Blog

  1. Troubleshooting WireGuard with Tcpdump

    by Justin Ludwig
  2. WireGuard
  3. Networking
    4.
    How to debug WireGuard connection issues using tcpdump.
    Read more…

  4. WireGuard Transparent Tunnel

    by Justin Ludwig
  5. WireGuard
  6. Networking
  7. Routing
  8. Point to Point
    9.
    How to use the same IP addresses for a point-to-point tunnel when WireGuard is up as when down.
    Read more…

  9. Using WireGuard For Specific Apps on Linux

    by Justin Ludwig
  10. WireGuard
  11. Networking
  12. Routing
  13. Point to Site
    14.
    How to selectively enable or disable a WireGuard tunnel for any program via network namespaces.
    Read more…

  14. An Opinionated YubiKey Set-Up Guide

    by Justin Ludwig
  15. Smart Cards
  16. Keys
  17. SSH
    18.
    How to set up a YubiKey 5 in 2023.
    Read more…

  18. WireGuard Key on an OpenPGP Card

    by Justin Ludwig
  19. WireGuard
  20. Smart Cards
  21. Keys
    22.
    How to use a WireGuard key stored on an OpenPGP card.
    Read more…

  22. Installing GnuPG 2.4 on Ubuntu 22.04

    by Justin Ludwig
  23. Smart Cards
    24.
    How to build and install GPG 2.4.x on Ubuntu 22.04.
    Read more…

  24. 3 Ways to Protect WireGuard With YubiKey

    (updated )
    by Justin Ludwig
  25. WireGuard
  26. Smart Cards
  27. Keys
    28.
    How to use a YubiKey to protect your WireGuard private keys.
    Read more…

  28. More Tools for Monitoring WireGuard Data Usage

    by Jennifer Ormond
  29. WireGuard
  30. Monitoring
  31. Pro Custodibus
    32.
    Some recently-added features of Pro Custodibus for monitoring WireGuard usage.
    Read more…

  32. Internal DNS Names With WireGuard

    by Jennifer Ormond
  33. WireGuard
  34. DNS
    35.
    How to set up a WireGuard peer as a CoreDNS server.
    Read more…

  35. Preventing Lateral Movement With WireGuard

    by Justin Ludwig
  36. WireGuard
  37. Networking
  38. Security
  39. nftables
  40. Point to Point
  41. Hub and Spoke
    42.
    How to use micro-segmentation with WireGuard to stop an attacker from moving laterally in your network.
    Read more…

  42. Limiting WireGuard Bandwidth

    by Justin Ludwig
  43. WireGuard
  44. Networking
    45.
    How to limit the bandwidth used by a WireGuard connection.
    Read more…

  45. WireGuard Performance Tuning

    by Justin Ludwig
  46. WireGuard
  47. Networking
    48.
    A guide to testing and tuning WireGuard network performance.
    Read more…

  48. Best Linux Firewall for WireGuard

    by Jennifer Ormond
  49. WireGuard
  50. Networking
  51. Firewall
  52. firewalld
  53. nftables
    54.
    Best options for setting up a simple firewall for WireGuard on Linux.
    Read more…

  54. How to Set Up a WireGuard Jumphost

    by Jennifer Ormond
  55. WireGuard
  56. Networking
  57. Firewall
  58. nftables
  59. Point to Site
    60.
    A simple WireGuard jumphost tutorial.
    Read more…

  60. Installing Libsodium on Amazon Linux 2023

    (updated )
    by Justin Ludwig
  61. Cloud
  62. AWS
    63.
    How to install libsodium on Amazon Linux 2022/2023.
    Read more…

  63. WireGuard in Podman Rootless Containers

    by Justin Ludwig
  64. WireGuard
  65. Containers
    66.
    13 common patterns for running WireGuard in Podman containers.
    Read more…

  66. OPNsense Push Routes Through WireGuard Via OSPF

    by Justin Ludwig
  67. WireGuard
  68. Networking
  69. Routing
  70. Site to Site
    71.
    How to use OSPF to share routes from an OPNsense router over WireGuard.
    Read more…

  71. OPNsense WireGuard Site to Site

    by Justin Ludwig
  72. WireGuard
  73. Networking
  74. Site to Site
    75.
    How to connect an OPNsense router to a Linux router over WireGuard.
    Read more…

  75. WireGuard Port Forwarding From the Internet

    by Justin Ludwig
  76. WireGuard
  77. Networking
  78. Routing
  79. Point to Site
    80.
    How to forward inbound traffic from the Internet to another server using WireGuard.
    Read more…

  80. Zero Trust Architecture With WireGuard

    by Justin Ludwig
  81. WireGuard
  82. Networking
  83. Firewall
  84. nftables
  85. Hub and Spoke
    86.
    How to get started implementing a zero-trust architecture.
    Read more…

