Setting Up WireGuard VPN

Introduction

WireGuard is a modern, simple, and fast VPN that uses state-of-the-art cryptography. In this guide, we will walk through the process of installing and configuring WireGuard on a cloud server, as well as connecting a device like a phone to the VPN.

Step-by-Step Guide

1. Step 1: Install WireGuard

   First, install WireGuard on your cloud server by running the following commands:

   sudo apt update
   sudo apt install wireguard

2. Step 2: Generate Server Keys

   Next, generate the private and public keys for your WireGuard server. This step ensures secure communication between the server and client devices.

   cd /etc/wireguard/
   umask 077
   wg genkey | tee privatekey | wg pubkey > publickey

3. Step 3: Configure WireGuard

   Now, create and edit the WireGuard configuration file on the server:

   sudo nano /etc/wireguard/wg0.conf

   Add the following content, replacing [YourPublicKey] with the generated public key, and [YourPrivateKey] with the private key:

   [Interface]
   PrivateKey = [YourPrivateKey]
   Address = 10.0.0.1/24
   ListenPort = 51820
   
   [Peer]
   PublicKey = [ClientPublicKey]
   AllowedIPs = 10.0.0.2/32

4. Step 4: Enable IP Forwarding

   Enable IP forwarding on the server so it can route traffic through the VPN. Edit the sysctl configuration:

   sudo nano /etc/sysctl.conf

   Uncomment the following line:

   net.ipv4.ip_forward=1

   Apply the changes:

   sudo sysctl -p

5. Step 5: Start WireGuard

   Start the WireGuard interface:

   sudo wg-quick up wg0

   To enable WireGuard at boot, use the following command:

   sudo systemctl enable wg-quick@wg0

6. Step 6: Configure Client Device

   On your client device (such as your phone), install the WireGuard app, and use the following configuration to connect:

   [Interface]
   PrivateKey = [ClientPrivateKey]
   Address = 10.0.0.2/32
   
   [Peer]
   PublicKey = [ServerPublicKey]
   Endpoint = [ServerIP]:51820
   AllowedIPs = 0.0.0.0/0

   Replace [ClientPrivateKey], [ServerPublicKey], and [ServerIP] with the respective values from your server and client keys.

7. Step 7: Test the Connection

   Once the client configuration is complete, you can test the VPN connection by starting WireGuard on your client device. If everything is set up correctly, your device should route all traffic through the VPN.