Blog

  1. Troubleshooting WireGuard DNS Issues

    by Jennifer Ormond
  2. WireGuard
  3. Networking
  4. DNS
    5.
    How to debug WireGuard DNS problems.
    Read more…

  5. Troubleshooting WireGuard with Tcpdump

    by Justin Ludwig
  6. WireGuard
  7. Networking
    8.
    How to debug WireGuard connection issues using tcpdump.
    Read more…

  8. WireGuard Transparent Tunnel

    by Justin Ludwig
  9. WireGuard
  10. Networking
  11. Routing
  12. Point to Point
    13.
    How to use the same IP addresses for a point-to-point tunnel when WireGuard is up as when down.
    Read more…

  13. Using WireGuard For Specific Apps on Linux

    by Justin Ludwig
  14. WireGuard
  15. Networking
  16. Routing
  17. Point to Site
    18.
    How to selectively enable or disable a WireGuard tunnel for any program via network namespaces.
    Read more…

  18. An Opinionated YubiKey Set-Up Guide

    by Justin Ludwig
  19. Smart Cards
  20. Keys
  21. SSH
    22.
    How to set up a YubiKey 5 in 2023.
    Read more…

  22. WireGuard Key on an OpenPGP Card

    by Justin Ludwig
  23. WireGuard
  24. Smart Cards
  25. Keys
    26.
    How to use a WireGuard key stored on an OpenPGP card.
    Read more…

  26. Installing GnuPG 2.4 on Ubuntu 22.04

    by Justin Ludwig
  27. Smart Cards
    28.
    How to build and install GPG 2.4.x on Ubuntu 22.04.
    Read more…

  28. 3 Ways to Protect WireGuard With YubiKey

    (updated )
    by Justin Ludwig
  29. WireGuard
  30. Smart Cards
  31. Keys
    32.
    How to use a YubiKey to protect your WireGuard private keys.
    Read more…

  32. More Tools for Monitoring WireGuard Data Usage

    by Jennifer Ormond
  33. WireGuard
  34. Monitoring
  35. Pro Custodibus
    36.
    Some recently-added features of Pro Custodibus for monitoring WireGuard usage.
    Read more…

  36. Internal DNS Names With WireGuard

    by Jennifer Ormond
  37. WireGuard
  38. DNS
    39.
    How to set up a WireGuard peer as a CoreDNS server.
    Read more…

  39. Preventing Lateral Movement With WireGuard

    by Justin Ludwig
  40. WireGuard
  41. Networking
  42. Security
  43. nftables
  44. Point to Point
  45. Hub and Spoke
    46.
    How to use micro-segmentation with WireGuard to stop an attacker from moving laterally in your network.
    Read more…

  46. Limiting WireGuard Bandwidth

    by Justin Ludwig
  47. WireGuard
  48. Networking
    49.
    How to limit the bandwidth used by a WireGuard connection.
    Read more…

  49. WireGuard Performance Tuning

    (updated )
    by Justin Ludwig
  50. WireGuard
  51. Networking
    52.
    A guide to testing and tuning WireGuard network performance.
    Read more…

  52. Best Linux Firewall for WireGuard

    by Jennifer Ormond
  53. WireGuard
  54. Networking
  55. Firewall
  56. firewalld
  57. nftables
    58.
    Best options for setting up a simple firewall for WireGuard on Linux.
    Read more…

  58. How to Set Up a WireGuard Jumphost

    by Jennifer Ormond
  59. WireGuard
  60. Networking
  61. Firewall
  62. nftables
  63. Point to Site
    64.
    A simple WireGuard jumphost tutorial.
    Read more…

  64. Installing Libsodium on Amazon Linux 2023

    (updated )
    by Justin Ludwig
  65. Cloud
  66. AWS
    67.
    How to install libsodium on Amazon Linux 2022/2023.
    Read more…

  67. WireGuard in Podman Rootless Containers

    by Justin Ludwig
  68. WireGuard
  69. Containers
    70.
    13 common patterns for running WireGuard in Podman containers.
    Read more…

  70. OPNsense Push Routes Through WireGuard Via OSPF

    by Justin Ludwig
  71. WireGuard
  72. Networking
  73. Routing
  74. Site to Site
    75.
    How to use OSPF to share routes from an OPNsense router over WireGuard.
    Read more…

  75. OPNsense WireGuard Site to Site

    by Justin Ludwig
  76. WireGuard
  77. Networking
  78. Site to Site
    79.
    How to connect an OPNsense router to a Linux router over WireGuard.
    Read more…

  79. WireGuard Port Forwarding From the Internet

    by Justin Ludwig
  80. WireGuard
  81. Networking
  82. Routing
  83. Point to Site
    84.
    How to forward inbound traffic from the Internet to another server using WireGuard.
    Read more…

