Blog

  1. Connecting WireGuard and OpenVPN

    by Justin Ludwig
    (blog)
  2. WireGuard
  3. Networking
    4.
    How to connect WireGuard and OpenVPN networks.
    Read more...

  4. WireGuard Automatic Key Rotation With Pro Custodibus

    by Jennifer Ormond
    (blog)
  5. WireGuard
  6. Security
  7. Pro Custodibus
    8.
    Why and how to set up automatic WireGuard preshared key rotation with Pro Custodibus.
    Read more...

  8. Set Up a New User Device With WireGuard MFA

    by Jennifer Ormond
    (blog)
  9. WireGuard
  10. Security
  11. Pro Custodibus
    12.
    How to enroll a new user and device into WireGuard MFA with Pro Custodibus.
    Read more...

  12. WireGuard Multi-Factor Authentication With Pro Custodibus

    by Justin Ludwig
    (blog)
  13. WireGuard
  14. Security
  15. Pro Custodibus
    16.
    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more...

  16. Multi-Hop WireGuard

    by Justin Ludwig
    (blog)
  17. WireGuard
  18. Networking
    19.
    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more...

  19. Configure WireGuard via AWS SSM Parameter Store

    by Justin Ludwig
    (blog)
  20. WireGuard
  21. Cloud
  22. AWS
  23. Containers
    24.
    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more...

  24. WireGuard on AWS ECS

    by Justin Ludwig
    (blog)
  25. WireGuard
  26. Cloud
  27. AWS
  28. Containers
  29. Jumphost
    30.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more...

  30. Installing WireGuard on Amazon Linux

    by Justin Ludwig
    (blog)
  31. WireGuard
  32. Cloud
  33. AWS
    34.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2022.
    Read more...

  34. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
    (blog)
  35. WireGuard
  36. Networking
  37. Firewall
  38. firewalld
    39.
    How to use firewalld policies for network access control.
    Read more...

  39. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
    (blog)
  40. WireGuard
  41. Security
  42. Monitoring
  43. Pro Custodibus
    44.
    How to connect Pro Custodibus to Datadog.
    Read more...

  44. WireGuard DNS Configuration for Systemd

    by Jennifer Ormond
    (blog)
  45. WireGuard
  46. DNS
    47.
    Systemd-resolved DNS settings for WireGuard.
    Read more...

  47. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
    (blog)
  48. WireGuard
  49. Networking
  50. Firewall
  51. nftables
    52.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more...

  52. WireGuard Over TCP

    by Justin Ludwig
    (blog)
  53. WireGuard
  54. Networking
    55.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more...

  55. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
    (blog)
  56. WireGuard
  57. Containers
    58.
    How to safely expose container services through WireGuard.
    Read more...

  58. Wg-quick Default Firewall Rules

    by Justin Ludwig
    (blog)
  59. WireGuard
  60. Firewall
  61. iptables
  62. nftables
    63.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more...

  63. WireGuard With AWS Split DNS

    by Jennifer Ormond
    (blog)
  64. WireGuard
  65. Cloud
  66. AWS
  67. DNS
    68.
    Use a Route 53 private hosted zone to access internal AWS resources with WireGuard.
    Read more...

  68. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
    (blog)
  69. WireGuard
  70. Networking
    71.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more...

  71. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
    (blog)
  72. SSH
  73. WireGuard
  74. Jumphost
    75.
    Why WireGuard is better for jump servers than SSH.
    Read more...

  75. How to Use WireGuard With Nftables

    by Justin Ludwig
    (blog)
  76. WireGuard
  77. Networking
  78. Firewall
  79. nftables
    80.
    How to set up nftables for WireGuard under five different scenarios.
    Read more...

  80. Building, Using, and Monitoring WireGuard Containers

    by Justin Ludwig
    (blog)
  81. WireGuard
  82. Pro Custodibus
  83. Containers
    84.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more...

  84. High Availability WireGuard Site to Site

    by Justin Ludwig
    (blog)
  85. WireGuard
  86. Networking
  87. Routing
    88.
    How to connect sites with redundant WireGuard routers.
    Read more...

  88. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
    (blog)
  89. WireGuard
  90. Security
  91. Pro Custodibus
    92.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more...

  92. Add a WireGuard Peer With the Pro Custodibus GUI

    by Jennifer Ormond
    (blog)
  93. WireGuard
  94. Pro Custodibus
    95.
    How to add a WireGuard peer with the Pro Custodibus web UI.
    Read more...

  95. Securing Operational Technology With WireGuard

    by Justin Ludwig
    (blog)
  96. WireGuard
  97. Networking
  98. iptables
    99.
    How to secure Operational Technology systems with WireGuard
    Read more...

  99. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
    (blog)
  100. WireGuard
  101. Pro Custodibus
    102.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more...

  102. How to Use WireGuard With Firewalld

    by Justin Ludwig
    (blog)
  103. WireGuard
  104. Networking
  105. Firewall
  106. firewalld
    107.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more...

