Blog Articles by Justin Ludwig

  1. Connecting WireGuard and OpenVPN

    by Justin Ludwig
    (blog)
  2. WireGuard
  3. Networking
    4.
    How to connect WireGuard and OpenVPN networks.
    Read more...

  4. WireGuard Multi-Factor Authentication With Pro Custodibus

    by Justin Ludwig
    (blog)
  5. WireGuard
  6. Security
  7. Pro Custodibus
    8.
    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more...

  8. Multi-Hop WireGuard

    by Justin Ludwig
    (blog)
  9. WireGuard
  10. Networking
    11.
    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more...

  11. Configure WireGuard via AWS SSM Parameter Store

    by Justin Ludwig
    (blog)
  12. WireGuard
  13. Cloud
  14. AWS
  15. Containers
    16.
    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more...

  16. WireGuard on AWS ECS

    by Justin Ludwig
    (blog)
  17. WireGuard
  18. Cloud
  19. AWS
  20. Containers
  21. Jumphost
    22.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more...

  22. Installing WireGuard on Amazon Linux

    by Justin Ludwig
    (blog)
  23. WireGuard
  24. Cloud
  25. AWS
    26.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2022.
    Read more...

  26. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
    (blog)
  27. WireGuard
  28. Networking
  29. Firewall
  30. firewalld
    31.
    How to use firewalld policies for network access control.
    Read more...

  31. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
    (blog)
  32. WireGuard
  33. Security
  34. Monitoring
  35. Pro Custodibus
    36.
    How to connect Pro Custodibus to Datadog.
    Read more...

  36. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
    (blog)
  37. WireGuard
  38. Networking
  39. Firewall
  40. nftables
    41.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more...

  41. WireGuard Over TCP

    by Justin Ludwig
    (blog)
  42. WireGuard
  43. Networking
    44.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more...

  44. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
    (blog)
  45. WireGuard
  46. Containers
    47.
    How to safely expose container services through WireGuard.
    Read more...

  47. Wg-quick Default Firewall Rules

    by Justin Ludwig
    (blog)
  48. WireGuard
  49. Firewall
  50. iptables
  51. nftables
    52.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more...

  52. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
    (blog)
  53. WireGuard
  54. Networking
    55.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more...

  55. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
    (blog)
  56. SSH
  57. WireGuard
  58. Jumphost
    59.
    Why WireGuard is better for jump servers than SSH.
    Read more...

  59. How to Use WireGuard With Nftables

    by Justin Ludwig
    (blog)
  60. WireGuard
  61. Networking
  62. Firewall
  63. nftables
    64.
    How to set up nftables for WireGuard under five different scenarios.
    Read more...

  64. Building, Using, and Monitoring WireGuard Containers

    by Justin Ludwig
    (blog)
  65. WireGuard
  66. Pro Custodibus
  67. Containers
    68.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more...

  68. High Availability WireGuard Site to Site

    by Justin Ludwig
    (blog)
  69. WireGuard
  70. Networking
  71. Routing
    72.
    How to connect sites with redundant WireGuard routers.
    Read more...

  72. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
    (blog)
  73. WireGuard
  74. Security
  75. Pro Custodibus
    76.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more...

  76. Securing Operational Technology With WireGuard

    by Justin Ludwig
    (blog)
  77. WireGuard
  78. Networking
  79. iptables
    80.
    How to secure Operational Technology systems with WireGuard
    Read more...

  80. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
    (blog)
  81. WireGuard
  82. Pro Custodibus
    83.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more...

  83. How to Use WireGuard With Firewalld

    by Justin Ludwig
    (blog)
  84. WireGuard
  85. Networking
  86. Firewall
  87. firewalld
    88.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more...

  88. High Availability WireGuard on Azure

    by Justin Ludwig
    (blog)
  89. WireGuard
  90. Cloud
  91. Networking
    92.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more...

  92. WireGuard SysV Init Script

    by Justin Ludwig
    (blog)
  93. WireGuard
    94.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more...

  94. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
    (blog)
  95. WireGuard
  96. Cloud
  97. Networking
  98. Jumphost
    99.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more...

  99. WireGuard Usage Monitoring

    by Justin Ludwig
    (blog)
  100. WireGuard
  101. Monitoring
  102. Pro Custodibus
    103.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more...

  103. How to Use WireGuard With UFW

    by Justin Ludwig
    (blog)
  104. WireGuard
  105. Networking
  106. Firewall
  107. UFW
    108.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more...

  108. WireGuard Point to Site Routing

    by Justin Ludwig
    (blog)
  109. WireGuard
  110. Networking
    111.
    Routing strategies for the WireGuard Point to Site topology.
    Read more...

  111. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
    (blog)
  112. WireGuard
  113. Networking
    114.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more...

  114. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
    (blog)
  115. WireGuard
  116. Networking
  117. iptables
    118.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more...

  118. WireGuard Access Control With Iptables

    by Justin Ludwig
    (blog)
  119. WireGuard
  120. Networking
  121. Firewall
  122. iptables
    123.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more...

  123. Python 3 WireGuard Health Check

    by Justin Ludwig
    (blog)
  124. WireGuard
  125. Cloud
    126.
    AWS ELB WireGuard health-check service for Python 3.
    Read more...

  126. WireGuard AllowedIPs Calculator

    by Justin Ludwig
    (blog)
  127. WireGuard
    128.
    How to "subtract" blocks from your WireGuard AllowedIPs setting.
    Read more...

  128. Four Ways to View WireGuard Logs

    by Justin Ludwig
    (blog)
  129. WireGuard
  130. Monitoring
    131.
    How to enable and view WireGuard logging.
    Read more...

  131. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
    (blog)
  132. WireGuard
  133. Security
  134. Monitoring
  135. Pro Custodibus
    136.
    How to know when your WireGuard private keys have been compromised.
    Read more...

  136. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
    (blog)
  137. WireGuard
  138. Cloud
  139. AWS
  140. Networking
    141.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more...

  141. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
    (blog)
  142. WireGuard
  143. Cloud
  144. AWS
  145. Networking
  146. Jumphost
    147.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more...

  147. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
    (blog)
  148. WireGuard
  149. Security
    150.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more...

  150. Getting Started With Pro Custodibus

    by Justin Ludwig
    (blog)
  151. Pro Custodibus
  152. Tutorial
    153.
    How to start monitoring and managing your first WireGuard host.
    Read more...

  153. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
    (blog)
  154. WireGuard
  155. Monitoring
    156.
    Best tools for checking who's connecting to your VPN.
    Read more...

  156. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
    (blog)
  157. WireGuard
  158. Networking
    159.
    How packets flow between WireGuard endpoints.
    Read more...

  159. WireGuard Terminology

    by Justin Ludwig
    (blog)
  160. WireGuard
    161.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more...

  161. WireGuard Site to Site Configuration

    by Justin Ludwig
    (blog)
  162. WireGuard
  163. Networking
  164. iptables
    165.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more...

  165. WireGuard Point to Site Configuration

    by Justin Ludwig
    (blog)
  166. WireGuard
  167. Networking
  168. iptables
  169. Jumphost
    170.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more...

  170. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
    (blog)
  171. WireGuard
  172. Networking
  173. iptables
    174.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more...

  174. WireGuard Point to Point Configuration

    by Justin Ludwig
    (blog)
  175. WireGuard
  176. Networking
  177. iptables
    178.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more...

  178. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
    (blog)
  179. WireGuard
  180. Networking
    181.
    These are the four main topologies you'd consider when deciding how to connect endpoints over a WireGuard network.
    Read more...