wireguard.md

1:设置

sudo vi /etc/sysctl.conf
net.ipv4.ip_forward=1
sudo sysctl -p

2:安装

https://www.wireguard.com/install/

3:生成key

wg genkey | tee privatekey | wg pubkey > publickey

#查看私钥
cat privatekey 
#查看公钥
cat publickey

服务端

    私钥：+APhXtu7QecMjC9M7Nv1y3XpvuVIgOSo0SO0BOYZuUw=
    公钥：OAoGS1iYKde4Pp7achtGo/RaJBQMh3RjW3IKJKyB40I=

客户端
    私钥：8HSW0qtVL/hkj/oN8eSAmMiSggM6uGfCew1qamMQMXs=
    公钥：/n83sQyNxrj6wgkTR/XyAfUJSmmoMDkw/e8/gQjLfj8=

4:服务端配置文件

查看interface，替换配置文件里的eth0:

    ifconfig 

sudo vim /etc/wireguard/wg0.conf

内容:

    [Interface]
    Address = 192.168.2.1/24
    PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
    PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
    ListenPort = 51820
    PrivateKey = +APhXtu7QecMjC9M7Nv1y3XpvuVIgOSo0SO0BOYZuUw=

    [Peer]
    PublicKey = /n83sQyNxrj6wgkTR/XyAfUJSmmoMDkw/e8/gQjLfj8=
    AllowedIPs = 10.0.2.1/24


启动:

    sudo wg-quick up wg0

5: ShadowGuard

wg://ip:51820?dns=8.8.8.8&sk=8HSW0qtVL/hkj/oN8eSAmMiSggM6uGfCew1qamMQMXs=&pk=OAoGS1iYKde4Pp7achtGo/RaJBQMh3RjW3IKJKyB40I=&addr=10.0.2.1/24#demo