Blog Articles by Justin Ludwig

  1. WireGuard Multi-Factor Authentication With Pro Custodibus

    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more...
  2. Multi-Hop WireGuard

    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more...
  3. Configure WireGuard via AWS SSM Parameter Store

    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more...
  4. WireGuard on AWS ECS

    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more...
  5. Installing WireGuard on Amazon Linux

    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2022.
    Read more...
  6. Firewalld Policy-Based Access Control for WireGuard

    How to use firewalld policies for network access control.
    Read more...
  7. Push WireGuard Logs to Datadog SIEM

    How to connect Pro Custodibus to Datadog.
    Read more...
  8. Poor Man’s BeyondCorp with WireGuard

    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more...
  9. WireGuard Over TCP

    How to use udp2raw to tunnel Wireguard over TCP.
    Read more...
  10. WireGuard Remote Access to Docker Containers

    How to safely expose container services through WireGuard.
    Read more...
  11. Wg-quick Default Firewall Rules

    An explanation of the firewall rules wg-quick sets up by default.
    Read more...
  12. WireGuard End-to-End Encrypted Hub-and-Spoke

    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more...
  13. SSH Jumphost Vs WireGuard Jumphost

    Why WireGuard is better for jump servers than SSH.
    Read more...
  14. How to Use WireGuard With Nftables

    How to set up nftables for WireGuard under five different scenarios.
    Read more...
  15. Building, Using, and Monitoring WireGuard Containers

    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more...
  16. High Availability WireGuard Site to Site

    How to connect sites with redundant WireGuard routers.
    Read more...
  17. WireGuard Key Rotation With Pro Custodibus

    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more...
  18. Securing Operational Technology With WireGuard

    How to secure Operational Technology systems with WireGuard
    Read more...
  19. Use a GUI to Set Up WireGuard Point-to-Site

    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more...
  20. How to Use WireGuard With Firewalld

    How to set up firewalld for WireGuard under four different scenarios.
    Read more...
  21. High Availability WireGuard on Azure

    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more...
  22. WireGuard SysV Init Script

    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more...
  23. Point to Cloud WireGuard With an Azure Hub VNet

    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more...
  24. WireGuard Usage Monitoring

    How to monitor WireGuard server usage with Pro Custodibus.
    Read more...
  25. How to Use WireGuard With UFW

    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more...
  26. WireGuard Point to Site Routing

    Routing strategies for the WireGuard Point to Site topology.
    Read more...
  27. WireGuard Point to Site With a Site Gateway

    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more...
  28. WireGuard Point to Site With Port Forwarding

    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more...
  29. WireGuard Access Control With Iptables

    How to apply WireGuard ACLs with an iptables firewall.
    Read more...
  30. Python 3 WireGuard Health Check

    AWS ELB WireGuard health-check service for Python 3.
    Read more...
  31. WireGuard AllowedIPs Calculator

    How to "subtract" blocks from your WireGuard AllowedIPs setting.
    Read more...
  32. Four Ways to View WireGuard Logs

    How to enable and view WireGuard logging.
    Read more...
  33. How to Monitor for WireGuard Key Compromise

    How to know when your WireGuard private keys have been compromised.
    Read more...
  34. High Availability WireGuard on AWS

    How to set up WireGuard in a high-availability configuration on AWS.
    Read more...
  35. Point to Cloud WireGuard With AWS Private Subnets

    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more...
  36. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more...
  37. Getting Started With Pro Custodibus

    How to start monitoring and managing your first WireGuard host.
    Read more...
  38. How to Monitor Who’s Connected to Your WireGuard VPN

    Best tools for checking who's connecting to your VPN.
    Read more...
  39. WireGuard Endpoints and IP Addresses

    How packets flow between WireGuard endpoints.
    Read more...
  40. WireGuard Terminology

    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more...
  41. WireGuard Site to Site Configuration

    How to set up two WireGuard peers in a Site to Site topology.
    Read more...
  42. WireGuard Point to Site Configuration

    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more...
  43. WireGuard Hub and Spoke Configuration

    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more...
  44. WireGuard Point to Point Configuration

    How to set up two WireGuard peers in a Point to Point topology.
    Read more...
  45. Primary WireGuard Topologies

    These are the four main topologies you'd consider when deciding how to connect endpoints over a WireGuard network.
    Read more...