# WireGuard

**URL:** https://community.ipfire.org/c/vpn/wireguard/30.md

[Latest](https://community.ipfire.org/latest.md) · [Categories](https://community.ipfire.org/categories.md)

---

## [About the WireGuard category](https://community.ipfire.org/t/about-the-wireguard-category/14037)

<div class="topic-metadata">

**Author:** [@ms](https://community.ipfire.org/u/ms)\
**Replies:** 0\
**Last updated:** [9 May 2025 11:24 UTC](https://community.ipfire.org/t/about-the-wireguard-category/14037 "2025-05-09T11:24:13Z")

</div>

Fast, modern VPN setup using IPFire’s WireGuard integration.

---

## [Multiple tunnels: performance (throughput, latency) heavily degraded](https://community.ipfire.org/t/multiple-tunnels-performance-throughput-latency-heavily-degraded/16190)

<div class="topic-metadata">

**Author:** [@baruch234](https://community.ipfire.org/u/baruch234)\
**Replies:** 4\
**Last updated:** [9 October 2026 07:23 UTC](https://community.ipfire.org/t/multiple-tunnels-performance-throughput-latency-heavily-degraded/16190 "2026-10-09T07:23:07Z")

</div>

Hi folks, today I observed an unexpected and persisting degradation of wireguard performance (client-to-network) while 2 net-to-net connenctions were active; the scenario: IPFire Business Appliance (powerful, 8core 2,2…

---

## [Ipfire Connection to NordVPN via WireGuard / OpenVPN](https://community.ipfire.org/t/ipfire-connection-to-nordvpn-via-wireguard-openvpn/16175)

<div class="topic-metadata">

**Author:** [@markusonwheels](https://community.ipfire.org/u/markusonwheels)\
**Replies:** 8\
**Last updated:** [5 October 2026 18:51 UTC](https://community.ipfire.org/t/ipfire-connection-to-nordvpn-via-wireguard-openvpn/16175 "2026-10-05T18:51:35Z")

</div>

Hello, As a newbie, could someone please explain how I can import a NordVPN configuration via the WUI into iPfire for WireGuard? The local subnets, in particular, are causing me some trouble. Could someone also explai…

---

## [Bug in WireGuard Keepalive Interval validation (66-99 returns invalid)](https://community.ipfire.org/t/bug-in-wireguard-keepalive-interval-validation-66-99-returns-invalid/16079)

<div class="topic-metadata">

**Author:** [@saberry](https://community.ipfire.org/u/saberry)\
**Replies:** 2\
**Last updated:** [14 August 2026 10:12 UTC](https://community.ipfire.org/t/bug-in-wireguard-keepalive-interval-validation-66-99-returns-invalid/16079 "2026-08-14T10:12:02Z")

</div>

Hi everyone, In the version IPFire 2.29 (x86\_64) - Core-Update 203, I found a bug in the WireGuard Keepalive Interval field. If you enter a value between 66 to 99, it throws this error: Oops, something went wrong… In…

---

## [Cryptographic Acceleration](https://community.ipfire.org/t/cryptographic-acceleration/15941)

<div class="topic-metadata">

**Author:** [@ncted](https://community.ipfire.org/u/ncted)\
**Replies:** 7\
**Last updated:** [11 July 2026 15:09 UTC](https://community.ipfire.org/t/cryptographic-acceleration/15941 "2026-07-11T15:09:06Z")

</div>

I notice that my CPU utilization goes quite high when I run traffic through Wireguard (RoadWarrior) VPN connections. Is there any configuration I can apply that will offload the cryptographic work to the dedicated silic…

---

## [Wireguard Client Gets No DNS](https://community.ipfire.org/t/wireguard-client-gets-no-dns/15898)

<div class="topic-metadata">

**Author:** [@phantom](https://community.ipfire.org/u/phantom)\
**Replies:** 1\
**Last updated:** [19 June 2026 01:39 UTC](https://community.ipfire.org/t/wireguard-client-gets-no-dns/15898 "2026-06-19T01:39:33Z")

