WireGuard

From Fixme.ch
Revision as of 19:47, 25 October 2019 by Francois (Talk | contribs) (Client configuration)

Jump to: navigation, search

WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography.

It is currently deployed on our lovely Ubiquity EdgeRouter-PRO.

Client configuration

/etc/wireguard/fixme.conf:

[Interface]
PrivateKey = HAHAHAHAHAHA
Address = 192.168.131.2

[Peer]
Endpoint = 62.220.131.170:53
PublicKey = 4FVgHmPtsY7Rg7VlNrNC0x2RVFHlYJOh8ln7q77THxo=
AllowedIPs = 0.0.0.0/0, ::/0

Send your public key to User:Francois to get added.

And then activate the VPN with wg-quick.

# wg-quick up fixme
# wg show
root@fixme:~# wg show
interface: fixme
  public key: ehn2tJDbFUtHVXf4095KPm9vFetxcCoR6YDCjpFfohc=
  private key: (hidden)
  listening port: 34869
  fwmark: 0xca6c

peer: (hidden)
  endpoint: 62.220.131.170:53
  allowed ips: 0.0.0.0/0, ::/0
  latest handshake: 1 minute, 3 seconds ago
  transfer: 1.57 MiB received, 263.00 KiB sent

Router configuration

francois@ubnt-fixme# show interfaces wireguard 
 wireguard wg0 {
     address 192.168.131.1/24
     listen-port 51820
     peer ehn2tJDbFUtHVXf4095KPm9vFetxcCoR6YDCjpFfohc= {
         allowed-ips 192.168.131.2/32
     }
     private-key HAHAHAHAHAHAHA
 }
[edit]