Blog

  1. OPNsense Push Routes Through WireGuard Via OSPF

    by Justin Ludwig
  2. WireGuard
  3. Networking
  4. Routing
  5. Site to Site
    6.
    How to use OSPF to share routes from an OPNsense router over WireGuard.
    Read more…

  6. OPNsense WireGuard Site to Site

    by Justin Ludwig
  7. WireGuard
  8. Networking
  9. Site to Site
    10.
    How to connect an OPNsense router to a Linux router over WireGuard.
    Read more…

  10. WireGuard Port Forwarding From the Internet

    by Justin Ludwig
  11. WireGuard
  12. Networking
  13. Routing
  14. Point to Site
    15.
    How to forward inbound traffic from the Internet to another server using WireGuard.
    Read more…

  15. Zero Trust Architecture With WireGuard

    by Justin Ludwig
  16. WireGuard
  17. Networking
  18. Firewall
  19. nftables
  20. Hub and Spoke
    21.
    How to get started implementing a zero-trust architecture.
    Read more…

  21. Connecting WireGuard and OpenVPN

    by Justin Ludwig
  22. WireGuard
  23. Networking
  24. Hub and Spoke
    25.
    How to connect WireGuard and OpenVPN networks.
    Read more…

  25. WireGuard Automatic Key Rotation With Pro Custodibus

    by Jennifer Ormond
  26. WireGuard
  27. Security
  28. Keys
  29. Pro Custodibus
    30.
    Why and how to set up automatic WireGuard preshared key rotation with Pro Custodibus.
    Read more…

  30. Set Up a New User Device With WireGuard MFA

    by Jennifer Ormond
  31. WireGuard
  32. Security
  33. Pro Custodibus
    34.
    How to enroll a new user and device into WireGuard MFA with Pro Custodibus.
    Read more…

  34. WireGuard Multi-Factor Authentication With Pro Custodibus

    by Justin Ludwig
  35. WireGuard
  36. Security
  37. Pro Custodibus
    38.
    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more…

  38. Multi-Hop WireGuard

    by Justin Ludwig
  39. WireGuard
  40. Networking
  41. Routing
  42. Hub and Spoke
  43. Point to Site
    44.
    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more…

  44. Configure WireGuard via AWS SSM Parameter Store

    by Justin Ludwig
  45. WireGuard
  46. Cloud
  47. AWS
  48. Containers
    49.
    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more…

  49. WireGuard on AWS ECS

    by Justin Ludwig
  50. WireGuard
  51. Cloud
  52. AWS
  53. Containers
  54. Point to Site
    55.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more…

  55. Installing WireGuard on Amazon Linux

    by Justin Ludwig
  56. WireGuard
  57. Cloud
  58. AWS
    59.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2022.
    Read more…

  59. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
  60. WireGuard
  61. Networking
  62. Firewall
  63. firewalld
    64.
    How to use firewalld policies for network access control.
    Read more…

  64. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
  65. WireGuard
  66. Security
  67. Monitoring
  68. Pro Custodibus
    69.
    How to connect Pro Custodibus to Datadog.
    Read more…

  69. WireGuard DNS Configuration for Systemd

    by Jennifer Ormond
  70. WireGuard
  71. DNS
    72.
    Systemd-resolved DNS settings for WireGuard.
    Read more…

  72. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
  73. WireGuard
  74. Networking
  75. Firewall
  76. nftables
  77. Hub and Spoke
    78.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more…

  78. WireGuard Over TCP

    by Justin Ludwig
  79. WireGuard
  80. Networking
  81. Point to Point
    82.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more…

  82. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
  83. WireGuard
  84. Containers
    85.
    How to safely expose container services through WireGuard.
    Read more…

  85. Wg-quick Default Firewall Rules

    by Justin Ludwig
  86. WireGuard
  87. Firewall
  88. iptables
  89. nftables
    90.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more…

  90. WireGuard With AWS Split DNS

    by Jennifer Ormond
  91. WireGuard
  92. Cloud
  93. AWS
  94. DNS
    95.
    Use a Route 53 private hosted zone to access internal AWS resources with WireGuard.
    Read more…

  95. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
  96. WireGuard
  97. Networking
  98. Hub and Spoke
    99.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more…

  99. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
  100. SSH
  101. WireGuard
  102. Point to Site
    103.
    Why WireGuard is better for jump servers than SSH.
    Read more…

  103. How to Use WireGuard With Nftables

    by Justin Ludwig
  104. WireGuard
  105. Networking
  106. Firewall
  107. nftables
    108.
    How to set up nftables for WireGuard under five different scenarios.
    Read more…

  108. Building, Using, and Monitoring WireGuard Containers

    by Justin Ludwig
  109. WireGuard
  110. Pro Custodibus
  111. Containers
    112.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more…

  112. High Availability WireGuard Site to Site

    by Justin Ludwig
  113. WireGuard
  114. Networking
  115. Routing
  116. High Availability
  117. Site to Site
    118.
    How to connect sites with redundant WireGuard routers.
    Read more…

  118. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
  119. WireGuard
  120. Security
  121. Keys
  122. Pro Custodibus
    123.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more…