  84. Zero Trust Architecture With WireGuard

    by Justin Ludwig
  85. WireGuard
  86. Networking
  87. Firewall
  88. nftables
  89. Hub and Spoke
    90.
    How to get started implementing a zero-trust architecture.
    Read more…

  90. Connecting WireGuard and OpenVPN

    by Justin Ludwig
  91. WireGuard
  92. Networking
  93. Hub and Spoke
    94.
    How to connect WireGuard and OpenVPN networks.
    Read more…

  94. WireGuard Automatic Key Rotation With Pro Custodibus

    by Jennifer Ormond
  95. WireGuard
  96. Security
  97. Keys
  98. Pro Custodibus
    99.
    Why and how to set up automatic WireGuard preshared key rotation with Pro Custodibus.
    Read more…

  99. Set Up a New User Device With WireGuard MFA

    by Jennifer Ormond
  100. WireGuard
  101. Security
  102. Pro Custodibus
    103.
    How to enroll a new user and device into WireGuard MFA with Pro Custodibus.
    Read more…

  103. WireGuard Multi-Factor Authentication With Pro Custodibus

    by Justin Ludwig
  104. WireGuard
  105. Security
  106. Pro Custodibus
    107.
    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more…

  107. Multi-Hop WireGuard

    by Justin Ludwig
  108. WireGuard
  109. Networking
  110. Routing
  111. Hub and Spoke
  112. Point to Site
    113.
    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more…

  113. Configure WireGuard via AWS SSM Parameter Store

    by Justin Ludwig
  114. WireGuard
  115. Cloud
  116. AWS
  117. Containers
    118.
    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more…

  118. WireGuard on AWS ECS

    by Justin Ludwig
  119. WireGuard
  120. Cloud
  121. AWS
  122. Containers
  123. Point to Site
    124.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more…

  124. Installing WireGuard on Amazon Linux

    (updated )
    by Justin Ludwig
  125. WireGuard
  126. Cloud
  127. AWS
    128.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2023.
    Read more…

  128. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
  129. WireGuard
  130. Networking
  131. Firewall
  132. firewalld
    133.
    How to use firewalld policies for network access control.
    Read more…

  133. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
  134. WireGuard
  135. Security
  136. Monitoring
  137. Pro Custodibus
    138.
    How to connect Pro Custodibus to Datadog.
    Read more…

  138. WireGuard DNS Configuration for Systemd

    by Jennifer Ormond
  139. WireGuard
  140. DNS
    141.
    Systemd-resolved DNS settings for WireGuard.
    Read more…

  141. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
  142. WireGuard
  143. Networking
  144. Firewall
  145. nftables
  146. Hub and Spoke
    147.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more…

  147. WireGuard Over TCP

    by Justin Ludwig
  148. WireGuard
  149. Networking
  150. Point to Point
    151.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more…

  151. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
  152. WireGuard
  153. Containers
    154.
    How to safely expose container services through WireGuard.
    Read more…

  154. Wg-quick Default Firewall Rules

    by Justin Ludwig
  155. WireGuard
  156. Firewall
  157. iptables
  158. nftables
    159.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more…

  159. WireGuard With AWS Split DNS

    by Jennifer Ormond
  160. WireGuard
  161. Cloud
  162. AWS
  163. DNS
    164.
    Use a Route 53 private hosted zone to access internal AWS resources with WireGuard.
    Read more…

  164. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
  165. WireGuard
  166. Networking
  167. Hub and Spoke
    168.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more…

  168. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
  169. SSH
  170. WireGuard
  171. Point to Site
    172.
    Why WireGuard is better for jump servers than SSH.
    Read more…

  172. How to Use WireGuard With Nftables

    (updated )
    by Justin Ludwig
  173. WireGuard
  174. Networking
  175. Firewall
  176. nftables
    177.
    How to set up nftables for WireGuard under five different scenarios.
    Read more…

  177. Building, Using, and Monitoring WireGuard Containers

    (updated )
    by Justin Ludwig
  178. WireGuard
  179. Pro Custodibus
  180. Containers
    181.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more…

  181. High Availability WireGuard Site to Site

    by Justin Ludwig
  182. WireGuard
  183. Networking
  184. Routing
  185. High Availability
  186. Site to Site
    187.
    How to connect sites with redundant WireGuard routers.
    Read more…

  187. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
  188. WireGuard
  189. Security
  190. Keys
  191. Pro Custodibus
    192.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more…

  192. Add a WireGuard Peer With the Pro Custodibus GUI

    by Jennifer Ormond
  193. WireGuard
  194. Pro Custodibus
    195.
    How to add a WireGuard peer with the Pro Custodibus web UI.
    Read more…

  195. Securing Operational Technology With WireGuard

    by Justin Ludwig
  196. WireGuard
  197. Networking
  198. iptables
  199. Site to Site
    200.
    How to secure Operational Technology systems with WireGuard
    Read more…

