Blog

  1. Enrolling Multiple Devices Into WireGuard

    by Justin Ludwig
  2. WireGuard
  3. Pro Custodibus
    4.
    How to enroll many hosts into Pro Custodibus at once.
    Read more…

  4. Wayland Apps in WireGuard Docker Containers

    by Justin Ludwig
  5. WireGuard
  6. Containers
    7.
    How to use GUI Linux applications with a Docker WireGuard network.
    Read more…

  7. Rolling Back WireGuard Changes

    by Justin Ludwig
  8. WireGuard
  9. Pro Custodibus
    10.
    Using Pro Custodibus to restore changes to your WireGuard config.
    Read more…

  10. Forwarding WireGuard Connections on Windows

    by Justin Ludwig
  11. WireGuard
  12. Networking
  13. Hub and Spoke
  14. Point to Site
  15. Site to Site
  16. Windows
    17.
    How to configure Windows to forward WireGuard connections.
    Read more…

  17. WireGuard and Windows Defender Firewall

    by Justin Ludwig
  18. WireGuard
  19. Networking
  20. Firewall
  21. Windows
    22.
    How to configure Windows Defender Firewall to allow WireGuard access.
    Read more…

  22. Avoiding Tunnel Vision on Linux

    by Justin Ludwig
  23. WireGuard
  24. Security
  25. Routing
    26.
    How to route around unsafe DHCP options on Linux.
    Read more…

  26. WireGuard Over WebRTC With Weron

    by Justin Ludwig
  27. WireGuard
  28. Networking
  29. Point to Site
    30.
    How to tunnel WireGuard through WebRTC.
    Read more…

  30. Using WireGuard Keys for SSH

    by Justin Ludwig
  31. WireGuard
  32. Networking
  33. SSH
  34. Keys
    35.
    How to use PAM to log into SSH and other applications automatically with WireGuard.
    Read more…

  35. WireGuard Containers for Overlapping Networks

    by Justin Ludwig
  36. WireGuard
  37. Networking
  38. Containers
  39. Point to Point
    40.
    How to avoid address space collisions among client networks using Docker containers.
    Read more…

  40. WireGuard Connection Wizard

    by Justin Ludwig
  41. WireGuard
  42. Pro Custodibus
  43. Point-to-Site
  44. Point-to-Point
    45.
    Easy new way to set up new WireGuard connections with the Pro Custodibus web UI.
    Read more…

  45. WireGuard With Overlapping Client Networks

    by Justin Ludwig
  46. WireGuard
  47. Networking
  48. Routing
  49. nftables
  50. Point to Point
    51.
    How to avoid address space collisions when connecting to networks you don’t control.
    Read more…

  51. WireGuard Port Forwarding From the Internet to Other Networks

    by Justin Ludwig
  52. WireGuard
  53. Networking
  54. Routing
  55. Hub and Spoke
  56. Point to Site
    57.
    How to forward traffic from the Internet through multiple hops to another server (using netfilter connmark).
    Read more…

  57. Pro Custodibus On-Premises With Rootless Podman

    by Justin Ludwig
  58. Pro Custodibus
  59. Containers
    60.
    How to use Podman, Firewalld, and Let’s Encrypt to run Pro Custodibus Community Edition.
    Read more…

  60. Quick Start for Pro Custodibus On-Premises

    by Justin Ludwig
  61. Pro Custodibus
  62. Containers
    63.
    How to get started with Pro Custodibus Community Edition, using Docker containers.
    Read more…

  63. Troubleshooting WireGuard DNS Issues

    by Jennifer Ormond
  64. WireGuard
  65. Networking
  66. DNS
    67.
    How to debug WireGuard DNS problems.
    Read more…

  67. Troubleshooting WireGuard with Tcpdump

    by Justin Ludwig
  68. WireGuard
  69. Networking
    70.
    How to debug WireGuard connection issues using tcpdump.
    Read more…

  70. WireGuard Transparent Tunnel

    by Justin Ludwig
  71. WireGuard
  72. Networking
  73. Routing
  74. Point to Point
    75.
    How to use the same IP addresses for a point-to-point tunnel when WireGuard is up as when down.
    Read more…

  75. Using WireGuard For Specific Apps on Linux

    by Justin Ludwig
  76. WireGuard
  77. Networking
  78. Routing
  79. Point to Site
    80.
    How to selectively enable or disable a WireGuard tunnel for any program via network namespaces.
    Read more…

