Difference between revisions of "WireGuard"
Jump to navigation
Jump to search
↑ https://www.wireguard.com/papers/wireguard.pdf
↑ https://www.wireguard.com/papers/wireguard.pdf
Line 42: | Line 42: | ||
== Related terms == | == Related terms == | ||
− | * <code>[[sysctl]] -w net.ipv4.[[ip_forward]]=1</code> | + | * <code>[[sysctl]] -w [[net.ipv4]].[[ip_forward]]=1</code> |
* <code>sysctl -w net.ipv6.conf.all.forwarding=1</code> | * <code>sysctl -w net.ipv6.conf.all.forwarding=1</code> | ||
* [[4G]] | * [[4G]] |
Revision as of 08:44, 9 August 2021
wikipedia:WireGuard is a free and open-source software application and communication protocol that implements virtual private network techniques to create secure point-to-point connections in routed or bridged configurations. It use Noise protocol framework, Curve25519, ChaCha20, Poly1305, BLAKE2, SipHash24 and HKDF.
Technical features:
- WireGuard is invisible to illegitimate peers and network scanners [1]
- WireGuard uses only UDP protocol (port 41414).
- Connection-less protocol
- Curve25519 used for identified peers, using their public key, a 32-byte Curve25519 point
Included in March 2020 into the Linux Kernel 5.6 , available in Ubuntu since Ubuntu 20.10
WireGuard's encryption speed claims to be faster that IPsec group protocols.
- Debian packages:
wireguard, wireguard-dkms, wireguard-tools
Commands
wireguard-go wg0
ip link add wg0 type wireguard
wg
Configuration
Author: Jason A. Donenfeld. Advisors: Trevor Perrin, Jean-Philippe Aumasson, Steven M. Bellovin, and Greg Kroah-Hartman[2]
Activities
Related terms
sysctl -w net.ipv4.ip_forward=1
sysctl -w net.ipv6.conf.all.forwarding=1
- 4G
- Clients behind NAT can keep the VPN established using an optional
keepalive
parameter; it defaults to no keepalive wg-watchdog.sh
https://gist.github.com/mattkasun/9a0e90d9d31b2c935d3f6d6e71dbece9
See also
wg
,wg-quick
[up
| down | strip ],wg genkey
,wg show
- WireGuard,
wg
,wg-quick
, Curve25519,wireguard-tools
, Pritunl - VPN: IPsec (Openswan), OpenVPN, Forticlient, GlobalProtect (PAN-OS), WireGuard (Linux Kernel), Tailscale, PulseSecure, WebVPN, SoftEther, ESP, IKE, AWS VPN, Zerotier, VPN client, Pritunl, GCP Cloud VPN, Mesh virtual private network, Mullvad
- Edge Security LLC
Advertising: