Articles By Justin Ludwig

  1. Enrolling Multiple Devices Into WireGuard

    by Justin Ludwig
  2. WireGuard
  3. Pro Custodibus
    4.
    How to enroll many hosts into Pro Custodibus at once.
    Read more…

  4. Wayland Apps in WireGuard Docker Containers

    by Justin Ludwig
  5. WireGuard
  6. Containers
    7.
    How to use GUI Linux applications with a Docker WireGuard network.
    Read more…

  7. Rolling Back WireGuard Changes

    by Justin Ludwig
  8. WireGuard
  9. Pro Custodibus
    10.
    Using Pro Custodibus to restore changes to your WireGuard config.
    Read more…

  10. Forwarding WireGuard Connections on Windows

    by Justin Ludwig
  11. WireGuard
  12. Networking
  13. Hub and Spoke
  14. Point to Site
  15. Site to Site
  16. Windows
    17.
    How to configure Windows to forward WireGuard connections.
    Read more…

  17. WireGuard and Windows Defender Firewall

    by Justin Ludwig
  18. WireGuard
  19. Networking
  20. Firewall
  21. Windows
    22.
    How to configure Windows Defender Firewall to allow WireGuard access.
    Read more…

  22. Avoiding Tunnel Vision on Linux

    by Justin Ludwig
  23. WireGuard
  24. Security
  25. Routing
    26.
    How to route around unsafe DHCP options on Linux.
    Read more…

  26. WireGuard Over WebRTC With Weron

    by Justin Ludwig
  27. WireGuard
  28. Networking
  29. Point to Site
    30.
    How to tunnel WireGuard through WebRTC.
    Read more…

  30. Using WireGuard Keys for SSH

    by Justin Ludwig
  31. WireGuard
  32. Networking
  33. SSH
  34. Keys
    35.
    How to use PAM to log into SSH and other applications automatically with WireGuard.
    Read more…

  35. WireGuard Containers for Overlapping Networks

    by Justin Ludwig
  36. WireGuard
  37. Networking
  38. Containers
  39. Point to Point
    40.
    How to avoid address space collisions among client networks using Docker containers.
    Read more…

  40. WireGuard Connection Wizard

    by Justin Ludwig
  41. WireGuard
  42. Pro Custodibus
  43. Point-to-Site
  44. Point-to-Point
    45.
    Easy new way to set up new WireGuard connections with the Pro Custodibus web UI.
    Read more…

  45. WireGuard With Overlapping Client Networks

    by Justin Ludwig
  46. WireGuard
  47. Networking
  48. Routing
  49. nftables
  50. Point to Point
    51.
    How to avoid address space collisions when connecting to networks you don’t control.
    Read more…

  51. WireGuard Port Forwarding From the Internet to Other Networks

    by Justin Ludwig
  52. WireGuard
  53. Networking
  54. Routing
  55. Hub and Spoke
  56. Point to Site
    57.
    How to forward traffic from the Internet through multiple hops to another server (using netfilter connmark).
    Read more…

  57. Pro Custodibus On-Premises With Rootless Podman

    by Justin Ludwig
  58. Pro Custodibus
  59. Containers
    60.
    How to use Podman, Firewalld, and Let’s Encrypt to run Pro Custodibus Community Edition.
    Read more…

  60. Quick Start for Pro Custodibus On-Premises

    by Justin Ludwig
  61. Pro Custodibus
  62. Containers
    63.
    How to get started with Pro Custodibus Community Edition, using Docker containers.
    Read more…

  63. Troubleshooting WireGuard with Tcpdump

    by Justin Ludwig
  64. WireGuard
  65. Networking
    66.
    How to debug WireGuard connection issues using tcpdump.
    Read more…

  66. WireGuard Transparent Tunnel

    by Justin Ludwig
  67. WireGuard
  68. Networking
  69. Routing
  70. Point to Point
    71.
    How to use the same IP addresses for a point-to-point tunnel when WireGuard is up as when down.
    Read more…

  71. Using WireGuard For Specific Apps on Linux

    by Justin Ludwig
  72. WireGuard
  73. Networking
  74. Routing
  75. Point to Site
    76.
    How to selectively enable or disable a WireGuard tunnel for any program via network namespaces.
    Read more…

  76. An Opinionated YubiKey Set-Up Guide

    by Justin Ludwig
  77. Smart Cards
  78. Keys
  79. SSH
    80.
    How to set up a YubiKey 5 in 2023.
    Read more…

  80. WireGuard Key on an OpenPGP Card

    by Justin Ludwig
  81. WireGuard
  82. Smart Cards
  83. Keys
    84.
    How to use a WireGuard key stored on an OpenPGP card.
    Read more…

  84. Installing GnuPG 2.4 on Ubuntu 22.04

    by Justin Ludwig
  85. Smart Cards
    86.
    How to build and install GPG 2.4.x on Ubuntu 22.04.
    Read more…

