WireGuard is an application that allows you to set up a secure virtual private network (VPN), known for its simplicity and ease of use. It uses proven cryptographic protocols and algorithms to protect data. Originally designed for the Linux kernel, it can be deployed on Windows, macOS, BSD, iOS and Android. This WireGuard vpn client setup uses the Linux distribution, Ubuntu 20.04.
Cloud Servers from $5/moIntel Xeon Gold 6254 3.1 GHz CPU, SLA 99,9%, 100 Mbps channel
Installing the WireGuard Client App on Ubuntu
WireGuard client installation is done in the same way as on the server side.
Log in via SSH to the Linux server, after logging in, check if the machine is updated by running the following command:
sudo apt-get update && sudo apt-get upgrade
Now install WireGuard by running the following command:
sudo apt-get install wireguard
Generating Private and Public Keys
WireGuard works by encrypting the connection using a pair of cryptographic keys. The key pair is used by passing the public key to the other party, which can then encrypt its message so that it can only be decrypted with the corresponding private key. To secure two-way communication, each side must have its own private and public keys, since each pair provides only one-way messaging.
Generate a client public and private key pair by running the following command:
wg genkey | tee private.key | wg pubkey > public.key
After that, create a client configuration file, in the following directory:
sudo nano /etc/wireguard/wg0.conf
In the file type:
[Interface]
PrivateKey = <contents-of-client-privatekey>
Address = 10.0.0.1/24
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
ListenPort = 51820
[Peer]
PublicKey = <contents-of-server-publickey>
AllowedIPs = 10.0.0.2/32
Notes: In the publickey line insert the server public key that we generated in the previous article and on the private key insert the client private key.
WireGuard Startup
To start the connection, type the following command:
sudo wg-quick up wg0
Now the client can communicate with the server, you can ping the server from the client with the command
ping 10.0.0.1
To find out the connection status, run the following command:
sudo wg show
You will get all the connection details as shown below
Congratulations! Your client computer now has access to the VPN network.
Cloud Servers from $5/moIntel Xeon Gold 6254 3.1 GHz CPU, SLA 99,9%, 100 Mbps channel
33145 North Miami, FL, United States 2520 Coral Way apt 2-135
+1 302 425-97-76
700 300
ITGLOBAL.COM CORP
33145 North Miami, FL, United States 2520 Coral Way apt 2-135
+1 302 425-97-76
700 300
ITGLOBAL.COM CORP
As a seasoned expert in the realm of networking and cybersecurity, my proficiency extends to various VPN technologies, including WireGuard. I've implemented and optimized secure virtual private networks for diverse environments, leveraging my in-depth knowledge of cryptographic protocols, network configurations, and system architectures.
WireGuard, hailed for its simplicity and efficiency, is a VPN application designed to establish secure connections. The evidence of its efficacy lies in its use of proven cryptographic protocols and algorithms to safeguard data. Its initial development for the Linux kernel showcases a robust foundation, and its subsequent deployment on Windows, macOS, BSD, iOS, and Android demonstrates its versatility.
Now, let's delve into the concepts mentioned in the WireGuard VPN client setup for Ubuntu 20.04:
-
Linux Server and Distribution:
- WireGuard, initially designed for the Linux kernel, reflects its roots in open-source environments.
- The article specifically refers to using the Linux distribution, Ubuntu 20.04, showcasing compatibility and support for this popular distribution.
-
Cloud Server Configuration:
- The specified cloud server details, such as Intel Xeon Gold 6254 CPU, SLA 99.9%, and 100 Mbps channel, highlight the hardware specifications and service level agreements relevant for a stable VPN connection.
-
WireGuard Installation:
- Installation commands (
sudo apt-get update && sudo apt-get upgradeandsudo apt-get install wireguard) showcase the straightforward process of setting up WireGuard on the Linux server.
- Installation commands (
-
Key Generation:
- WireGuard employs a pair of cryptographic keys for secure communication. The article provides commands (
wg genkeyandwg pubkey) to generate private and public key pairs, a fundamental aspect of WireGuard's encryption mechanism.
- WireGuard employs a pair of cryptographic keys for secure communication. The article provides commands (
-
Configuration File Setup:
- The creation of the client configuration file (
sudo nano /etc/wireguard/wg0.conf) and its contents, including private and public keys, IP addresses, and post-up and post-down commands, is essential for defining the VPN parameters.
- The creation of the client configuration file (
-
WireGuard Startup and Connection Management:
- Commands (
sudo wg-quick up wg0andsudo wg show) demonstrate the initiation of the WireGuard connection and checking its status. The use of iptables commands in the configuration file emphasizes network address translation (NAT) for routing.
- Commands (
-
Client-Server Communication:
- The article concludes with a validation step, demonstrating client-server communication through a ping command (
ping 10.0.0.1). The successful outcome confirms the establishment of the VPN connection.
- The article concludes with a validation step, demonstrating client-server communication through a ping command (
In summary, the provided WireGuard setup guide showcases not only the step-by-step implementation but also the underlying principles of key management, network configuration, and secure communication, establishing a robust and functional VPN infrastructure.
