Blog

  1. Internal DNS Names With WireGuard

    by Jennifer Ormond
  2. WireGuard
  3. DNS
    4.
    How to set up a WireGuard peer as a CoreDNS server.
    Read more…

  4. Preventing Lateral Movement With WireGuard

    by Justin Ludwig
  5. WireGuard
  6. Networking
  7. Security
  8. nftables
  9. Point to Point
  10. Hub and Spoke
    11.
    How to use micro-segmentation with WireGuard to stop an attacker from moving laterally in your network.
    Read more…

  11. Limiting WireGuard Bandwidth

    by Justin Ludwig
  12. WireGuard
  13. Networking
    14.
    How to limit the bandwidth used by a WireGuard connection.
    Read more…

  14. WireGuard Performance Tuning

    by Justin Ludwig
  15. WireGuard
  16. Networking
    17.
    A guide to testing and tuning WireGuard network performance.
    Read more…

  17. Best Linux Firewall for WireGuard

    by Jennifer Ormond
  18. WireGuard
  19. Networking
  20. Firewall
  21. firewalld
  22. nftables
    23.
    Best options for setting up a simple firewall for WireGuard on Linux.
    Read more…

  23. How to Set Up a WireGuard Jumphost

    by Jennifer Ormond
  24. WireGuard
  25. Networking
  26. Firewall
  27. nftables
  28. Point to Site
    29.
    A simple WireGuard jumphost tutorial.
    Read more…

  29. Installing Libsodium on Amazon Linux 2022

    by Justin Ludwig
  30. Cloud
  31. AWS
    32.
    How to install libsodium on Amazon Linux 2022.
    Read more…

  32. WireGuard in Podman Rootless Containers

    by Justin Ludwig
  33. WireGuard
  34. Containers
    35.
    13 common patterns for running WireGuard in Podman containers.
    Read more…

  35. OPNsense Push Routes Through WireGuard Via OSPF

    by Justin Ludwig
  36. WireGuard
  37. Networking
  38. Routing
  39. Site to Site
    40.
    How to use OSPF to share routes from an OPNsense router over WireGuard.
    Read more…

  40. OPNsense WireGuard Site to Site

    by Justin Ludwig
  41. WireGuard
  42. Networking
  43. Site to Site
    44.
    How to connect an OPNsense router to a Linux router over WireGuard.
    Read more…

  44. WireGuard Port Forwarding From the Internet

    by Justin Ludwig
  45. WireGuard
  46. Networking
  47. Routing
  48. Point to Site
    49.
    How to forward inbound traffic from the Internet to another server using WireGuard.
    Read more…

  49. Zero Trust Architecture With WireGuard

    by Justin Ludwig
  50. WireGuard
  51. Networking
  52. Firewall
  53. nftables
  54. Hub and Spoke
    55.
    How to get started implementing a zero-trust architecture.
    Read more…

  55. Connecting WireGuard and OpenVPN

    by Justin Ludwig
  56. WireGuard
  57. Networking
  58. Hub and Spoke
    59.
    How to connect WireGuard and OpenVPN networks.
    Read more…

  59. WireGuard Automatic Key Rotation With Pro Custodibus

    by Jennifer Ormond
  60. WireGuard
  61. Security
  62. Keys
  63. Pro Custodibus
    64.
    Why and how to set up automatic WireGuard preshared key rotation with Pro Custodibus.
    Read more…

  64. Set Up a New User Device With WireGuard MFA

    by Jennifer Ormond
  65. WireGuard
  66. Security
  67. Pro Custodibus
    68.
    How to enroll a new user and device into WireGuard MFA with Pro Custodibus.
    Read more…

  68. WireGuard Multi-Factor Authentication With Pro Custodibus

    by Justin Ludwig
  69. WireGuard
  70. Security
  71. Pro Custodibus
    72.
    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more…

  72. Multi-Hop WireGuard

    by Justin Ludwig
  73. WireGuard
  74. Networking
  75. Routing
  76. Hub and Spoke
  77. Point to Site
    78.
    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more…

  78. Configure WireGuard via AWS SSM Parameter Store

    by Justin Ludwig
  79. WireGuard
  80. Cloud
  81. AWS
  82. Containers
    83.
    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more…

