read more…

  241. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
  242. WireGuard
  243. Monitoring
    244.
    Best tools for checking who’s connecting to your VPN.
    Read more…

  244. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
  245. WireGuard
  246. Networking
    247.
    How packets flow between WireGuard endpoints.
    Read more…

  247. WireGuard Terminology

    by Justin Ludwig
  248. WireGuard
    249.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more…

  249. WireGuard Site to Site Configuration

    by Justin Ludwig
  250. WireGuard
  251. Networking
  252. iptables
  253. Site to Site
    254.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more…

  254. WireGuard Point to Site Configuration

    by Justin Ludwig
  255. WireGuard
  256. Networking
  257. iptables
  258. Point to Site
    259.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more…

  259. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
  260. WireGuard
  261. Networking
  262. iptables
  263. Hub and Spoke
    264.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more…

  264. WireGuard Point to Point Configuration

    by Justin Ludwig
  265. WireGuard
  266. Networking
  267. iptables
  268. Point to Point
    269.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more…

  269. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
  270. WireGuard
  271. Networking
    272.
    These are the four main topologies you’d consider when deciding how to connect endpoints over a WireGuard network.
    Read more…