  86. 3 Ways to Protect WireGuard With YubiKey

    (updated )
    by Justin Ludwig
  87. WireGuard
  88. Smart Cards
  89. Keys
    90.
    How to use a YubiKey to protect your WireGuard private keys.
    Read more…

  90. Preventing Lateral Movement With WireGuard

    by Justin Ludwig
  91. WireGuard
  92. Networking
  93. Security
  94. nftables
  95. Point to Point
  96. Hub and Spoke
    97.
    How to use micro-segmentation with WireGuard to stop an attacker from moving laterally in your network.
    Read more…

  97. Limiting WireGuard Bandwidth

    by Justin Ludwig
  98. WireGuard
  99. Networking
    100.
    How to limit the bandwidth used by a WireGuard connection.
    Read more…

  100. WireGuard Performance Tuning

    (updated )
    by Justin Ludwig
  101. WireGuard
  102. Networking
    103.
    A guide to testing and tuning WireGuard network performance.
    Read more…

  103. Installing Libsodium on Amazon Linux 2023

    (updated )
    by Justin Ludwig
  104. Cloud
  105. AWS
    106.
    How to install libsodium on Amazon Linux 2022/2023.
    Read more…

  106. WireGuard in Podman Rootless Containers

    (updated )
    by Justin Ludwig
  107. WireGuard
  108. Containers
    109.
    13 common patterns for running WireGuard in Podman containers.
    Read more…

  109. OPNsense Push Routes Through WireGuard Via OSPF

    by Justin Ludwig
  110. WireGuard
  111. Networking
  112. Routing
  113. Site to Site
    114.
    How to use OSPF to share routes from an OPNsense router over WireGuard.
    Read more…

  114. OPNsense WireGuard Site to Site

    by Justin Ludwig
  115. WireGuard
  116. Networking
  117. Site to Site
    118.
    How to connect an OPNsense router to a Linux router over WireGuard.
    Read more…

  118. WireGuard Port Forwarding From the Internet

    by Justin Ludwig
  119. WireGuard
  120. Networking
  121. Routing
  122. Point to Site
    123.
    How to forward inbound traffic from the Internet to another server using WireGuard.
    Read more…

  123. Zero Trust Architecture With WireGuard

    by Justin Ludwig
  124. WireGuard
  125. Networking
  126. Firewall
  127. nftables
  128. Hub and Spoke
    129.
    How to get started implementing a zero-trust architecture.
    Read more…

  129. Connecting WireGuard and OpenVPN

    by Justin Ludwig
  130. WireGuard
  131. Networking
  132. Hub and Spoke
    133.
    How to connect WireGuard and OpenVPN networks.
    Read more…

  133. WireGuard Multi-Factor Authentication With Pro Custodibus

    by Justin Ludwig
  134. WireGuard
  135. Security
  136. Pro Custodibus
    137.
    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more…

  137. Multi-Hop WireGuard

    by Justin Ludwig
  138. WireGuard
  139. Networking
  140. Routing
  141. Hub and Spoke
  142. Point to Site
    143.
    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more…

  143. Configure WireGuard via AWS SSM Parameter Store

    by Justin Ludwig
  144. WireGuard
  145. Cloud
  146. AWS
  147. Containers
    148.
    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more…

  148. WireGuard on AWS ECS

    by Justin Ludwig
  149. WireGuard
  150. Cloud
  151. AWS
  152. Containers
  153. Point to Site
    154.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more…

  154. Installing WireGuard on Amazon Linux

    (updated )
    by Justin Ludwig
  155. WireGuard
  156. Cloud
  157. AWS
    158.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2023.
    Read more…

  158. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
  159. WireGuard
  160. Networking
  161. Firewall
  162. firewalld
    163.
    How to use firewalld policies for network access control.
    Read more…

  163. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
  164. WireGuard
  165. Security
  166. Monitoring
  167. Pro Custodibus
    168.
    How to connect Pro Custodibus to Datadog.
    Read more…

  168. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
  169. WireGuard
  170. Networking
  171. Firewall
  172. nftables
  173. Hub and Spoke
    174.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more…

  174. WireGuard Over TCP

    by Justin Ludwig
  175. WireGuard
  176. Networking
  177. Point to Point
    178.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more…

  178. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
  179. WireGuard
  180. Containers
    181.
    How to safely expose container services through WireGuard.
    Read more…

  181. Wg-quick Default Firewall Rules

    by Justin Ludwig
  182. WireGuard
  183. Firewall
  184. iptables
  185. nftables
    186.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more…

  186. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
  187. WireGuard
  188. Networking
  189. Hub and Spoke
    190.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more…

  190. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
  191. SSH
  192. WireGuard
  193. Point to Site
    194.
    Why WireGuard is better for jump servers than SSH.
    Read more…

  194. How to Use WireGuard With Nftables

    (updated )
    by Justin Ludwig
  195. WireGuard
  196. Networking
  197. Firewall
  198. nftables
    199.
    How to set up nftables for WireGuard under five different scenarios.
    Read more…

