Blog

  1. Using WireGuard Keys for SSH

    How to use PAM to log into SSH and other applications automatically with WireGuard.
    Read more…
  2. WireGuard Containers for Overlapping Networks

    How to avoid address space collisions among client networks using Docker containers.
    Read more…
  3. WireGuard Connection Wizard

    Easy new way to set up new WireGuard connections with the Pro Custodibus web UI.
    Read more…
  4. WireGuard With Overlapping Client Networks

    How to avoid address space collisions when connecting to networks you don’t control.
    Read more…
  5. WireGuard Port Forwarding From the Internet to Other Networks

    How to forward traffic from the Internet through multiple hops to another server (using netfilter connmark).
    Read more…
  6. Pro Custodibus On-Premises With Rootless Podman

    How to use Podman, Firewalld, and Let’s Encrypt to run Pro Custodibus Community Edition.
    Read more…
  7. Quick Start for Pro Custodibus On-Premises

    How to get started with Pro Custodibus Community Edition, using Docker containers.
    Read more…
  8. Troubleshooting WireGuard DNS Issues

    How to debug WireGuard DNS problems.
    Read more…
  9. Troubleshooting WireGuard with Tcpdump

    How to debug WireGuard connection issues using tcpdump.
    Read more…
  10. WireGuard Transparent Tunnel

    How to use the same IP addresses for a point-to-point tunnel when WireGuard is up as when down.
    Read more…
  11. Using WireGuard For Specific Apps on Linux

    How to selectively enable or disable a WireGuard tunnel for any program via network namespaces.
    Read more…
  12. An Opinionated YubiKey Set-Up Guide

    How to set up a YubiKey 5 in 2023.
    Read more…
  13. WireGuard Key on an OpenPGP Card

    How to use a WireGuard key stored on an OpenPGP card.
    Read more…
  14. Installing GnuPG 2.4 on Ubuntu 22.04

    How to build and install GPG 2.4.x on Ubuntu 22.04.
    Read more…
  15. 3 Ways to Protect WireGuard With YubiKey

    How to use a YubiKey to protect your WireGuard private keys.
    Read more…
  16. More Tools for Monitoring WireGuard Data Usage

    Some recently-added features of Pro Custodibus for monitoring WireGuard usage.
    Read more…
  17. Internal DNS Names With WireGuard

    How to set up a WireGuard peer as a CoreDNS server.
    Read more…
  18. Preventing Lateral Movement With WireGuard

    How to use micro-segmentation with WireGuard to stop an attacker from moving laterally in your network.
    Read more…
  19. Limiting WireGuard Bandwidth

    How to limit the bandwidth used by a WireGuard connection.
    Read more…
  20. WireGuard Performance Tuning

    A guide to testing and tuning WireGuard network performance.
    Read more…
  21. Best Linux Firewall for WireGuard

    Best options for setting up a simple firewall for WireGuard on Linux.
    Read more…
  22. How to Set Up a WireGuard Jumphost

    A simple WireGuard jumphost tutorial.
    Read more…
  23. Installing Libsodium on Amazon Linux 2023

    How to install libsodium on Amazon Linux 2022/2023.
    Read more…
  24. WireGuard in Podman Rootless Containers

    13 common patterns for running WireGuard in Podman containers.
    Read more…
  25. OPNsense Push Routes Through WireGuard Via OSPF

    How to use OSPF to share routes from an OPNsense router over WireGuard.
    Read more…
  26. OPNsense WireGuard Site to Site

    How to connect an OPNsense router to a Linux router over WireGuard.
    Read more…
  27. WireGuard Port Forwarding From the Internet

    How to forward inbound traffic from the Internet to another server using WireGuard.
    Read more…
  28. Zero Trust Architecture With WireGuard

    How to get started implementing a zero-trust architecture.
    Read more…
  29. Connecting WireGuard and OpenVPN

    How to connect WireGuard and OpenVPN networks.
    Read more…
  30. WireGuard Automatic Key Rotation With Pro Custodibus

    Why and how to set up automatic WireGuard preshared key rotation with Pro Custodibus.
    Read more…
  31. Set Up a New User Device With WireGuard MFA

    How to enroll a new user and device into WireGuard MFA with Pro Custodibus.
    Read more…
  32. WireGuard Multi-Factor Authentication With Pro Custodibus

    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more…
  33. Multi-Hop WireGuard

    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more…
  34. Configure WireGuard via AWS SSM Parameter Store

    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more…
  35. WireGuard on AWS ECS

    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more…
  36. Installing WireGuard on Amazon Linux

    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2023.
    Read more…
  37. Firewalld Policy-Based Access Control for WireGuard

    How to use firewalld policies for network access control.
    Read more…
  38. Push WireGuard Logs to Datadog SIEM

