{"id":2937,"date":"2024-07-19T19:17:53","date_gmt":"2024-12-16T19:46:55","guid":{"rendered":""},"modified":"2025-02-02T00:46:19","modified_gmt":"2025-02-01T23:46:19","slug":"how-to-set-up-wireguard-vpn-on-ubuntu-22-04","status":"publish","type":"post","link":"https:\/\/netcloud24.com\/knowledgebase\/how-to-set-up-wireguard-vpn-on-ubuntu-22-04\/","title":{"rendered":"How to Set Up WireGuard VPN on Ubuntu 22.04"},"content":{"rendered":"

\u00a0<\/p>\n<\/p>\n

\n

\u00a0<\/h1>\n<\/header>\n
\n

WireGuard is a modern, secure, and easy-to-use VPN that utilizes state-of-the-art cryptography. In this guide, we will walk you through the installation and configuration of WireGuard VPN on Ubuntu 22.04. Whether you are deploying it on a local server or using a , this tutorial will cover all the necessary steps.<\/p>\n

\n

Step 1: Update Your System<\/h2>\n

Before installing WireGuard, ensure your system is up to date. Run the following commands:<\/p>\n

sudo apt update && sudo apt upgrade -y<\/code><\/pre>\n
Keeping your system updated is crucial for security and performance, whether you’re setting it up locally or on a VPS Windows VPS Servers<\/a> platform.<\/p>\n<\/section>\n
\n
Step 2: Install WireGuard<\/h2>\n
To install WireGuard, run the following command:<\/p>\n
sudo apt install wireguard -y<\/code><\/pre>\n
This command will download and install WireGuard and its dependencies.<\/p>\n<\/section>\n
\n
Step 3: Generate Key Pair<\/h2>\n
WireGuard uses public and private keys for authentication. Generate your key pair with the following commands:<\/p>\n
\r\nwg genkey | tee privatekey | wg pubkey > publickey\r\n            <\/code><\/pre>\n
This will create two files, privatekey<\/code> and publickey<\/code>, in your current directory. Keep your private key secure.<\/p>\n<\/section>\n
\n
Step 4: Configure WireGuard<\/h2>\n
Create a new configuration file for WireGuard:<\/p>\n
sudo nano \/etc\/wireguard\/wg0.conf<\/code><\/pre>\n
Add the following configuration, replacing YOUR_PRIVATE_KEY<\/code> with your actual private key, and YOUR_SERVER_IP<\/code> with your server’s public IP address:<\/p>\n
\r\n[Interface]\r\nPrivateKey = YOUR_PRIVATE_KEY\r\nAddress = 10.0.0.1\/24\r\nListenPort = 51820\r\n\r\n[Peer]\r\nPublicKey = YOUR_PEER_PUBLIC_KEY\r\nAllowedIPs = 10.0.0.2\/32\r\n            <\/code><\/pre>\n
This configuration sets up the server’s interface. You’ll need to add client configurations separately.<\/p>\n<\/section>\n
\n
Step 5: Enable IP Forwarding<\/h2>\n
To allow packets to be forwarded between network interfaces, enable IP forwarding. Edit the sysctl configuration:<\/p>\n
sudo nano \/etc\/sysctl.conf<\/code><\/pre>\n
Uncomment or add the following line:<\/p>\n
net.ipv4.ip_forward=1<\/code><\/pre>\n
Save and exit the file, then apply the changes:<\/p>\n
sudo sysctl -p<\/code><\/pre>\n<\/section>\n
\n
Step 6: Start WireGuard<\/h2>\n
You can now start the WireGuard service:<\/p>\n
sudo wg-quick up wg0<\/code><\/pre>\n
To ensure WireGuard starts on boot, run the following command:<\/p>\n
sudo systemctl enable wg-quick@wg0<\/code><\/pre>\n<\/section>\n
\n
Step 7: Configure Firewall Rules<\/h2>\n
If you are using UFW as your firewall, allow the WireGuard port:<\/p>\n
sudo ufw allow 51820\/udp<\/code><\/pre>\n
Enable the UFW firewall if it\u2019s not already enabled:<\/p>\n
sudo ufw enable<\/code><\/pre>\n<\/section>\n
\n
Step 8: Configure Client<\/h2>\n
On the client machine, you will need to install WireGuard and create a configuration file. Generate a key pair using the same steps as before, then create a config file similar to this:<\/p>\n
\r\n[Interface]\r\nPrivateKey = YOUR_CLIENT_PRIVATE_KEY\r\nAddress = 10.0.0.2\/24\r\n\r\n[Peer]\r\nPublicKey = YOUR_SERVER_PUBLIC_KEY\r\nEndpoint = YOUR_SERVER_IP:51820\r\nAllowedIPs = 0.0.0.0\/0\r\n            <\/code><\/pre>\n
Start the client using:<\/p>\n
sudo wg-quick up wg0<\/code><\/pre>\n<\/section>\n