  80. An Opinionated YubiKey Set-Up Guide

    by Justin Ludwig
  81. Smart Cards
  82. Keys
  83. SSH
    84.
    How to set up a YubiKey 5 in 2023.
    Read more…

  84. WireGuard Key on an OpenPGP Card

    by Justin Ludwig
  85. WireGuard
  86. Smart Cards
  87. Keys
    88.
    How to use a WireGuard key stored on an OpenPGP card.
    Read more…

  88. Installing GnuPG 2.4 on Ubuntu 22.04

    by Justin Ludwig
  89. Smart Cards
    90.
    How to build and install GPG 2.4.x on Ubuntu 22.04.
    Read more…

  90. 3 Ways to Protect WireGuard With YubiKey

    (updated )
    by Justin Ludwig
  91. WireGuard
  92. Smart Cards
  93. Keys
    94.
    How to use a YubiKey to protect your WireGuard private keys.
    Read more…

  94. More Tools for Monitoring WireGuard Data Usage

    by Jennifer Ormond
  95. WireGuard
  96. Monitoring
  97. Pro Custodibus
    98.
    Some recently-added features of Pro Custodibus for monitoring WireGuard usage.
    Read more…

  98. Internal DNS Names With WireGuard

    by Jennifer Ormond
  99. WireGuard
  100. DNS
    101.
    How to set up a WireGuard peer as a CoreDNS server.
    Read more…

  101. Preventing Lateral Movement With WireGuard

    by Justin Ludwig
  102. WireGuard
  103. Networking
  104. Security
  105. nftables
  106. Point to Point
  107. Hub and Spoke
    108.
    How to use micro-segmentation with WireGuard to stop an attacker from moving laterally in your network.
    Read more…

  108. Limiting WireGuard Bandwidth

    by Justin Ludwig
  109. WireGuard
  110. Networking
    111.
    How to limit the bandwidth used by a WireGuard connection.
    Read more…

  111. WireGuard Performance Tuning

    (updated )
    by Justin Ludwig
  112. WireGuard
  113. Networking
    114.
    A guide to testing and tuning WireGuard network performance.
    Read more…

  114. Best Linux Firewall for WireGuard

    by Jennifer Ormond
  115. WireGuard
  116. Networking
  117. Firewall
  118. firewalld
  119. nftables
    120.
    Best options for setting up a simple firewall for WireGuard on Linux.
    Read more…

  120. How to Set Up a WireGuard Jumphost

    by Jennifer Ormond
  121. WireGuard
  122. Networking
  123. Firewall
  124. nftables
  125. Point to Site
    126.
    A simple WireGuard jumphost tutorial.
    Read more…

  126. Installing Libsodium on Amazon Linux 2023

    (updated )
    by Justin Ludwig
  127. Cloud
  128. AWS
    129.
    How to install libsodium on Amazon Linux 2022/2023.
    Read more…

  129. WireGuard in Podman Rootless Containers

    (updated )
    by Justin Ludwig
  130. WireGuard
  131. Containers
    132.
    13 common patterns for running WireGuard in Podman containers.
    Read more…

  132. OPNsense Push Routes Through WireGuard Via OSPF

    by Justin Ludwig
  133. WireGuard
  134. Networking
  135. Routing
  136. Site to Site
    137.
    How to use OSPF to share routes from an OPNsense router over WireGuard.
    Read more…

  137. OPNsense WireGuard Site to Site

    by Justin Ludwig
  138. WireGuard
  139. Networking
  140. Site to Site
    141.
    How to connect an OPNsense router to a Linux router over WireGuard.
    Read more…

  141. WireGuard Port Forwarding From the Internet

    by Justin Ludwig
  142. WireGuard
  143. Networking
  144. Routing
  145. Point to Site
    146.
    How to forward inbound traffic from the Internet to another server using WireGuard.
    Read more…

  146. Zero Trust Architecture With WireGuard

    by Justin Ludwig
  147. WireGuard
  148. Networking
  149. Firewall
  150. nftables
  151. Hub and Spoke
    152.
    How to get started implementing a zero-trust architecture.
    Read more…

  152. Connecting WireGuard and OpenVPN

    by Justin Ludwig
  153. WireGuard
  154. Networking
  155. Hub and Spoke
    156.
    How to connect WireGuard and OpenVPN networks.
    Read more…

  156. WireGuard Automatic Key Rotation With Pro Custodibus

    by Jennifer Ormond
  157. WireGuard
  158. Security
  159. Keys
  160. Pro Custodibus
    161.
    Why and how to set up automatic WireGuard preshared key rotation with Pro Custodibus.
    Read more…

  161. Set Up a New User Device With WireGuard MFA

    by Jennifer Ormond
  162. WireGuard
  163. Security
  164. Pro Custodibus
    165.
    How to enroll a new user and device into WireGuard MFA with Pro Custodibus.
    Read more…

  165. WireGuard Multi-Factor Authentication With Pro Custodibus

    by Justin Ludwig
  166. WireGuard
  167. Security
  168. Pro Custodibus
    169.
    How to set up and use WireGuard MFA with Pro Custodibus.
    Read more…

  169. Multi-Hop WireGuard

    by Justin Ludwig
  170. WireGuard
  171. Networking
  172. Routing
  173. Hub and Spoke
  174. Point to Site
    175.
    Combine hub-and-spoke with other topologies for a multi-hop WireGuard network.
    Read more…

  175. Configure WireGuard via AWS SSM Parameter Store

    by Justin Ludwig
  176. WireGuard
  177. Cloud
  178. AWS
  179. Containers
    180.
    How to configure a WireGuard container with parameters from the Amazon Systems Manager.
    Read more…

  180. WireGuard on AWS ECS

    by Justin Ludwig
  181. WireGuard
  182. Cloud
  183. AWS
  184. Containers
  185. Point to Site
    186.
    How to run a WireGuard container on the Amazon Elastic Container Service.
    Read more…

  186. Installing WireGuard on Amazon Linux

    (updated )
    by Justin Ludwig
  187. WireGuard
  188. Cloud
  189. AWS
    190.
    How to install WireGuard on Amazon Linux 2 and Amazon Linux 2023.
    Read more…

  190. Firewalld Policy-Based Access Control for WireGuard

    by Justin Ludwig
  191. WireGuard
  192. Networking
  193. Firewall
  194. firewalld
    195.
    How to use firewalld policies for network access control.
    Read more…

  195. Push WireGuard Logs to Datadog SIEM

    by Justin Ludwig
  196. WireGuard
  197. Security
  198. Monitoring
  199. Pro Custodibus
    200.
    How to connect Pro Custodibus to Datadog.
    Read more…

  200. WireGuard DNS Configuration for Systemd

    by Jennifer Ormond
  201. WireGuard
  202. DNS
    203.
    Systemd-resolved DNS settings for WireGuard.
    Read more…

  203. Poor Man’s BeyondCorp with WireGuard

    by Justin Ludwig
  204. WireGuard
  205. Networking
  206. Firewall
  207. nftables
  208. Hub and Spoke
    209.
    Implementing BeyondCorp-like access control with WireGuard and nftables.
    Read more…

  209. WireGuard Over TCP

    by Justin Ludwig
  210. WireGuard
  211. Networking
  212. Point to Point
    213.
    How to use udp2raw to tunnel Wireguard over TCP.
    Read more…

  213. WireGuard Remote Access to Docker Containers

    by Justin Ludwig
  214. WireGuard
  215. Containers
    216.
    How to safely expose container services through WireGuard.
    Read more…

  216. Wg-quick Default Firewall Rules

    by Justin Ludwig
  217. WireGuard
  218. Firewall
  219. iptables
  220. nftables
    221.
    An explanation of the firewall rules wg-quick sets up by default.
    Read more…

  221. WireGuard With AWS Split DNS

    by Jennifer Ormond
  222. WireGuard
  223. Cloud
  224. AWS
  225. DNS
    226.
    Use a Route 53 private hosted zone to access internal AWS resources with WireGuard.
    Read more…

  226. WireGuard End-to-End Encrypted Hub-and-Spoke

    by Justin Ludwig
  227. WireGuard
  228. Networking
  229. Hub and Spoke
    230.
    How to use end-to-end encryption with a WireGuard hub-and-spoke topology.
    Read more…

  230. SSH Jumphost Vs WireGuard Jumphost

    by Justin Ludwig
  231. SSH
  232. WireGuard
  233. Point to Site
    234.
    Why WireGuard is better for jump servers than SSH.
    Read more…