  86. Connecting WireGuard and OpenVPN

    by Justin Ludwig
  87. WireGuard
  88. Networking
  89. Hub and Spoke
    90.
    How to connect WireGuard and OpenVPN networks.
    Read more…

  90. WireGuard Automatic Key Rotation With Pro Custodibus

    by Jennifer Ormond
  91. WireGuard
  92. Security
  93. Keys
  94. Pro Custodibus
    95.
    Why and how to set up automatic WireGuard preshared key rotation with Pro Custodibus.
    Read more…

  95. Set Up a New User Device With WireGuard MFA

    by Jennifer Ormond
  96. WireGuard
  97. Security
  98. Pro Custodibus
    99.
    How to enroll a new user and device into WireGuard MFA with Pro Custodibus.
    Read more…

  99. WireGuard Multi-Factor Authentication With Pro Custodibus

    by Justin Ludwig
  100. WireGuard
  101. Security
  102. Pro Custodibus
    103.
    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more…

  103. Multi-Hop WireGuard

    by Justin Ludwig
  104. WireGuard
  105. Networking
  106. Routing
  107. Hub and Spoke
  108. Point to Site
    109.
    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more…

  109. Configure WireGuard via AWS SSM Parameter Store

    by Justin Ludwig
  110. WireGuard
  111. Cloud
  112. AWS
  113. Containers
    114.
    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more…

  114. WireGuard on AWS ECS

    by Justin Ludwig
  115. WireGuard
  116. Cloud
  117. AWS
  118. Containers
  119. Point to Site
    120.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more…

  120. Installing WireGuard on Amazon Linux

    (updated )
    by Justin Ludwig
  121. WireGuard
  122. Cloud
  123. AWS
    124.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2023.
    Read more…

  124. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
  125. WireGuard
  126. Networking
  127. Firewall
  128. firewalld
    129.
    How to use firewalld policies for network access control.
    Read more…

  129. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
  130. WireGuard
  131. Security
  132. Monitoring
  133. Pro Custodibus
    134.
    How to connect Pro Custodibus to Datadog.
    Read more…

  134. WireGuard DNS Configuration for Systemd

    by Jennifer Ormond
  135. WireGuard
  136. DNS
    137.
    Systemd-resolved DNS settings for WireGuard.
    Read more…

  137. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
  138. WireGuard
  139. Networking
  140. Firewall
  141. nftables
  142. Hub and Spoke
    143.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more…

  143. WireGuard Over TCP

    by Justin Ludwig
  144. WireGuard
  145. Networking
  146. Point to Point
    147.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more…

  147. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
  148. WireGuard
  149. Containers
    150.
    How to safely expose container services through WireGuard.
    Read more…

  150. Wg-quick Default Firewall Rules

    by Justin Ludwig
  151. WireGuard
  152. Firewall
  153. iptables
  154. nftables
    155.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more…

  155. WireGuard With AWS Split DNS

    by Jennifer Ormond
  156. WireGuard
  157. Cloud
  158. AWS
  159. DNS
    160.
    Use a Route 53 private hosted zone to access internal AWS resources with WireGuard.
    Read more…

  160. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
  161. WireGuard
  162. Networking
  163. Hub and Spoke
    164.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more…

  164. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
  165. SSH
  166. WireGuard
  167. Point to Site
    168.
    Why WireGuard is better for jump servers than SSH.
    Read more…

  168. How to Use WireGuard With Nftables

    (updated )
    by Justin Ludwig
  169. WireGuard
  170. Networking
  171. Firewall
  172. nftables
    173.
    How to set up nftables for WireGuard under five different scenarios.
    Read more…

  173. Building, Using, and Monitoring WireGuard Containers

    (updated )
    by Justin Ludwig
  174. WireGuard
  175. Pro Custodibus
  176. Containers
    177.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more…

  177. High Availability WireGuard Site to Site

    by Justin Ludwig
  178. WireGuard
  179. Networking
  180. Routing
  181. High Availability
  182. Site to Site
    183.
    How to connect sites with redundant WireGuard routers.
    Read more…

  183. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
  184. WireGuard
  185. Security
  186. Keys
  187. Pro Custodibus
    188.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more…

  188. Add a WireGuard Peer With the Pro Custodibus GUI

    by Jennifer Ormond
  189. WireGuard
  190. Pro Custodibus
    191.
    How to add a WireGuard peer with the Pro Custodibus web UI.
    Read more…

  191. Securing Operational Technology With WireGuard

    by Justin Ludwig
  192. WireGuard
  193. Networking
  194. iptables
  195. Site to Site
    196.
    How to secure Operational Technology systems with WireGuard
    Read more…

  196. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
  197. WireGuard
  198. Pro Custodibus
  199. Point to Site
    200.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more…

