- Home
- Virtual Private Network Software
- WireGuard
On the recordRead 11 Oct 202626 facts
WireGuard
On the record
- Access model
- vpnwireguard.com · read 22 Sep 2026
- Admin control level
- basicwireguard.com · read 22 Sep 2026
- Configuration
- Peers authenticate with public keys, and WireGuard handles the rest of the connection transparently.wireguard.com · read 11 Oct 2026
- Containers
- A WireGuard interface can be moved into a Docker container’s network namespace so the container can use the tunnel as its only network interface.wireguard.com · read 11 Oct 2026
- Container use
- A WireGuard interface can be moved into a Docker container's network namespace so the tunnel is the container's only network interface.wireguard.com · read 11 Oct 2026
- Cryptography
- The protocol uses Noise_IK, Curve25519, ChaCha20-Poly1305, BLAKE2s, SipHash24, and HKDF, and supports an optional pre-shared key.wireguard.com · read 11 Oct 2026
- Denial-of-service mitigation
- The first handshake message is authenticated before the server allocates state, and the protocol describes cookie-based mitigation when the server is under load.wireguard.com · read 11 Oct 2026
- Installation options
- The installation page provides Windows, macOS, iOS, Android, and numerous Linux and BSD installation options, with source compilation available for unlisted distributions.wireguard.com · read 11 Oct 2026
- Integrations
- The project describes using WireGuard with Docker network namespaces and lists packages or installation instructions for many Linux distributions and BSD systems.wireguard.com · read 11 Oct 2026
- Key security
- The protocol periodically establishes rotating session keys to provide perfect forward secrecy.wireguard.com · read 11 Oct 2026
- License
- The kernel components are GPLv2; other project components use MIT, BSD, Apache 2.0, or GPL depending on context.wireguard.com · read 11 Oct 2026
- Licensing
- The kernel components are GPLv2, while other project components use MIT, BSD, Apache 2.0, or GPL depending on context.wireguard.com · read 11 Oct 2026
- Limit: obfuscation
- WireGuard does not focus on obfuscation and says that should happen at a layer above the protocol.wireguard.com · read 11 Oct 2026
- Limit: post-quantum
- WireGuard is not post-quantum secure by default, though its pre-shared-key parameter can add a layer of post-quantum secrecy.wireguard.com · read 11 Oct 2026
- Limit: transport
- WireGuard does not support tunneling over TCP; the site says transforming its UDP packets to TCP is the job of an upper layer.wireguard.com · read 11 Oct 2026
- Performance and design
- The project describes WireGuard as a fast, simple VPN designed for uses ranging from embedded interfaces to supercomputers.wireguard.com · read 11 Oct 2026
- Purpose
- WireGuard is a fast, modern VPN that securely encapsulates IP packets over UDP.wireguard.com · read 11 Oct 2026
- Roaming
- WireGuard supports IP roaming: peers update their endpoint based on authenticated traffic from the most recent endpoint.wireguard.com · read 11 Oct 2026
