WireGuard Private Network Between Servers
Encrypted tunnels between your own servers
A private network between your servers
WireGuard Network links your servers with encrypted tunnels, so they talk to each other on private addresses instead of over the open internet. Only your own servers can be linked, and each server's private key is made on that server and never leaves it.
01 · Set it up on a server
- Click Setup WireGuard. It installs WireGuard on the server, creates its key and gives it a private address.
- Do the same on every server that should join.
02 · Link servers
- Under Set up WireGuard between this server and:, tick the servers this one should talk to. Nothing is ticked for you. Servers without WireGuard are greyed out with enable WireGuard on it first.
- Click Save Links. Both ends are updated, and the result lists each server with the tunnels applied.
03 · What the tab shows
- Status (running, stopped or not installed), this server's private Address, its UDP port and its Public key.
- A table of active tunnels: Peer (servers and devices), Tunnel address, Endpoint, Last handshake (red when it is older than three minutes or never happened), Received and Sent.
04 · The other buttons
Sends the current tunnel list again to this server and to every server linked to it.
Stops WireGuard on this server; its linked servers drop it. The links are kept, so enabling it again restores them.
Reads the status again.
To make one server use a service on another through the tunnel (firewall rule, /etc/hosts line, checks): Connect two servers, step by step.
When the firewall is on, the WireGuard port is opened only for the servers you linked and the networks of your devices.