DEV Community

loading...

How to Set Up WireGuard VPN Client on Ubuntu Desktop

serhatteker profile image Serhat Teker Originally published at tech.serhatteker.com on ・3 min read

0. Prerequisite

You need a working WireGuard VPN server. Learn how to set that up here: How to Set Up WireGuard VPN Server on Ubuntu

1. Install

First we update our Ubuntu host machine then install WireGuard:

$ sudo apt update
$ sudo apt install wireguard
Enter fullscreen mode Exit fullscreen mode

NOTE:

You may see over the web that you should install WireGuard with ppa,
like:

$ sudo add-apt-repository ppa:wireguard/wireguard

This is an outdated method and as we seen in https://launchpad.net/%7Ewireguard:

This formerly was responsible for producing a PPA for WireGuard on Ubuntu. That functionality has now been folded into Ubuntu itself, so our old PPA has been removed. Simply run apt install wireguard on all Ubuntus ≥ 16.04

2. Configure

2.0. Keys

WireGuard ships with two command-line tools: wg and wg-quick that allow you to configure and manage the WireGuard.

Run the following command to generate the public and private keys:

$ sudo mkdir -p /etc/wireguard/clients
$ wg genkey | sudo tee /etc/wireguard/clients/desktop.key | wg pubkey | sudo tee /etc/wireguard/desktop/clients.key.pub
Enter fullscreen mode Exit fullscreen mode

This places our keys under our /etc/wireguard/clients directory that we just created. As usual, DO NOT share your private key with anyone else, otherwise your VPN will be compromised.

You can view these files with cat:

$ cat /etc/wireguard/clients/desktop.key
$ cat /etc/wireguard/clients/desktop.key.pub
Enter fullscreen mode Exit fullscreen mode

2.1. dekstop.conf File

Create configuration file,

$ sudoedit /etc/wireguard/wg0.conf
Enter fullscreen mode Exit fullscreen mode

and add following settings:

[Interface]
PrivateKey = DESKTOP_CLIENT_PRIVATE_KEY
Address = 10.0.0.2/24

[Peer]
PublicKey = YOUR_SERVER_PUBLIC_KEY
Endpoint = YOUR_SERVER_IP_ADDRESS:51820
AllowedIPs = 0.0.0.0/0
Enter fullscreen mode Exit fullscreen mode

Replace DESKTOP_CLIENT_PRIVATE_KEY with your private key in /etc/wireguard/clients/desktop.key.

2.2. Add Desktop Client to Server

The last configuration step is to add your dekstip client's public key and IP address to your server:

$ sudo wg set wg0 peer DESKTOP_CLIENT_PUBLIC_KEY allowed-ips 10.0.0.2
Enter fullscreen mode Exit fullscreen mode

3. Start WireGuard

3.0. wg up

When everything done above, bring the wg0 interface up using the attributes specified in the configuration file:

$ sudo wg-quick up wg0
Enter fullscreen mode Exit fullscreen mode

Now you should be connected to your Ubuntu VPN server, and the traffic from your client machine should be routed through it. You can check the connection with:

$ sudo wg
Enter fullscreen mode Exit fullscreen mode

and the output should be like:

interface: wg0
  public key: HFqTSN2SE6LvvEU/xV3eJ0KArQEkTx1mYZpAjRtAjwE=
  private key: (hidden)
  listening port: 22870
  fwmark: 0xca6c

peer: 8Mg3Vgw+QduVhJaLERXQbyrPL1/nUWa27Ly8ZVTGTHs=
  endpoint: XXX.XXX.XXX.XXX:51820
  allowed ips: 0.0.0.0/0
  latest handshake: 1 minute, 18 seconds ago
  transfer: 67.58 KiB received, 170.36 KiB sent
Enter fullscreen mode Exit fullscreen mode

3.1. Start at Boot

If you want to to start your WireGuard after every system reboot just run:

$ sudo systemctl enable wg-quick@wg0
Enter fullscreen mode Exit fullscreen mode

To remove this:

$ sudo systemctl disable wg-quick@wg0
Enter fullscreen mode Exit fullscreen mode

4. Test WireGuard

You can now check you IP searching on the browser what is my ip or just use curl to achieve that from your cli:

$ curl ifconfig.me
Enter fullscreen mode Exit fullscreen mode

You should now see your YOUR_SERVER_IP_ADDRESS instead of your your local IP which your ISP provided.

Congrats!

All done!

Discussion (0)

Forem Open with the Forem app