  200. How to Use WireGuard With Firewalld

    by Justin Ludwig
  201. WireGuard
  202. Networking
  203. Firewall
  204. firewalld
    205.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more…

  205. DNS Updates to WireGuard Endpoints

    by Jennifer Ormond
  206. WireGuard
  207. Pro Custodibus
  208. DNS
    209.
    How to solve the DNS re-resolution problem for WireGuard endpoints with Pro Custodibus.
    Read more…

  209. High Availability WireGuard on Azure

    by Justin Ludwig
  210. WireGuard
  211. Cloud
  212. Networking
  213. High Availability
    214.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more…

  214. WireGuard SysV Init Script

    by Justin Ludwig
  215. WireGuard
    216.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more…

  216. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
  217. WireGuard
  218. Cloud
  219. Networking
  220. Point to Site
    221.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more…

  221. WireGuard Usage Monitoring

    by Justin Ludwig
  222. WireGuard
  223. Monitoring
  224. Pro Custodibus
    225.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more…

  225. How to Use WireGuard With UFW

    by Justin Ludwig
  226. WireGuard
  227. Networking
  228. Firewall
  229. UFW
    230.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more…

  230. Friendly Names for WireGuard Peers

    by Jennifer Ormond
  231. WireGuard
  232. Pro Custodibus
    233.
    How to set human-readable names for WireGuard peers.
    Read more…

  233. WireGuard Point to Site Routing

    by Justin Ludwig
  234. WireGuard
  235. Networking
  236. Point to Site
    237.
    Routing strategies for the WireGuard Point to Site topology.
    Read more…

  237. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
  238. WireGuard
  239. Networking
  240. Point to Site
    241.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more…

  241. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
  242. WireGuard
  243. Networking
  244. iptables
  245. Point to Site
    246.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more…

  246. WireGuard Access Control With Iptables

    by Justin Ludwig
  247. WireGuard
  248. Networking
  249. Firewall
  250. iptables
    251.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more…

  251. Python 3 WireGuard Health Check

    by Justin Ludwig
  252. WireGuard
  253. Cloud
    254.
    AWS ELB WireGuard health-check service for Python 3.
    Read more…

  254. WireGuard AllowedIPs Calculator

    by Justin Ludwig
  255. WireGuard
    256.
    How to “subtract” blocks from your WireGuard AllowedIPs setting.
    Read more…

  256. WireGuard Network Map

    by Jennifer Ormond
  257. WireGuard
  258. Pro Custodibus
    259.
    How to visualize the connections between WireGuard peers.
    Read more…

  259. Four Ways to View WireGuard Logs

    by Justin Ludwig
  260. WireGuard
  261. Monitoring
    262.
    How to enable and view WireGuard logging.
    Read more…

  262. When to Use WireGuard

    by Jennifer Ormond
  263. WireGuard
    264.
    Three use-cases for using WireGuard for secure access to business/enterprise networks.
    Read more…

  264. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
  265. WireGuard
  266. Security
  267. Keys
  268. Monitoring
  269. Pro Custodibus
    270.
    How to know when your WireGuard private keys have been compromised.
    Read more…

  270. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
  271. WireGuard
  272. Cloud
  273. AWS
  274. Networking
  275. High Availability
    276.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more…

  276. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
  277. WireGuard
  278. Cloud
  279. AWS
  280. Networking
  281. Point to Site
    282.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more…

  282. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
  283. WireGuard
  284. Security
  285. Keys
    286.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more…

  286. Getting Started With Pro Custodibus

    by Justin Ludwig
  287. Pro Custodibus
    288.
    How to start monitoring and managing your first WireGuard host.
    Read more…

  288. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
  289. WireGuard
  290. Monitoring
    291.
    Best tools for checking who’s connecting to your VPN.
    Read more…

  291. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
  292. WireGuard
  293. Networking
    294.
    How packets flow between WireGuard endpoints.
    Read more…

  294. WireGuard Terminology

    by Justin Ludwig
  295. WireGuard
    296.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more…

  296. WireGuard Site to Site Configuration

    by Justin Ludwig
  297. WireGuard
  298. Networking
  299. iptables
  300. Site to Site
    301.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more…

  301. WireGuard Point to Site Configuration

    by Justin Ludwig
  302. WireGuard
  303. Networking
  304. iptables
  305. Point to Site
    306.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more…

  306. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
  307. WireGuard
  308. Networking
  309. iptables
  310. Hub and Spoke
    311.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more…

  311. WireGuard Point to Point Configuration

    by Justin Ludwig
  312. WireGuard
  313. Networking
  314. iptables
  315. Point to Point
    316.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more…

  316. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
  317. WireGuard
  318. Networking
    319.
    These are the four main topologies you’d consider when deciding how to connect endpoints over a WireGuard network.
    Read more…