  83. WireGuard on AWS ECS

    by Justin Ludwig
  84. WireGuard
  85. Cloud
  86. AWS
  87. Containers
  88. Point to Site
    89.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more…

  89. Installing WireGuard on Amazon Linux

    by Justin Ludwig
  90. WireGuard
  91. Cloud
  92. AWS
    93.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2022.
    Read more…

  93. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
  94. WireGuard
  95. Networking
  96. Firewall
  97. firewalld
    98.
    How to use firewalld policies for network access control.
    Read more…

  98. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
  99. WireGuard
  100. Security
  101. Monitoring
  102. Pro Custodibus
    103.
    How to connect Pro Custodibus to Datadog.
    Read more…

  103. WireGuard DNS Configuration for Systemd

    by Jennifer Ormond
  104. WireGuard
  105. DNS
    106.
    Systemd-resolved DNS settings for WireGuard.
    Read more…

  106. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
  107. WireGuard
  108. Networking
  109. Firewall
  110. nftables
  111. Hub and Spoke
    112.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more…

  112. WireGuard Over TCP

    by Justin Ludwig
  113. WireGuard
  114. Networking
  115. Point to Point
    116.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more…

  116. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
  117. WireGuard
  118. Containers
    119.
    How to safely expose container services through WireGuard.
    Read more…

  119. Wg-quick Default Firewall Rules

    by Justin Ludwig
  120. WireGuard
  121. Firewall
  122. iptables
  123. nftables
    124.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more…

  124. WireGuard With AWS Split DNS

    by Jennifer Ormond
  125. WireGuard
  126. Cloud
  127. AWS
  128. DNS
    129.
    Use a Route 53 private hosted zone to access internal AWS resources with WireGuard.
    Read more…

  129. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
  130. WireGuard
  131. Networking
  132. Hub and Spoke
    133.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more…

  133. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
  134. SSH
  135. WireGuard
  136. Point to Site
    137.
    Why WireGuard is better for jump servers than SSH.
    Read more…

  137. How to Use WireGuard With Nftables

    by Justin Ludwig
  138. WireGuard
  139. Networking
  140. Firewall
  141. nftables
    142.
    How to set up nftables for WireGuard under five different scenarios.
    Read more…

  142. Building, Using, and Monitoring WireGuard Containers

    (updated )
    by Justin Ludwig
  143. WireGuard
  144. Pro Custodibus
  145. Containers
    146.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more…

  146. High Availability WireGuard Site to Site

    by Justin Ludwig
  147. WireGuard
  148. Networking
  149. Routing
  150. High Availability
  151. Site to Site
    152.
    How to connect sites with redundant WireGuard routers.
    Read more…

  152. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
  153. WireGuard
  154. Security
  155. Keys
  156. Pro Custodibus
    157.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more…

  157. Add a WireGuard Peer With the Pro Custodibus GUI

    by Jennifer Ormond
  158. WireGuard
  159. Pro Custodibus
    160.
    How to add a WireGuard peer with the Pro Custodibus web UI.
    Read more…

  160. Securing Operational Technology With WireGuard

    by Justin Ludwig
  161. WireGuard
  162. Networking
  163. iptables
  164. Site to Site
    165.
    How to secure Operational Technology systems with WireGuard
    Read more…

  165. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
  166. WireGuard
  167. Pro Custodibus
  168. Point to Site
    169.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more…

  169. How to Use WireGuard With Firewalld

    by Justin Ludwig
  170. WireGuard
  171. Networking
  172. Firewall
  173. firewalld
    174.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more…

  174. DNS Updates to WireGuard Endpoints

    by Jennifer Ormond
  175. WireGuard
  176. Pro Custodibus
  177. DNS
    178.
    How to solve the DNS re-resolution problem for WireGuard endpoints with Pro Custodibus.
    Read more…

  178. High Availability WireGuard on Azure

    by Justin Ludwig
  179. WireGuard
  180. Cloud
  181. Networking
  182. High Availability
    183.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more…

  183. WireGuard SysV Init Script

    by Justin Ludwig
  184. WireGuard
    185.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more…