  199. Building, Using, and Monitoring WireGuard Containers

    (updated )
    by Justin Ludwig
  200. WireGuard
  201. Pro Custodibus
  202. Containers
    203.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more…

  203. High Availability WireGuard Site to Site

    by Justin Ludwig
  204. WireGuard
  205. Networking
  206. Routing
  207. High Availability
  208. Site to Site
    209.
    How to connect sites with redundant WireGuard routers.
    Read more…

  209. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
  210. WireGuard
  211. Security
  212. Keys
  213. Pro Custodibus
    214.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more…

  214. Securing Operational Technology With WireGuard

    by Justin Ludwig
  215. WireGuard
  216. Networking
  217. iptables
  218. Site to Site
    219.
    How to secure Operational Technology systems with WireGuard
    Read more…

  219. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
  220. WireGuard
  221. Pro Custodibus
  222. Point to Site
    223.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more…

  223. How to Use WireGuard With Firewalld

    by Justin Ludwig
  224. WireGuard
  225. Networking
  226. Firewall
  227. firewalld
    228.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more…

  228. High Availability WireGuard on Azure

    by Justin Ludwig
  229. WireGuard
  230. Cloud
  231. Networking
  232. High Availability
    233.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more…

  233. WireGuard SysV Init Script

    by Justin Ludwig
  234. WireGuard
    235.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more…

  235. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
  236. WireGuard
  237. Cloud
  238. Networking
  239. Point to Site
    240.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more…

  240. WireGuard Usage Monitoring

    by Justin Ludwig
  241. WireGuard
  242. Monitoring
  243. Pro Custodibus
    244.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more…

  244. How to Use WireGuard With UFW

    by Justin Ludwig
  245. WireGuard
  246. Networking
  247. Firewall
  248. UFW
    249.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more…

  249. WireGuard Point to Site Routing

    by Justin Ludwig
  250. WireGuard
  251. Networking
  252. Point to Site
    253.
    Routing strategies for the WireGuard Point to Site topology.
    Read more…

  253. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
  254. WireGuard
  255. Networking
  256. Point to Site
    257.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more…

  257. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
  258. WireGuard
  259. Networking
  260. iptables
  261. Point to Site
    262.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more…

  262. WireGuard Access Control With Iptables

    by Justin Ludwig
  263. WireGuard
  264. Networking
  265. Firewall
  266. iptables
    267.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more…

  267. Python 3 WireGuard Health Check

    by Justin Ludwig
  268. WireGuard
  269. Cloud
    270.
    AWS ELB WireGuard health-check service for Python 3.
    Read more…

  270. WireGuard AllowedIPs Calculator

    by Justin Ludwig
  271. WireGuard
    272.
    How to “subtract” blocks from your WireGuard AllowedIPs setting.
    Read more…

  272. Four Ways to View WireGuard Logs

    by Justin Ludwig
  273. WireGuard
  274. Monitoring
    275.
    How to enable and view WireGuard logging.
    Read more…

  275. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
  276. WireGuard
  277. Security
  278. Keys
  279. Monitoring
  280. Pro Custodibus
    281.
    How to know when your WireGuard private keys have been compromised.
    Read more…

  281. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
  282. WireGuard
  283. Cloud
  284. AWS
  285. Networking
  286. High Availability
    287.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more…

  287. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
  288. WireGuard
  289. Cloud
  290. AWS
  291. Networking
  292. Point to Site
    293.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more…

  293. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
  294. WireGuard
  295. Security
  296. Keys
    297.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more…

  297. Getting Started With Pro Custodibus

    by Justin Ludwig
  298. Pro Custodibus
    299.
    How to start monitoring and managing your first WireGuard host.
    Read more…

  299. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
  300. WireGuard
  301. Monitoring
    302.
    Best tools for checking who’s connecting to your VPN.
    Read more…

  302. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
  303. WireGuard
  304. Networking
    305.
    How packets flow between WireGuard endpoints.
    Read more…

  305. WireGuard Terminology

    by Justin Ludwig
  306. WireGuard
    307.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more…

  307. WireGuard Site to Site Configuration

    by Justin Ludwig
  308. WireGuard
  309. Networking
  310. iptables
  311. Site to Site
    312.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more…

  312. WireGuard Point to Site Configuration

    by Justin Ludwig
  313. WireGuard
  314. Networking
  315. iptables
  316. Point to Site
    317.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more…

  317. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
  318. WireGuard
  319. Networking
  320. iptables
  321. Hub and Spoke
    322.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more…

  322. WireGuard Point to Point Configuration

    by Justin Ludwig
  323. WireGuard
  324. Networking
  325. iptables
  326. Point to Point
    327.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more…

  327. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
  328. WireGuard
  329. Networking
    330.
    These are the four main topologies you’d consider when deciding how to connect endpoints over a WireGuard network.
    Read more…