  107. DNS Updates to WireGuard Endpoints

    by Jennifer Ormond
    (blog)
  108. WireGuard
  109. Pro Custodibus
  110. DNS
    111.
    How to solve the DNS re-resolution problem for WireGuard endpoints with Pro Custodibus.
    Read more...

  111. High Availability WireGuard on Azure

    by Justin Ludwig
    (blog)
  112. WireGuard
  113. Cloud
  114. Networking
    115.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more...

  115. WireGuard SysV Init Script

    by Justin Ludwig
    (blog)
  116. WireGuard
    117.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more...

  117. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
    (blog)
  118. WireGuard
  119. Cloud
  120. Networking
  121. Jumphost
    122.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more...

  122. WireGuard Usage Monitoring

    by Justin Ludwig
    (blog)
  123. WireGuard
  124. Monitoring
  125. Pro Custodibus
    126.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more...

  126. How to Use WireGuard With UFW

    by Justin Ludwig
    (blog)
  127. WireGuard
  128. Networking
  129. Firewall
  130. UFW
    131.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more...

  131. Friendly Names for WireGuard Peers

    by Jennifer Ormond
    (blog)
  132. WireGuard
  133. Pro Custodibus
    134.
    How to set human-readable names for WireGuard peers.
    Read more...

  134. WireGuard Point to Site Routing

    by Justin Ludwig
    (blog)
  135. WireGuard
  136. Networking
    137.
    Routing strategies for the WireGuard Point to Site topology.
    Read more...

  137. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
    (blog)
  138. WireGuard
  139. Networking
    140.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more...

  140. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
    (blog)
  141. WireGuard
  142. Networking
  143. iptables
    144.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more...

  144. WireGuard Access Control With Iptables

    by Justin Ludwig
    (blog)
  145. WireGuard
  146. Networking
  147. Firewall
  148. iptables
    149.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more...

  149. Python 3 WireGuard Health Check

    by Justin Ludwig
    (blog)
  150. WireGuard
  151. Cloud
    152.
    AWS ELB WireGuard health-check service for Python 3.
    Read more...

  152. WireGuard AllowedIPs Calculator

    by Justin Ludwig
    (blog)
  153. WireGuard
    154.
    How to "subtract" blocks from your WireGuard AllowedIPs setting.
    Read more...

  154. WireGuard Network Map

    by Jennifer Ormond
    (blog)
  155. WireGuard
  156. Pro Custodibus
    157.
    How to visualize the connections between WireGuard peers.
    Read more...

  157. Four Ways to View WireGuard Logs

    by Justin Ludwig
    (blog)
  158. WireGuard
  159. Monitoring
    160.
    How to enable and view WireGuard logging.
    Read more...

  160. When to Use WireGuard

    by Jennifer Ormond
    (blog)
  161. WireGuard
    162.
    Three use-cases for using WireGuard for secure access to business/enterprise networks.
    Read more...

  162. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
    (blog)
  163. WireGuard
  164. Security
  165. Monitoring
  166. Pro Custodibus
    167.
    How to know when your WireGuard private keys have been compromised.
    Read more...

  167. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
    (blog)
  168. WireGuard
  169. Cloud
  170. AWS
  171. Networking
    172.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more...

  172. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
    (blog)
  173. WireGuard
  174. Cloud
  175. AWS
  176. Networking
  177. Jumphost
    178.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more...

  178. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
    (blog)
  179. WireGuard
  180. Security
    181.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more...

  181. Getting Started With Pro Custodibus

    by Justin Ludwig
    (blog)
  182. Pro Custodibus
  183. Tutorial
    184.
    How to start monitoring and managing your first WireGuard host.
    Read more...

  184. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
    (blog)
  185. WireGuard
  186. Monitoring
    187.
    Best tools for checking who's connecting to your VPN.
    Read more...

  187. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
    (blog)
  188. WireGuard
  189. Networking
    190.
    How packets flow between WireGuard endpoints.
    Read more...

  190. WireGuard Terminology

    by Justin Ludwig
    (blog)
  191. WireGuard
    192.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more...

  192. WireGuard Site to Site Configuration

    by Justin Ludwig
    (blog)
  193. WireGuard
  194. Networking
  195. iptables
    196.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more...

  196. WireGuard Point to Site Configuration

    by Justin Ludwig
    (blog)
  197. WireGuard
  198. Networking
  199. iptables
  200. Jumphost
    201.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more...

  201. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
    (blog)
  202. WireGuard
  203. Networking
  204. iptables
    205.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more...

  205. WireGuard Point to Point Configuration

    by Justin Ludwig
    (blog)
  206. WireGuard
  207. Networking
  208. iptables
    209.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more...

  209. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
    (blog)
  210. WireGuard
  211. Networking
    212.
    These are the four main topologies you'd consider when deciding how to connect endpoints over a WireGuard network.
    Read more...