  185. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
  186. WireGuard
  187. Cloud
  188. Networking
  189. Point to Site
    190.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more…

  190. WireGuard Usage Monitoring

    by Justin Ludwig
  191. WireGuard
  192. Monitoring
  193. Pro Custodibus
    194.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more…

  194. How to Use WireGuard With UFW

    by Justin Ludwig
  195. WireGuard
  196. Networking
  197. Firewall
  198. UFW
    199.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more…

  199. Friendly Names for WireGuard Peers

    by Jennifer Ormond
  200. WireGuard
  201. Pro Custodibus
    202.
    How to set human-readable names for WireGuard peers.
    Read more…

  202. WireGuard Point to Site Routing

    by Justin Ludwig
  203. WireGuard
  204. Networking
  205. Point to Site
    206.
    Routing strategies for the WireGuard Point to Site topology.
    Read more…

  206. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
  207. WireGuard
  208. Networking
  209. Point to Site
    210.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more…

  210. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
  211. WireGuard
  212. Networking
  213. iptables
  214. Point to Site
    215.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more…

  215. WireGuard Access Control With Iptables

    by Justin Ludwig
  216. WireGuard
  217. Networking
  218. Firewall
  219. iptables
    220.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more…

  220. Python 3 WireGuard Health Check

    by Justin Ludwig
  221. WireGuard
  222. Cloud
    223.
    AWS ELB WireGuard health-check service for Python 3.
    Read more…

  223. WireGuard AllowedIPs Calculator

    by Justin Ludwig
  224. WireGuard
    225.
    How to “subtract” blocks from your WireGuard AllowedIPs setting.
    Read more…

  225. WireGuard Network Map

    by Jennifer Ormond
  226. WireGuard
  227. Pro Custodibus
    228.
    How to visualize the connections between WireGuard peers.
    Read more…

  228. Four Ways to View WireGuard Logs

    by Justin Ludwig
  229. WireGuard
  230. Monitoring
    231.
    How to enable and view WireGuard logging.
    Read more…

  231. When to Use WireGuard

    by Jennifer Ormond
  232. WireGuard
    233.
    Three use-cases for using WireGuard for secure access to business/enterprise networks.
    Read more…

  233. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
  234. WireGuard
  235. Security
  236. Keys
  237. Monitoring
  238. Pro Custodibus
    239.
    How to know when your WireGuard private keys have been compromised.
    Read more…

  239. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
  240. WireGuard
  241. Cloud
  242. AWS
  243. Networking
  244. High Availability
    245.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more…

  245. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
  246. WireGuard
  247. Cloud
  248. AWS
  249. Networking
  250. Point to Site
    251.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more…

  251. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
  252. WireGuard
  253. Security
  254. Keys
    255.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more…

  255. Getting Started With Pro Custodibus

    by Justin Ludwig
  256. Pro Custodibus
    257.
    How to start monitoring and managing your first WireGuard host.
    Read more…

  257. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
  258. WireGuard
  259. Monitoring
    260.
    Best tools for checking who’s connecting to your VPN.
    Read more…

  260. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
  261. WireGuard
  262. Networking
    263.
    How packets flow between WireGuard endpoints.
    Read more…

  263. WireGuard Terminology

    by Justin Ludwig
  264. WireGuard
    265.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more…

  265. WireGuard Site to Site Configuration

    by Justin Ludwig
  266. WireGuard
  267. Networking
  268. iptables
  269. Site to Site
    270.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more…

  270. WireGuard Point to Site Configuration

    by Justin Ludwig
  271. WireGuard
  272. Networking
  273. iptables
  274. Point to Site
    275.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more…

  275. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
  276. WireGuard
  277. Networking
  278. iptables
  279. Hub and Spoke
    280.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more…

  280. WireGuard Point to Point Configuration

    by Justin Ludwig
  281. WireGuard
  282. Networking
  283. iptables
  284. Point to Point
    285.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more…

  285. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
  286. WireGuard
  287. Networking
    288.
    These are the four main topologies you’d consider when deciding how to connect endpoints over a WireGuard network.
    Read more…