Blog Articles by Justin Ludwig

  1. WireGuard Multi-Factor Authentication With Pro Custodibus

    by Justin Ludwig
    (blog)
  2. WireGuard
  3. Security
  4. Pro Custodibus
    5.
    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more...

  5. Multi-Hop WireGuard

    by Justin Ludwig
    (blog)
  6. WireGuard
  7. Networking
    8.
    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more...

  8. Configure WireGuard via AWS SSM Parameter Store

    by Justin Ludwig
    (blog)
  9. WireGuard
  10. Cloud
  11. AWS
  12. Containers
    13.
    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more...

  13. WireGuard on AWS ECS

    by Justin Ludwig
    (blog)
  14. WireGuard
  15. Cloud
  16. AWS
  17. Containers
  18. Jumphost
    19.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more...

  19. Installing WireGuard on Amazon Linux

    by Justin Ludwig
    (blog)
  20. WireGuard
  21. Cloud
  22. AWS
    23.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2022.
    Read more...

  23. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
    (blog)
  24. WireGuard
  25. Networking
  26. Firewall
  27. firewalld
    28.
    How to use firewalld policies for network access control.
    Read more...

  28. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
    (blog)
  29. WireGuard
  30. Security
  31. Monitoring
  32. Pro Custodibus
    33.
    How to connect Pro Custodibus to Datadog.
    Read more...

  33. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
    (blog)
  34. WireGuard
  35. Networking
  36. Firewall
  37. nftables
    38.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more...

  38. WireGuard Over TCP

    by Justin Ludwig
    (blog)
  39. WireGuard
  40. Networking
    41.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more...

  41. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
    (blog)
  42. WireGuard
  43. Containers
    44.
    How to safely expose container services through WireGuard.
    Read more...

  44. Wg-quick Default Firewall Rules

    by Justin Ludwig
    (blog)
  45. WireGuard
  46. Firewall
  47. iptables
  48. nftables
    49.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more...

  49. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
    (blog)
  50. WireGuard
  51. Networking
    52.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more...

  52. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
    (blog)
  53. SSH
  54. WireGuard
  55. Jumphost
    56.
    Why WireGuard is better for jump servers than SSH.
    Read more...

  56. How to Use WireGuard With Nftables

    by Justin Ludwig
    (blog)
  57. WireGuard
  58. Networking
  59. Firewall
  60. nftables
    61.
    How to set up nftables for WireGuard under five different scenarios.
    Read more...

  61. Building, Using, and Monitoring WireGuard Containers

    by Justin Ludwig
    (blog)
  62. WireGuard
  63. Pro Custodibus
  64. Containers
    65.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more...

  65. High Availability WireGuard Site to Site

    by Justin Ludwig
    (blog)
  66. WireGuard
  67. Networking
  68. Routing
    69.
    How to connect sites with redundant WireGuard routers.
    Read more...

  69. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
    (blog)
  70. WireGuard
  71. Security
  72. Pro Custodibus
    73.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more...

  73. Securing Operational Technology With WireGuard

    by Justin Ludwig
    (blog)
  74. WireGuard
  75. Networking
  76. iptables
    77.
    How to secure Operational Technology systems with WireGuard
    Read more...

  77. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
    (blog)
  78. WireGuard
  79. Pro Custodibus
    80.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more...

  80. How to Use WireGuard With Firewalld

    by Justin Ludwig
    (blog)
  81. WireGuard
  82. Networking
  83. Firewall
  84. firewalld
    85.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more...

  85. High Availability WireGuard on Azure

    by Justin Ludwig
    (blog)
  86. WireGuard
  87. Cloud
  88. Networking
    89.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more...

  89. WireGuard SysV Init Script

    by Justin Ludwig
    (blog)
  90. WireGuard
    91.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more...

  91. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
    (blog)
  92. WireGuard
  93. Cloud
  94. Networking
  95. Jumphost
    96.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more...

  96. WireGuard Usage Monitoring

    by Justin Ludwig
    (blog)
  97. WireGuard
  98. Monitoring
  99. Pro Custodibus
    100.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more...

  100. How to Use WireGuard With UFW

    by Justin Ludwig
    (blog)
  101. WireGuard
  102. Networking
  103. Firewall
  104. UFW
    105.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more...

  105. WireGuard Point to Site Routing

    by Justin Ludwig
    (blog)
  106. WireGuard
  107. Networking
    108.
    Routing strategies for the WireGuard Point to Site topology.
    Read more...

  108. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
    (blog)
  109. WireGuard
  110. Networking
    111.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more...

  111. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
    (blog)
  112. WireGuard
  113. Networking
  114. iptables
    115.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more...

  115. WireGuard Access Control With Iptables

    by Justin Ludwig
    (blog)
  116. WireGuard
  117. Networking
  118. Firewall
  119. iptables
    120.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more...

  120. Python 3 WireGuard Health Check

    by Justin Ludwig
    (blog)
  121. WireGuard
  122. Cloud
    123.
    AWS ELB WireGuard health-check service for Python 3.
    Read more...

  123. WireGuard AllowedIPs Calculator

    by Justin Ludwig
    (blog)
  124. WireGuard
    125.
    How to "subtract" blocks from your WireGuard AllowedIPs setting.
    Read more...

  125. Four Ways to View WireGuard Logs

    by Justin Ludwig
    (blog)
  126. WireGuard
  127. Monitoring
    128.
    How to enable and view WireGuard logging.
    Read more...

  128. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
    (blog)
  129. WireGuard
  130. Security
  131. Monitoring
  132. Pro Custodibus
    133.
    How to know when your WireGuard private keys have been compromised.
    Read more...

  133. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
    (blog)
  134. WireGuard
  135. Cloud
  136. AWS
  137. Networking
    138.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more...

  138. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
    (blog)
  139. WireGuard
  140. Cloud
  141. AWS
  142. Networking
  143. Jumphost
    144.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more...

  144. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
    (blog)
  145. WireGuard
  146. Security
    147.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more...

  147. Getting Started With Pro Custodibus

    by Justin Ludwig
    (blog)
  148. Pro Custodibus
  149. Tutorial
    150.
    How to start monitoring and managing your first WireGuard host.
    Read more...

  150. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
    (blog)
  151. WireGuard
  152. Monitoring
    153.
    Best tools for checking who's connecting to your VPN.
    Read more...

  153. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
    (blog)
  154. WireGuard
  155. Networking
    156.
    How packets flow between WireGuard endpoints.
    Read more...

  156. WireGuard Terminology

    by Justin Ludwig
    (blog)
  157. WireGuard
    158.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more...

  158. WireGuard Site to Site Configuration

    by Justin Ludwig
    (blog)
  159. WireGuard
  160. Networking
  161. iptables
    162.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more...

  162. WireGuard Point to Site Configuration

    by Justin Ludwig
    (blog)
  163. WireGuard
  164. Networking
  165. iptables
  166. Jumphost
    167.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more...

  167. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
    (blog)
  168. WireGuard
  169. Networking
  170. iptables
    171.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more...

  171. WireGuard Point to Point Configuration

    by Justin Ludwig
    (blog)
  172. WireGuard
  173. Networking
  174. iptables
    175.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more...

  175. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
    (blog)
  176. WireGuard
  177. Networking
    178.
    These are the four main topologies you'd consider when deciding how to connect endpoints over a WireGuard network.
    Read more...