Cara Install Wireguard VPN ubuntu Server

1. Install Wireguard Server

add-apt-repository ppa:wireguard/wireguard
apt-get update
apt-get install wireguard-dkms wireguard-tools linux-headers-$(uname -r)

2. Generate Key Server

generete private dan publick key

umask 077
wg genkey | tee server_private_key | wg pubkey > server_public_key

3. Install Wireguard Client dan Generate Key Client

sudo add-apt-repository ppa:wireguard/wireguard
sudo apt-get update
sudo apt-get install wireguard-dkms wireguard-tools linux-headers-$(uname -r)

wg genkey | tee client_private_key | wg pubkey > client_public_key

4. Konfigurasi Wireguard Server Config

[Interface]
Address = 10.100.100.1/24
SaveConfig = true
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o enp0s3 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o enp0s3 -j MASQUERADE
ListenPort = 51870
PrivateKey = #PrivateKeyServer

[Peer]
PublicKey =  #PublicKeyClient
AllowedIPs = 10.100.100.2/32


[Peer]
PublicKey = #PublicKeyClient
AllowedIPs = 10.100.100.3/32


[Peer]
PublicKey = #PublicKeyClient
AllowedIPs = 10.100.100.4/32

simpan di file /etc/wireguard/wg0.conf

5. Enable IP4 Forwarding

Edit /etc/sysctl.conf dan uncoment baris berikut

net.ipv4.ip_forward=1

6. restart server

sysctl -p
echo 1 > /proc/sys/net/ipv4/ip_forward

7. Jalankan Wireguard Server

chown -v root:root /etc/wireguard/wg0.conf
chmod -v 600 /etc/wireguard/wg0.conf
wg-quick up wg0
systemctl enable [email protected] 

8. Buat Configurasi Client

[Interface]
Address = 10.100.100.2/32
PrivateKey = #ClientPrivateKey

[Peer]
PublicKey = #ServerPublicKey
Endpoint = ipvps:51870
AllowedIPs = 0.0.0.0/0
PersistentKeepalive = 21

simpan di /etc/wireguard/client.conf

9. Koneksikan VPN

sudo wg-quick up client