  234. How to Use WireGuard With Nftables

    (updated )
    by Justin Ludwig
  235. WireGuard
  236. Networking
  237. Firewall
  238. nftables
    239.
    How to set up nftables for WireGuard under five different scenarios.
    Read more…

  239. Building, Using, and Monitoring WireGuard Containers

    (updated )
    by Justin Ludwig
  240. WireGuard
  241. Pro Custodibus
  242. Containers
    243.
    Running Docker containers with WireGuard and the Pro Custodibus agent.
    Read more…

  243. High Availability WireGuard Site to Site

    by Justin Ludwig
  244. WireGuard
  245. Networking
  246. Routing
  247. High Availability
  248. Site to Site
    249.
    How to connect sites with redundant WireGuard routers.
    Read more…

  249. WireGuard Key Rotation With Pro Custodibus

    by Justin Ludwig
  250. WireGuard
  251. Security
  252. Keys
  253. Pro Custodibus
    254.
    How to rotate WireGuard keys the easy way with the Pro Custodibus GUI.
    Read more…

  254. Add a WireGuard Peer With the Pro Custodibus GUI

    by Jennifer Ormond
  255. WireGuard
  256. Pro Custodibus
    257.
    How to add a WireGuard peer with the Pro Custodibus web UI.
    Read more…

  257. Securing Operational Technology With WireGuard

    by Justin Ludwig
  258. WireGuard
  259. Networking
  260. iptables
  261. Site to Site
    262.
    How to secure Operational Technology systems with WireGuard
    Read more…

  262. Use a GUI to Set Up WireGuard Point-to-Site

    (updated )
    by Justin Ludwig
  263. WireGuard
  264. Pro Custodibus
  265. Point to Site
    266.
    How to set up a WireGuard network with the Pro Custodibus web UI.
    Read more…

  266. How to Use WireGuard With Firewalld

    by Justin Ludwig
  267. WireGuard
  268. Networking
  269. Firewall
  270. firewalld
    271.
    How to set up firewalld for WireGuard under four different scenarios.
    Read more…

  271. DNS Updates to WireGuard Endpoints

    by Jennifer Ormond
  272. WireGuard
  273. Pro Custodibus
  274. DNS
    275.
    How to solve the DNS re-resolution problem for WireGuard endpoints with Pro Custodibus.
    Read more…

  275. High Availability WireGuard on Azure

    by Justin Ludwig
  276. WireGuard
  277. Cloud
  278. Networking
  279. High Availability
    280.
    How to set up WireGuard in a high-availability configuration on Microsoft Azure.
    Read more…

  280. WireGuard SysV Init Script

    by Justin Ludwig
  281. WireGuard
    282.
    How to start up WireGuard on Linux at system boot with an SysV-style init script.
    Read more…

  282. Point to Cloud WireGuard With an Azure Hub VNet

    by Justin Ludwig
  283. WireGuard
  284. Cloud
  285. Networking
  286. Point to Site
    287.
    How to set up WireGuard to access internal applications in Azure with isolated virtual networks.
    Read more…

  287. WireGuard Usage Monitoring

    by Justin Ludwig
  288. WireGuard
  289. Monitoring
  290. Pro Custodibus
    291.
    How to monitor WireGuard server usage with Pro Custodibus.
    Read more…

  291. How to Use WireGuard With UFW

    by Justin Ludwig
  292. WireGuard
  293. Networking
  294. Firewall
  295. UFW
    296.
    How to set up the Uncomplicated FireWall (UFW) for WireGuard.
    Read more…

  296. Friendly Names for WireGuard Peers

    by Jennifer Ormond
  297. WireGuard
  298. Pro Custodibus
    299.
    How to set human-readable names for WireGuard peers.
    Read more…

  299. WireGuard Point to Site Routing

    by Justin Ludwig
  300. WireGuard
  301. Networking
  302. Point to Site
    303.
    Routing strategies for the WireGuard Point to Site topology.
    Read more…

  303. WireGuard Point to Site With a Site Gateway

    by Justin Ludwig
  304. WireGuard
  305. Networking
  306. Point to Site
    307.
    How to set up a WireGuard Point to Site topology with a site gateway.
    Read more…

  307. WireGuard Point to Site With Port Forwarding

    by Justin Ludwig
  308. WireGuard
  309. Networking
  310. iptables
  311. Point to Site
    312.
    How to set up a WireGuard Point to Site topology with port forwarding (DNAT).
    Read more…

