How to Set Up WireGuard VPN on Ubuntu Server

WireGuard is the modern VPN protocol — significantly faster than OpenVPN, simpler to configure and built into Linux kernel since 5.6.

Install and Generate Keys

sudo apt install wireguard -y
wg genkey | tee /etc/wireguard/server_private.key | wg pubkey > /etc/wireguard/server_public.key
wg genkey | tee /etc/wireguard/client_private.key | wg pubkey > /etc/wireguard/client_public.key

Server Config

[Interface]
Address = 10.0.0.1/24
ListenPort = 51820
PrivateKey = SERVER_PRIVATE_KEY
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

[Peer]
PublicKey = CLIENT_PUBLIC_KEY
AllowedIPs = 10.0.0.2/32

Client Config

[Interface]
Address = 10.0.0.2/24
PrivateKey = CLIENT_PRIVATE_KEY
DNS = 1.1.1.1

[Peer]
PublicKey = SERVER_PUBLIC_KEY
Endpoint = YOUR_SERVER_IP:51820
AllowedIPs = 0.0.0.0/0

Start

sudo systemctl enable wg-quick@wg0 --now && sudo wg show

Conclusion

WireGuard is the best VPN solution for 2022+. Our team sets up WireGuard VPN for secure remote access.