How to Set up WireGuard VPN on Ubuntu 24.04

by | Feb 4, 2025 | Uncategorized | 0 comments

Set up WireGuard VPN on Ubuntu 24.04

In a digital world where online privacy and data security are constantly under threat, using a Virtual Private Network (VPN) has become essential for anyone seeking to safeguard their internet activities. Among the many VPN solutions available, WireGuard stands out for its simplicity, exceptional speed, and advanced cryptographic design.

Whether you’re protecting sensitive information or simply enhancing your online privacy, WireGuard offers a modern and efficient alternative to traditional VPN protocols. This tutorial will walk you through installing and configuring WireGuard on an Ubuntu 24.04 server, as well as creating secure, dedicated user connections.

Why Choose WireGuard?

WireGuard’s popularity isn’t just a trend. Here’s what makes it a favorite among VPN solutions:

  • Simplicity: A lightweight codebase that makes it easier to deploy and maintain.
  • Performance: Faster connection speeds compared to many legacy protocols.
  • Security: Modern cryptographic standards for maximum protection.

If you need a VPS, you can find one here:

Step 1: Install WireGuard on Ubuntu 24.04

Begin by updating your system:

sudo apt update && sudo apt upgrade -y

Next, install WireGuard:

sudo apt install wireguard -y

Step 2: Configure the WireGuard Server

Generate private and public keys for the server:

wg genkey | tee privatekey | wg pubkey > publickey

Now you need to set appropriate permissions for the keys:

sudo chmod 600 privatekey publickey

Now we will edit the WireGuard configuration file and add the interface:

sudo nano /etc/wireguard/wg0.conf

Add the following configuration. In this part, you will use the keys you created. Replace YOUR_SERVER_PRIVATE_KEY with the actual private key generated earlier.

[Interface]
PrivateKey = YOUR_SERVER_PRIVATE_KEY
Address = 10.0.0.1/24
ListenPort = 51820

# Uncomment the following if using a cloud server or behind NAT
# PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ensX -j MASQUERADE
# PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ensX -j MASQUERADE

Step 3: Enable and Start WireGuard

sudo wg-quick up wg0
sudo systemctl enable wg-quick@wg0

Step 4: Set up IP forwarding and firewall rules:

Enabling IP forwarding is essential when configuring VPNs like WireGuard, as it allows the system to route packets between different network interfaces.

echo "net.ipv4.ip_forward=1" | sudo tee -a /etc/sysctl.conf
sudo sysctl -p

Step 5: Create New Users

Now, let’s create new users and generate their private and public keys.

Step 1:
Generate private and public keys for each user:

wg genkey | sudo tee /etc/wireguard/client_privatekey1 | wg pubkey | sudo tee /etc/wireguard/client_publickey1
wg genkey | sudo tee /etc/wireguard/client_privatekey2 | wg pubkey | sudo tee /etc/wireguard/client_publickey2
# Generate keys for more users as needed

Step 2:
Create a new configuration file for each user. Replace user1 and user2 with your desired usernames:

sudo nano /etc/wireguard/user1.conf

Step 3:
Add the following content to each user’s configuration file, replacing the placeholders with the corresponding keys and server’s public IP address:

[Interface]
PrivateKey = <CLIENT_PRIVATE_KEY>
Address = 10.0.0.2/32                # Assign a unique IP address for each user
DNS = 8.8.8.8                        # Optional: Set preferred DNS server

[Peer]
PublicKey = <SERVER_PUBLIC_KEY>
AllowedIPs = 0.0.0.0/0
Endpoint = YOUR_SERVER_PUBLIC_IP:51820

Replace <CLIENT_PRIVATE_KEY> with the content of the corresponding client private key and <SERVER_PUBLIC_KEY> with the content of /etc/wireguard/publickey generated earlier. Modify the IP address and DNS settings as desired.

Step 4: Save and close each user’s configuration file.
This file gets used with the WireGuard client to connect to your VPN.

IMPORTANT

You also need to add each user to the wg0.conf file under all the settings:

#User1 
[Peer]
PublicKey = <USER_PUBLIC_KEY> 
AllowedIPs = 10.0.0.19/32

Whenever you make changes to the WireGuard configuration files, you need to restart the service for the changes to take effect.

sudo systemctl restart wg-quick@wg0

Connect to Your WireGuard VPN from Any Device

With your WireGuard VPN up and running, it’s time to connect from your preferred devices. WireGuard offers clients for a wide range of platforms, making it simple to access your secure VPN from desktops, laptops, smartphones, and even routers. Below are links to download the appropriate clients for popular systems:

Setting Up the Connection

After installing the client, import the configuration files generated during setup to establish secure connections quickly and seamlessly.

Why WireGuard?

As VPNs become essential for safeguarding online privacy, WireGuard stands out as a next-generation solution offering:

  • Blazing Fast Speeds: Optimized for better performance than traditional VPNs.
  • Simplicity: Lightweight and easy to configure.
  • Top-Notch Security: Built on cutting-edge cryptographic protocols.

Whether you’re protecting personal data or securing sensitive business information, WireGuard offers a streamlined and secure solution. Take control of your online privacy and enjoy safe, encrypted browsing—embrace the future of VPN technology with WireGuard!

Submit a Comment