WireGuard

wikipedia:WireGuard is a free and open-source software application and communication protocol that implements virtual private network techniques to create secure point-to-point connections in routed or bridged configurations. It use Noise protocol framework, Curve25519, ChaCha20, Poly1305, BLAKE2, SipHash24 and HKDF.

Technical features:

• WireGuard is invisible to illegitimate peers and network scanners
• WireGuard uses only UDP protocol (port 41414).
• Connection-less protocol

• Curve25519 used for identified peers, using their public key, a 32-byte Curve25519 point

• Linux: sudo apt install wireguard
• macOS:
  • brew install wireguard-go
  • brew install wireguard-tools
  • WireGuard app
• iOS: allows auto activation on WiFI based on SSID

Included in March 2020 into the Linux Kernel 5.6 , available in Ubuntu since Ubuntu 20.10

• NordVPN offers NordLynx built on WireGuard

WireGuard's encryption speed claims to be faster that IPsec group protocols.

• Debian packages: wireguard, wireguard-dkms, wireguard-tools

Commands

• wireguard-go wg0
• ip link add wg0 type wireguard
• wg

Configuration

• /etc/wireguard/
• /etc/wireguard/wg0.conf

Author: Jason A. Donenfeld. Advisors: Trevor Perrin, Jean-Philippe Aumasson, Steven M. Bellovin, and Greg Kroah-Hartman

Activities

• Read https://wiki.archlinux.org/index.php/WireGuard

Related terms

• sysctl -w net.ipv4.ip_forward=1
• sysctl -w net.ipv6.conf.all.forwarding=1
• 4G
• Clients behind NAT can keep the VPN established using an optional keepalive parameter; it defaults to no keepalive
• wg-watchdog.sh https://gist.github.com/mattkasun/9a0e90d9d31b2c935d3f6d6e71dbece9
• pritunl
• Tailscale, Headscale
• wireguard-vanity-address
• Jamf Connect

See also

• wg, wg-quick [ up | down | strip ], wg genkey, wg show, /etc/wireguard/
• WireGuard, wg, wg-quick, Curve25519, wireguard-tools, WireGuard App, Pritunl
• VPN: IPsec (Openswan), OpenVPN, Forticlient, GlobalProtect (PAN-OS), WireGuard (Linux Kernel), Tailscale, PulseSecure, WebVPN, SoftEther, ESP, IKE, AWS VPN, Zerotier, VPN client, Pritunl, GCP Cloud VPN, Mesh virtual private network, Mullvad, Asus RT-AX58U, ProtonVPN, Surfshark, NordVPN, ClearVPN, IVPN, Blocked

https://www.wireguard.com/papers/wireguard.pdf

https://www.wireguard.com/papers/wireguard.pdf