WireGuard
A lean VPN protocol built around public keys and modern cryptography.
WireGuard is an open-source VPN protocol and software project for creating encrypted network tunnels over UDP. It uses a small, auditable design centered on public-key peer configuration, with implementations for Linux, Windows, macOS, BSD, iOS, and Android.
Why it stands out
- Much smaller and more reviewable codebase than many traditional VPN stacks.
- Configuration model resembles exchanging SSH keys rather than managing certificates and negotiation daemons.
- Designed to work with normal network-interface and routing tools instead of a separate opaque VPN layer.
- Uses a fixed set of modern cryptographic primitives rather than offering many legacy cipher choices.
- Runs across desktop, mobile, server, embedded, and container-oriented environments.
Good to know
- WireGuard does not handle key distribution or pushed client configuration; those must be managed separately.
- It is a VPN protocol/toolkit, not a turnkey commercial VPN provider with exit servers included.
- Advanced routing, firewall, and namespace setups still require networking knowledge.
- The page describes the project as under heavy development, so users should follow current platform documentation.
Under the radar: For Linux container setups, read the Routing & Network Namespaces documentation before configuring peers; WireGuard interfaces can be treated like ordinary network interfaces, which enables cleaner namespace-based designs.
Photos
Network administrators who need a lightweight site-to-site or device-to-network VPN without IPsec-style complexity. Set up encrypted access between servers, laptops, phones, and private networks. Run VPN tunnels on resource-constrained devices as well as high-throughput routers. Build container or namespace-aware networking setups on Linux. Study a modern VPN protocol with a published whitepaper and cryptographic design notes.
Public-key peer configuration, Cryptokey Routing, UDP-based IP packet encapsulation, roaming between IP addresses, Linux kernel integration, cross-platform clients, command-line tooling, source code, protocol documentation, formal verification notes, and a technical whitepaper.
Alternative listings
Network-level ad and tracker blocking with customizable DNS rules.
Privacy & security tools / big-tech alternativesAdGuard DNS is a cloud DNS service that filters requests before they reach websites or apps, blocking known advertising, tracking, phishing, malware, and adult-content domains depending on the mode you choose. It can be used as a public DNS resolver or managed through a dashboard for device-level rules, request statistics, and custom allow/block lists.
0 votesVisit siteA privacy-focused VPN and browser from a no-logging provider.
Privacy & security tools / big-tech alternativesMullvad offers a VPN service for masking your IP address and encrypting internet traffic, alongside a free privacy-oriented browser developed with Tor. The service emphasizes anonymous accounts, no activity logging, censorship circumvention, open-source work, and tools for checking leaks and server status.
0 votesVisit site
Similar sites elsewhere
- OpenVPN — openvpn.net
- strongSwan — strongswan.org
- Tailscale — tailscale.com
- ZeroTier — zerotier.com
1 of 5