  312. WireGuard Access Control With Iptables

    by Justin Ludwig
  313. WireGuard
  314. Networking
  315. Firewall
  316. iptables
    317.
    How to apply WireGuard ACLs with an iptables firewall.
    Read more…

  317. Python 3 WireGuard Health Check

    by Justin Ludwig
  318. WireGuard
  319. Cloud
    320.
    AWS ELB WireGuard health-check service for Python 3.
    Read more…

  320. WireGuard AllowedIPs Calculator

    by Justin Ludwig
  321. WireGuard
    322.
    How to “subtract” blocks from your WireGuard AllowedIPs setting.
    Read more…

  322. WireGuard Network Map

    by Jennifer Ormond
  323. WireGuard
  324. Pro Custodibus
    325.
    How to visualize the connections between WireGuard peers.
    Read more…

  325. Four Ways to View WireGuard Logs

    by Justin Ludwig
  326. WireGuard
  327. Monitoring
    328.
    How to enable and view WireGuard logging.
    Read more…

  328. When to Use WireGuard

    by Jennifer Ormond
  329. WireGuard
    330.
    Three use-cases for using WireGuard for secure access to business/enterprise networks.
    Read more…

  330. How to Monitor for WireGuard Key Compromise

    by Justin Ludwig
  331. WireGuard
  332. Security
  333. Keys
  334. Monitoring
  335. Pro Custodibus
    336.
    How to know when your WireGuard private keys have been compromised.
    Read more…

  336. High Availability WireGuard on AWS

    (updated )
    by Justin Ludwig
  337. WireGuard
  338. Cloud
  339. AWS
  340. Networking
  341. High Availability
    342.
    How to set up WireGuard in a high-availability configuration on AWS.
    Read more…

  342. Point to Cloud WireGuard With AWS Private Subnets

    by Justin Ludwig
  343. WireGuard
  344. Cloud
  345. AWS
  346. Networking
  347. Point to Site
    348.
    How to set up WireGuard to access internal applications in AWS private subnets.
    Read more…

  348. Why You Shouldn’t Use the Same WireGuard Key on Multiple Clients

    by Justin Ludwig
  349. WireGuard
  350. Security
  351. Keys
    352.
    Reusing keys is bad security practice, and will result in a bad user experience.
    Read more…

  352. Getting Started With Pro Custodibus

    by Justin Ludwig
  353. Pro Custodibus
    354.
    How to start monitoring and managing your first WireGuard host.
    Read more…

  354. How to Monitor Who’s Connected to Your WireGuard VPN

    by Justin Ludwig
  355. WireGuard
  356. Monitoring
    357.
    Best tools for checking who’s connecting to your VPN.
    Read more…

  357. WireGuard Endpoints and IP Addresses

    by Justin Ludwig
  358. WireGuard
  359. Networking
    360.
    How packets flow between WireGuard endpoints.
    Read more…

  360. WireGuard Terminology

    by Justin Ludwig
  361. WireGuard
    362.
    What is a WireGuard Tunnel? What is a WireGuard Peer? For answers, read on!
    Read more…

  362. WireGuard Site to Site Configuration

    by Justin Ludwig
  363. WireGuard
  364. Networking
  365. iptables
  366. Site to Site
    367.
    How to set up two WireGuard peers in a Site to Site topology.
    Read more…

  367. WireGuard Point to Site Configuration

    by Justin Ludwig
  368. WireGuard
  369. Networking
  370. iptables
  371. Point to Site
    372.
    How to set up two WireGuard peers in a Point to Site (masquerading) topology.
    Read more…

  372. WireGuard Hub and Spoke Configuration

    by Justin Ludwig
  373. WireGuard
  374. Networking
  375. iptables
  376. Hub and Spoke
    377.
    How to set up three WireGuard peers in a Hub and Spoke topology.
    Read more…

  377. WireGuard Point to Point Configuration

    by Justin Ludwig
  378. WireGuard
  379. Networking
  380. iptables
  381. Point to Point
    382.
    How to set up two WireGuard peers in a Point to Point topology.
    Read more…

  382. Primary WireGuard Topologies

    (updated )
    by Justin Ludwig
  383. WireGuard
  384. Networking
    385.
    These are the four main topologies you’d consider when deciding how to connect endpoints over a WireGuard network.
    Read more…