</div>

Hello, I sort of successfully setup Wireguard for a client. The Wireguard client can access the LAN without issue. However, the client reports it has no DNS when WIreguard is turned on, and I see a white key with a whit…

---

## [WireGuard Roadwarrior Client Setup](https://community.ipfire.org/t/wireguard-roadwarrior-client-setup/15779)

<div class="topic-metadata">

**Author:** [@jakoch](https://community.ipfire.org/u/jakoch)\
**Replies:** 41\
**Last updated:** [17 June 2026 17:58 UTC](https://community.ipfire.org/t/wireguard-roadwarrior-client-setup/15779 "2026-06-17T17:58:16Z")

</div>

I know this must be very simple. However, it is not working for me. I have created a user in the WUI. I downloaded the file to the client machine (Linux Laptop running CahchyOS). When I activate the VPN in NM I get o…

---

## [Wireguard – how can I improve the readability of the connection table](https://community.ipfire.org/t/wireguard-how-can-i-improve-the-readability-of-the-connection-table/15645)

<div class="topic-metadata">

**Author:** [@tphz](https://community.ipfire.org/u/tphz)\
**Replies:** 1\
**Last updated:** [12 June 2026 14:40 UTC](https://community.ipfire.org/t/wireguard-how-can-i-improve-the-readability-of-the-connection-table/15645 "2026-06-12T14:40:39Z")

</div>

:thinking: A minor change to the wireguard.cgi code could improve the readability of the connection table? 1.Adding a “Type” column: Insert code \<th width='10%'\> $Lang::tr{'type'} \</th\> to \<table cl…

---

## [Access to the remote DMZ via WireGuard in Net-To-Net configuration](https://community.ipfire.org/t/access-to-the-remote-dmz-via-wireguard-in-net-to-net-configuration/15852)

<div class="topic-metadata">

**Author:** [@thomas\_g](https://community.ipfire.org/u/thomas_g)\
**Replies:** 3\
**Last updated:** [8 June 2026 23:23 UTC](https://community.ipfire.org/t/access-to-the-remote-dmz-via-wireguard-in-net-to-net-configuration/15852 "2026-06-08T23:23:46Z")

</div>

Hi everyone! For performance reasons I switched my Net-To-Net connection between two IPFire devices from OpenVPN to WireGuard. To do this, I set up two Net-To-Net peers: one between ORANGE on IPFire 1 and ORANGE on IPF…

---

## [Connected via WireGuard but no link](https://community.ipfire.org/t/connected-via-wireguard-but-no-link/15872)

<div class="topic-metadata">

**Author:** [@anwin](https://community.ipfire.org/u/anwin)\
**Replies:** 2\
**Last updated:** [7 June 2026 13:45 UTC](https://community.ipfire.org/t/connected-via-wireguard-but-no-link/15872 "2026-06-07T13:45:27Z")

</div>

Hi, I’m having a problem with WireGuard. I have two locations connected, and every now and then the connection drops. When I log into the iFire, it shows that the WireGuard connection is active, but nothing works. If I d…

---

## [Wireguard linked to wrong interface after U200](https://community.ipfire.org/t/wireguard-linked-to-wrong-interface-after-u200/15602)

<div class="topic-metadata">

**Author:** [@norli](https://community.ipfire.org/u/norli)\
**Replies:** 12\
**Last updated:** [1 June 2026 13:43 UTC](https://community.ipfire.org/t/wireguard-linked-to-wrong-interface-after-u200/15602 "2026-06-01T13:43:07Z")

</div>

Hello everybody, i’m having an issue with my wireguard connections i can’t resolve since updating to U200. Prior to the update all wireguard connections worked fine - including forwarding traffic from a connected smart…

---

## [Bug Report for WireGuard Net-to-Net Peer Configuration](https://community.ipfire.org/t/bug-report-for-wireguard-net-to-net-peer-configuration/15838)