    How to connect Pro Custodibus to Datadog.
    Read more…
  39. WireGuard DNS Configuration for Systemd

    Systemd-resolved DNS settings for WireGuard.
    Read more…
  40. Poor Man’s BeyondCorp with WireGuard

    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more…
  41. WireGuard Over TCP

    How to use udp2raw to tunnel Wireguard over TCP.
    Read more…
  42. WireGuard Remote Access to Docker Containers

    How to safely expose container services through WireGuard.
    Read more…
  43. Wg-quick Default Firewall Rules

    An explanation of the firewall rules wg-quick sets up by default.
    Read more…
  44. WireGuard With AWS Split DNS

    Use a Route 53 private hosted zone to access internal AWS resources with WireGuard.
    Read more…
  45. WireGuard End-to-End Encrypted Hub-and-Spoke

    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more…
  46. SSH Jumphost Vs WireGuard Jumphost

    Why WireGuard is better for jump servers than SSH.
    Read more…
  47. How to Use WireGuard With Nftables

    How to set up nftables for WireGuard under five different scenarios.
    Read more…
  48. Building, Using, and Monitoring WireGuard Containers

    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more…
  49. High Availability WireGuard Site to Site

    How to connect sites with redundant WireGuard routers.
    Read more…
  50. WireGuard Key Rotation With Pro Custodibus

    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more…
  51. Add a WireGuard Peer With the Pro Custodibus GUI

    How to add a WireGuard peer with the Pro Custodibus web UI.
    Read more…
  52. Securing Operational Technology With WireGuard

    How to secure Operational Technology systems with WireGuard
    Read more…
  53. Use a GUI to Set Up WireGuard Point-to-Site

    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more…
  54. How to Use WireGuard With Firewalld

    How to set up firewalld for WireGuard under four different scenarios.
    Read more…
  55. DNS Updates to WireGuard Endpoints

    How to solve the DNS re-resolution problem for WireGuard endpoints with Pro Custodibus.
    Read more…
  56. High Availability WireGuard on Azure

    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more…
  57. WireGuard SysV Init Script

    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more…
  58. Point to Cloud WireGuard With an Azure Hub VNet

    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more…
  59. WireGuard Usage Monitoring

    How to monitor WireGuard server usage with Pro Custodibus.
    Read more…
  60. How to Use WireGuard With UFW

    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more…
  61. Friendly Names for WireGuard Peers

    How to set human-readable names for WireGuard peers.
    Read more…
  62. WireGuard Point to Site Routing

    Routing strategies for the WireGuard Point to Site topology.
    Read more…
  63. WireGuard Point to Site With a Site Gateway

    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more…
  64. WireGuard Point to Site With Port Forwarding

    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more…
  65. WireGuard Access Control With Iptables

    How to apply WireGuard ACLs with an iptables firewall.
    Read more…
  66. Python 3 WireGuard Health Check

    AWS ELB WireGuard health-check service for Python 3.
    Read more…
  67. WireGuard AllowedIPs Calculator

    How to “subtract” blocks from your WireGuard AllowedIPs setting.
    Read more…
  68. WireGuard Network Map

    How to visualize the connections between WireGuard peers.
    Read more…
  69. Four Ways to View WireGuard Logs

    How to enable and view WireGuard logging.
    Read more…
  70. When to Use WireGuard

    Three use-cases for using WireGuard for secure access to business/enterprise networks.
    Read more…
  71. How to Monitor for WireGuard Key Compromise

    How to know when your WireGuard private keys have been compromised.
    Read more…
  72. High Availability WireGuard on AWS

    How to set up WireGuard in a high-availability configuration on AWS.
    Read more…
  73. Point to Cloud WireGuard With AWS Private Subnets

    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more…
  74. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more…
  75. Getting Started With Pro Custodibus

    How to start monitoring and managing your first WireGuard host.
    Read more…
  76. How to Monitor Who’s Connected to Your WireGuard VPN

    Best tools for checking who’s connecting to your VPN.
    Read more…
  77. WireGuard Endpoints and IP Addresses

    How packets flow between WireGuard endpoints.
    Read more…
  78. WireGuard Terminology

    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more…
  79. WireGuard Site to Site Configuration

    How to set up two WireGuard peers in a Site to Site topology.
    Read more…
  80. WireGuard Point to Site Configuration

    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more…
  81. WireGuard Hub and Spoke Configuration

    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more…
  82. WireGuard Point to Point Configuration

    How to set up two WireGuard peers in a Point to Point topology.
    Read more…
  83. Primary WireGuard Topologies

    These are the four main topologies you’d consider when deciding how to connect endpoints over a WireGuard network.
    Read more…