  123. Add a WireGuard Peer With the Pro Custodibus GUI

    by Jennifer Ormond
  124. WireGuard
  125. Pro Custodibus
    126.
    How to add a WireGuard peer with the Pro Custodibus web UI.
    Read more…

  126. Securing Operational Technology With WireGuard

    by Justin Ludwig
  127. WireGuard
  128. Networking
  129. iptables
  130. Site to Site
    131.
    How to secure Operational Technology systems with WireGuard
    Read more…

  131. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
  132. WireGuard
  133. Pro Custodibus
  134. Point to Site
    135.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more…

  135. How to Use WireGuard With Firewalld

    by Justin Ludwig
  136. WireGuard
  137. Networking
  138. Firewall
  139. firewalld
    140.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more…

  140. DNS Updates to WireGuard Endpoints

    by Jennifer Ormond
  141. WireGuard
  142. Pro Custodibus
  143. DNS
    144.
    How to solve the DNS re-resolution problem for WireGuard endpoints with Pro Custodibus.
    Read more…

  144. High Availability WireGuard on Azure

    by Justin Ludwig
  145. WireGuard
  146. Cloud
  147. Networking
  148. High Availability
    149.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more…

  149. WireGuard SysV Init Script

    by Justin Ludwig
  150. WireGuard
    151.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more…

  151. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
  152. WireGuard
  153. Cloud
  154. Networking
  155. Point to Site
    156.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more…

  156. WireGuard Usage Monitoring

    by Justin Ludwig
  157. WireGuard
  158. Monitoring
  159. Pro Custodibus
    160.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more…

  160. How to Use WireGuard With UFW

    by Justin Ludwig
  161. WireGuard
  162. Networking
  163. Firewall
  164. UFW
    165.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more…

  165. Friendly Names for WireGuard Peers

    by Jennifer Ormond
  166. WireGuard
  167. Pro Custodibus
    168.
    How to set human-readable names for WireGuard peers.
    Read more…

  168. WireGuard Point to Site Routing

    by Justin Ludwig
  169. WireGuard
  170. Networking
  171. Point to Site
    172.
    Routing strategies for the WireGuard Point to Site topology.
    Read more…

  172. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
  173. WireGuard
  174. Networking
  175. Point to Site
    176.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more…

  176. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
  177. WireGuard
  178. Networking
  179. iptables
  180. Point to Site
    181.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more…

  181. WireGuard Access Control With Iptables

    by Justin Ludwig
  182. WireGuard
  183. Networking
  184. Firewall
  185. iptables
    186.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more…

  186. Python 3 WireGuard Health Check

    by Justin Ludwig
  187. WireGuard
  188. Cloud
    189.
    AWS ELB WireGuard health-check service for Python 3.
    Read more…

  189. WireGuard AllowedIPs Calculator

    by Justin Ludwig
  190. WireGuard
    191.
    How to “subtract” blocks from your WireGuard AllowedIPs setting.
    Read more…

  191. WireGuard Network Map

    by Jennifer Ormond
  192. WireGuard
  193. Pro Custodibus
    194.
    How to visualize the connections between WireGuard peers.
    Read more…

  194. Four Ways to View WireGuard Logs

    by Justin Ludwig
  195. WireGuard
  196. Monitoring
    197.
    How to enable and view WireGuard logging.
    Read more…

  197. When to Use WireGuard

    by Jennifer Ormond
  198. WireGuard
    199.
    Three use-cases for using WireGuard for secure access to business/enterprise networks.
    Read more…

  199. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
  200. WireGuard
  201. Security
  202. Keys
  203. Monitoring
  204. Pro Custodibus
    205.
    How to know when your WireGuard private keys have been compromised.
    Read more…

  205. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
  206. WireGuard
  207. Cloud
  208. AWS
  209. Networking
  210. High Availability
    211.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more…

  211. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
  212. WireGuard
  213. Cloud
  214. AWS
  215. Networking
  216. Point to Site
    217.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more…

  217. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
  218. WireGuard
  219. Security
  220. Keys
    221.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more…

  221. Getting Started With Pro Custodibus

    by Justin Ludwig
  222. Pro Custodibus
    223.
    How to start monitoring and managing your first WireGuard host.
    Read more…

  223. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
  224. WireGuard
  225. Monitoring
    226.
    Best tools for checking who’s connecting to your VPN.
    Read more…

  226. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
  227. WireGuard
  228. Networking
    229.
    How packets flow between WireGuard endpoints.
    Read more…

  229. WireGuard Terminology

    by Justin Ludwig
  230. WireGuard
    231.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more…

  231. WireGuard Site to Site Configuration

    by Justin Ludwig
  232. WireGuard
  233. Networking
  234. iptables
  235. Site to Site
    236.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more…

  236. WireGuard Point to Site Configuration

    by Justin Ludwig
  237. WireGuard
  238. Networking
  239. iptables
  240. Point to Site
    241.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more…

  241. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
  242. WireGuard
  243. Networking
  244. iptables
  245. Hub and Spoke
    246.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more…

  246. WireGuard Point to Point Configuration

    by Justin Ludwig
  247. WireGuard
  248. Networking
  249. iptables
  250. Point to Point
    251.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more…

  251. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
  252. WireGuard
  253. Networking
    254.
    These are the four main topologies you’d consider when deciding how to connect endpoints over a WireGuard network.
    Read more…