<div class="topic-metadata">

**Author:** [@thomas\_g](https://community.ipfire.org/u/thomas_g)\
**Replies:** 2\
**Last updated:** [31 May 2026 21:56 UTC](https://community.ipfire.org/t/bug-report-for-wireguard-net-to-net-peer-configuration/15838 "2026-05-31T21:56:48Z")

</div>

Hello everyone! While setting up WireGuard Net-To-Net, I encountered the following issue: When I edited the ‘Remark’ line again after setting up the Net-To-Net connection and entered more than 56 characters, the conten…

---

## [VPN: Roadwarrior Statistics](https://community.ipfire.org/t/vpn-roadwarrior-statistics/15836)

<div class="topic-metadata">

**Author:** [@phantom](https://community.ipfire.org/u/phantom)\
**Replies:** 2\
**Last updated:** [31 May 2026 21:45 UTC](https://community.ipfire.org/t/vpn-roadwarrior-statistics/15836 "2026-05-31T21:45:14Z")

</div>

Will there be a graph at some point for WireGuard like there is for OpenVPN as seen at this IPFire Documentation link: www.ipfire.org - OpenVPN Client statistics - VPN: Roadwarrior Statistics ? The addition of WireGuard…

---

## [Wireguard does not restart after Red down](https://community.ipfire.org/t/wireguard-does-not-restart-after-red-down/15679)

<div class="topic-metadata">

**Author:** [@femi](https://community.ipfire.org/u/femi)\
**Replies:** 7\
**Last updated:** [27 May 2026 03:40 UTC](https://community.ipfire.org/t/wireguard-does-not-restart-after-red-down/15679 "2026-05-27T03:40:37Z")

</div>

When the Red connection is broken and chomes back all Wireguard connections are green, but there is no connection to the opposite point. I tried to restart the Service with a Script, but it is not working. /usr/local/b…

---

## [Wireguard - Cannot Reach Green Except IPFire Itself](https://community.ipfire.org/t/wireguard-cannot-reach-green-except-ipfire-itself/15342)

<div class="topic-metadata">

**Author:** [@trymes](https://community.ipfire.org/u/trymes)\
**Replies:** 9\
**Last updated:** [30 April 2026 15:20 UTC](https://community.ipfire.org/t/wireguard-cannot-reach-green-except-ipfire-itself/15342 "2026-04-30T15:20:51Z")

</div>

I swapped over to a new desktop today, and after having used IPSec extensively for years for Net-to-Net, and less extensively for Host-to-Net, I had issues setting up my connection. I also noticed that Trail of Bits’ Alg…

---

## [IPfire net-to-net via WireGuard with Fritz box LTE](https://community.ipfire.org/t/ipfire-net-to-net-via-wireguard-with-fritz-box-lte/15700)

<div class="topic-metadata">

**Author:** [@oleg](https://community.ipfire.org/u/oleg)\
**Replies:** 1\
**Last updated:** [24 April 2026 13:14 UTC](https://community.ipfire.org/t/ipfire-net-to-net-via-wireguard-with-fritz-box-lte/15700 "2026-04-24T13:14:07Z")

</div>

I want to set up a net-to-net connection between several LTE FritzBoxes and an IPFire. The IPFire will be located at the central office and will receive information that way. So far, I haven’t been able to connect even a…

---

## [Wireguard Net-To-Net IPFire \<-\> FritzBox](https://community.ipfire.org/t/wireguard-net-to-net-ipfire-fritzbox/15683)

<div class="topic-metadata">

**Author:** [@odongarma](https://community.ipfire.org/u/odongarma)\
**Replies:** 0\
**Last updated:** [23 April 2026 07:31 UTC](https://community.ipfire.org/t/wireguard-net-to-net-ipfire-fritzbox/15683 "2026-04-23T07:31:29Z")

</div>

Hello Community! I was able to create a wireguard tunnel between my ipfire appliance and a remote Fritzbox. The Fritzbox was creating the config and on the ipfire side i only imported the config file. At first the con…

