# Linux -weight: 600;">sudo -weight: 500;">apt -weight: 500;">install wireguard # macOS -weight: 500;">brew -weight: 500;">install wireguard-tools # Linux -weight: 600;">sudo -weight: 500;">apt -weight: 500;">install wireguard # macOS -weight: 500;">brew -weight: 500;">install wireguard-tools # Linux -weight: 600;">sudo -weight: 500;">apt -weight: 500;">install wireguard # macOS -weight: 500;">brew -weight: 500;">install wireguard-tools # Server wg genkey | tee server_private.key | wg pubkey > server_public.key # Client wg genkey | tee client_private.key | wg pubkey > client_public.key # Server wg genkey | tee server_private.key | wg pubkey > server_public.key # Client wg genkey | tee client_private.key | wg pubkey > client_public.key # Server wg genkey | tee server_private.key | wg pubkey > server_public.key # Client wg genkey | tee client_private.key | wg pubkey > client_public.key # /etc/wireguard/wg0.conf [Interface] Address = 10.0.0.1/24 ListenPort = 51820 PrivateKey = <server_private_key> PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE [Peer] PublicKey = <client_public_key> AllowedIPs = 10.0.0.2/32 # /etc/wireguard/wg0.conf [Interface] Address = 10.0.0.1/24 ListenPort = 51820 PrivateKey = <server_private_key> PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE [Peer] PublicKey = <client_public_key> AllowedIPs = 10.0.0.2/32 # /etc/wireguard/wg0.conf [Interface] Address = 10.0.0.1/24 ListenPort = 51820 PrivateKey = <server_private_key> PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE [Peer] PublicKey = <client_public_key> AllowedIPs = 10.0.0.2/32 # /etc/wireguard/wg0.conf [Interface] Address = 10.0.0.2/24 PrivateKey = <client_private_key> DNS = 1.1.1.1 [Peer] PublicKey = <server_public_key> Endpoint = server.example.com:51820 AllowedIPs = 0.0.0.0/0 PersistentKeepalive = 25 # /etc/wireguard/wg0.conf [Interface] Address = 10.0.0.2/24 PrivateKey = <client_private_key> DNS = 1.1.1.1 [Peer] PublicKey = <server_public_key> Endpoint = server.example.com:51820 AllowedIPs = 0.0.0.0/0 PersistentKeepalive = 25 # /etc/wireguard/wg0.conf [Interface] Address = 10.0.0.2/24 PrivateKey = <client_private_key> DNS = 1.1.1.1 [Peer] PublicKey = <server_public_key> Endpoint = server.example.com:51820 AllowedIPs = 0.0.0.0/0 PersistentKeepalive = 25 # Start -weight: 600;">sudo wg-quick up wg0 # Check -weight: 500;">status -weight: 600;">sudo wg show # Stop -weight: 600;">sudo wg-quick down wg0 # Start -weight: 600;">sudo wg-quick up wg0 # Check -weight: 500;">status -weight: 600;">sudo wg show # Stop -weight: 600;">sudo wg-quick down wg0 # Start -weight: 600;">sudo wg-quick up wg0 # Check -weight: 500;">status -weight: 600;">sudo wg show # Stop -weight: 600;">sudo wg-quick down wg0 - Fast — kernel-level, near wire-speed - Simple — minimal configuration - Secure — modern cryptography, small attack surface - Roaming — seamless IP changes - Cross-platform — Linux, macOS, Windows, iOS, Android - WireGuard Docs - Quick Start