WireGuard Installation on Linux OS

This article will help you learn how to install and configure WireGuard on Linux OS.

To install WireGuard on your Linux OS device, follow the steps:

1. Start the terminal (Ctrl+Alt+T). Run the command in it:

   $ sudo apt install wireguard

2. Additionally, download the WireGuard configuration file (wg_client**.conf) from the provided link:  http://server_IP:port/xxxxxxxxxx/, you have received this link via email after activating the service.
   
   
3. You can also find VPN access in your client area.
   1. In your client area, find the My Service tab.
   2. Click Manage.
      
      
   3. In the Access section, find the WireGuard settings.
      
      
   4. Download access information there.
      
4. For the work of VPN, enable packet forwarding, only then you can connect through the WireGuard server. To enable packet forwarding, edit the /etc/sysctl.conf file:

   sudo nano /etc/sysctl.conf

5. Remove "#" for the following command:
   

   net.ipv4.ip_forward=1

6. To apply the changes, run the following command:

   sysctl -p

   WireGuard works by encrypting the connection with a pair of cryptographic keys. A key pair is used by passing the public key to the other party, where their message can be encrypted in such a way that it can only be decrypted with the corresponding private key. For two-way communication to be secure, each party must have its own private and public keys, since each pair provides only one-way messaging.

7. To generate a key pair, go to the directory:

   dwg sudo cd /etc/wireguard

8. To set permission for this directory, run the following command:

   umask 077

9. To generate a key pair, run the following command:

   wg genkey | tee private.key | wg pubkey > public.key

10. To start configuring the WireGuard server, go to the /etc/wireguard folder and create the wg0.conf file:

    sudo nano /etc/wireguard/wg0.conf

11. Add the following directives to the configuration file:
    

    [Interface]
    
    PrivateKey = <contents-of-server-privatekey>
    
    Address = <Address>
    
    PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
    
    PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
    
    ListenPort = <ListenPort>
    
    [Peer]
    
    PublicKey = <contents-of-client-publickey>
    
    AllowedIPs = <AllowedIPs>

12. Copy the private key generated earlier and paste it into the PrivateKey. To generate a key pair for the client, copy the client's public key and paste it into the PublicKey.
    To copy the key value, run the following command:

    sudo cat /etc/wireguard/public.key

    sudo cat /etc/wireguard/private.key

13. To start WireGuard use wg-quick and specify the name of the new interface:

    wg-quick up wg0

14. To check the WireGuard server status, enter:

    wg show

If you have any questions, you can ask them in the online chat in the lower right corner of the site or by ticketing the Techsupport Department.