---

## [Wireguard VPN Split Tunnel Script](https://community.ipfire.org/t/wireguard-vpn-split-tunnel-script/15508)

<div class="topic-metadata">

**Author:** [@zoot](https://community.ipfire.org/u/zoot)\
**Replies:** 0\
**Last updated:** [21 February 2026 21:08 UTC](https://community.ipfire.org/t/wireguard-vpn-split-tunnel-script/15508 "2026-02-21T21:08:32Z")

</div>

I just thought I would share a script I’ve created and been using for a while now on IPFire in the event its useful to someone else. The background is that I’ve wanted for a while now to move the connection for the VPN …

---

## [Wireguard - small hints for various configurations](https://community.ipfire.org/t/wireguard-small-hints-for-various-configurations/15506)

<div class="topic-metadata">

**Author:** [@tphz](https://community.ipfire.org/u/tphz)\
**Replies:** 0\
**Last updated:** [20 February 2026 22:10 UTC](https://community.ipfire.org/t/wireguard-small-hints-for-various-configurations/15506 "2026-02-20T22:10:02Z")

</div>

I have collected tips from several of my posts on various configurations for Roadwarrior client access to the GREEN IPFireB network via IPFireA. WireGuardClient--WireGuardHost2Net--IPFireA--WireguardNet2Net--IPFireB--G…

---

## [N2N connection "connected" but no remote connectivity](https://community.ipfire.org/t/n2n-connection-connected-but-no-remote-connectivity/15504)

<div class="topic-metadata">

**Author:** [@josc](https://community.ipfire.org/u/josc)\
**Replies:** 6\
**Last updated:** [20 February 2026 19:56 UTC](https://community.ipfire.org/t/n2n-connection-connected-but-no-remote-connectivity/15504 "2026-02-20T19:56:17Z")

</div>

Dear forum, i am reaching out because of an essentially nonfunctional net-to-net-connection between two Ipfires. Ipfire1 (green subnet is 192.168.111.0/24) is behind a normal IPV4-Telekom-DSL connection with dynamic DN…

---

## [Forwarding Wire Guard VPN Server From Green To Red](https://community.ipfire.org/t/forwarding-wire-guard-vpn-server-from-green-to-red/15494)

<div class="topic-metadata">

**Author:** [@rapter001](https://community.ipfire.org/u/rapter001)\
**Replies:** 4\
**Last updated:** [18 February 2026 13:50 UTC](https://community.ipfire.org/t/forwarding-wire-guard-vpn-server-from-green-to-red/15494 "2026-02-18T13:50:11Z")

</div>

Hi i see, to not be able to forwarded my wire guard vpn server that’s connected to green to expose to red i know the vpn server is working fully because it routes traffic in lan i dont want to use dmz this is my current …

---

## [Wireguard N2N setup inside LAN](https://community.ipfire.org/t/wireguard-n2n-setup-inside-lan/15486)

<div class="topic-metadata">

**Author:** [@johnytheboar](https://community.ipfire.org/u/johnytheboar)\
**Replies:** 4\
**Last updated:** [14 February 2026 16:54 UTC](https://community.ipfire.org/t/wireguard-n2n-setup-inside-lan/15486 "2026-02-14T16:54:50Z")

</div>

Hello I have the house owner network setup LAN is 10.100.102.0/24 . In my private floor/apartment iv set up two different ipfire networks under that house LAN because i dont want to be in the same network with him …

---

## [Understanding firewall rules: no routing between WireGuard and GREEN zone (solved)](https://community.ipfire.org/t/understanding-firewall-rules-no-routing-between-wireguard-and-green-zone-solved/15427)

<div class="topic-metadata">

**Author:** [@damb](https://community.ipfire.org/u/damb)\
**Replies:** 29\
**Last updated:** [14 February 2026 16:35 UTC](https://community.ipfire.org/t/understanding-firewall-rules-no-routing-between-wireguard-and-green-zone-solved/15427 "2026-02-14T16:35:26Z")

</div>

Hello, I have recently started using IpFire, and I’m having trouble understanding how firewall rules work. I’ve set up a WireGuard service (Purple), and I can connect remotely and access the internet. However, I’m having…

---

## [Logging of Wireguard connections](https://community.ipfire.org/t/logging-of-wireguard-connections/14395)

<div class="topic-metadata">

**Author:** [@herby](https://community.ipfire.org/u/herby)\
**Replies:** 4\
**Last updated:** [30 January 2026 18:11 UTC](https://community.ipfire.org/t/logging-of-wireguard-connections/14395 "2026-01-30T18:11:32Z")

</div>

First of all I thank the development team for implementing wireguard on IPfire. This is a great progress. However, where can I fand the logs regarding the wireguard connection?