  200. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
  201. WireGuard
  202. Pro Custodibus
  203. Point to Site
    204.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more…

  204. How to Use WireGuard With Firewalld

    by Justin Ludwig
  205. WireGuard
  206. Networking
  207. Firewall
  208. firewalld
    209.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more…

  209. DNS Updates to WireGuard Endpoints

    by Jennifer Ormond
  210. WireGuard
  211. Pro Custodibus
  212. DNS
    213.
    How to solve the DNS re-resolution problem for WireGuard endpoints with Pro Custodibus.
    Read more…

  213. High Availability WireGuard on Azure

    by Justin Ludwig
  214. WireGuard
  215. Cloud
  216. Networking
  217. High Availability
    218.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more…

  218. WireGuard SysV Init Script

    by Justin Ludwig
  219. WireGuard
    220.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more…

  220. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
  221. WireGuard
  222. Cloud
  223. Networking
  224. Point to Site
    225.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more…

  225. WireGuard Usage Monitoring

    by Justin Ludwig
  226. WireGuard
  227. Monitoring
  228. Pro Custodibus
    229.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more…

  229. How to Use WireGuard With UFW

    by Justin Ludwig
  230. WireGuard
  231. Networking
  232. Firewall
  233. UFW
    234.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more…

  234. Friendly Names for WireGuard Peers

    by Jennifer Ormond
  235. WireGuard
  236. Pro Custodibus
    237.
    How to set human-readable names for WireGuard peers.
    Read more…

  237. WireGuard Point to Site Routing

    by Justin Ludwig
  238. WireGuard
  239. Networking
  240. Point to Site
    241.
    Routing strategies for the WireGuard Point to Site topology.
    Read more…

  241. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
  242. WireGuard
  243. Networking
  244. Point to Site
    245.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more…

  245. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
  246. WireGuard
  247. Networking
  248. iptables
  249. Point to Site
    250.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more…

  250. WireGuard Access Control With Iptables

    by Justin Ludwig
  251. WireGuard
  252. Networking
  253. Firewall
  254. iptables
    255.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more…

  255. Python 3 WireGuard Health Check

    by Justin Ludwig
  256. WireGuard
  257. Cloud
    258.
    AWS ELB WireGuard health-check service for Python 3.
    Read more…

  258. WireGuard AllowedIPs Calculator

    by Justin Ludwig
  259. WireGuard
    260.
    How to “subtract” blocks from your WireGuard AllowedIPs setting.
    Read more…

  260. WireGuard Network Map

    by Jennifer Ormond
  261. WireGuard
  262. Pro Custodibus
    263.
    How to visualize the connections between WireGuard peers.
    Read more…

  263. Four Ways to View WireGuard Logs

    by Justin Ludwig
  264. WireGuard
  265. Monitoring
    266.
    How to enable and view WireGuard logging.
    Read more…

  266. When to Use WireGuard

    by Jennifer Ormond
  267. WireGuard
    268.
    Three use-cases for using WireGuard for secure access to business/enterprise networks.
    Read more…

  268. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
  269. WireGuard
  270. Security
  271. Keys
  272. Monitoring
  273. Pro Custodibus
    274.
    How to know when your WireGuard private keys have been compromised.
    Read more…

  274. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
  275. WireGuard
  276. Cloud
  277. AWS
  278. Networking
  279. High Availability
    280.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more…

  280. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
  281. WireGuard
  282. Cloud
  283. AWS
  284. Networking
  285. Point to Site
    286.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more…

  286. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
  287. WireGuard
  288. Security
  289. Keys
    290.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more…

  290. Getting Started With Pro Custodibus

    by Justin Ludwig
  291. Pro Custodibus
    292.
    How to start monitoring and managing your first WireGuard host.
    Read more…

  292. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
  293. WireGuard
  294. Monitoring
    295.
    Best tools for checking who’s connecting to your VPN.
    Read more…

  295. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
  296. WireGuard
  297. Networking
    298.
    How packets flow between WireGuard endpoints.
    Read more…

  298. WireGuard Terminology

    by Justin Ludwig
  299. WireGuard
    300.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more…

  300. WireGuard Site to Site Configuration

    by Justin Ludwig
  301. WireGuard
  302. Networking
  303. iptables
  304. Site to Site
    305.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more…

  305. WireGuard Point to Site Configuration

    by Justin Ludwig
  306. WireGuard
  307. Networking
  308. iptables
  309. Point to Site
    310.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more…

  310. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
  311. WireGuard
  312. Networking
  313. iptables
  314. Hub and Spoke
    315.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more…

  315. WireGuard Point to Point Configuration

    by Justin Ludwig
  316. WireGuard
  317. Networking
  318. iptables
  319. Point to Point
    320.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more…

  320. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
  321. WireGuard
  322. Networking
    323.
    These are the four main topologies you’d consider when deciding how to connect endpoints over a WireGuard network.
    Read more…