---

## [Wireguard Host to Net](https://community.ipfire.org/t/wireguard-host-to-net/15338)

<div class="topic-metadata">

**Author:** [@anwin](https://community.ipfire.org/u/anwin)\
**Replies:** 0\
**Last updated:** [11 December 2025 08:38 UTC](https://community.ipfire.org/t/wireguard-host-to-net/15338 "2025-12-11T08:38:21Z")

</div>

Hello, I’m revisiting this topic because I’ve figured it out. I have the following setup: Fritz→Ipfire Behind the Ipfire is a VM with Wireguard, which also works great. Now I want to use this on the Ipfire as well. So I…

---

## [Connection broken, sometimes](https://community.ipfire.org/t/connection-broken-sometimes/15301)

<div class="topic-metadata">

**Author:** [@danjel](https://community.ipfire.org/u/danjel)\
**Replies:** 10\
**Last updated:** [1 December 2025 12:50 UTC](https://community.ipfire.org/t/connection-broken-sometimes/15301 "2025-12-01T12:50:40Z")

</div>

Hey! I have a working connection from my laptop to work. The laptop is kubuntu. I can connect from home and my phone, connect to internet, rdp and network shares. And all other wifi’s I have connect to. But from 1 n…

---

## [Configration wireguard](https://community.ipfire.org/t/configration-wireguard/15266)

<div class="topic-metadata">

**Author:** [@cracksilver78](https://community.ipfire.org/u/cracksilver78)\
**Replies:** 2\
**Last updated:** [19 November 2025 22:18 UTC](https://community.ipfire.org/t/configration-wireguard/15266 "2025-11-19T22:18:34Z")

</div>

Hi there I try to set up a wireguard vpn connection from home (macbook) to office (ipfire, proxmox). not shure about dns server in configration… thank you in advance. Greg

---

## [Wireguard net to net +roadwarrior?](https://community.ipfire.org/t/wireguard-net-to-net-roadwarrior/15252)

<div class="topic-metadata">

**Author:** [@anwin](https://community.ipfire.org/u/anwin)\
**Replies:** 6\
**Last updated:** [13 November 2025 23:06 UTC](https://community.ipfire.org/t/wireguard-net-to-net-roadwarrior/15252 "2025-11-13T23:06:00Z")

</div>

Hello, is it possible that you can no longer use a Roadwarrior connection if there is a net-to-net connection?

---

## [IPFire Net-To-Net using VPS Host? WireGuard behind CGNAT](https://community.ipfire.org/t/ipfire-net-to-net-using-vps-host-wireguard-behind-cgnat/15234)

<div class="topic-metadata">

**Author:** [@xmesaj2](https://community.ipfire.org/u/xmesaj2)\
**Replies:** 4\
**Last updated:** [11 November 2025 15:58 UTC](https://community.ipfire.org/t/ipfire-net-to-net-using-vps-host-wireguard-behind-cgnat/15234 "2025-11-11T15:58:14Z")

</div>

Hello, I am behind CGNAT and don’t have public IP so my WireGuard setup is not accesible from outside, I wanted to setup WireGuard on a VPS with public IP to tunnel traffic to my home. Currently it seems net-to-net onl…

---

## [Wireguard interface address?](https://community.ipfire.org/t/wireguard-interface-address/15191)

<div class="topic-metadata">

**Author:** [@aqualung](https://community.ipfire.org/u/aqualung)\
**Replies:** 5\
**Last updated:** [31 October 2025 18:36 UTC](https://community.ipfire.org/t/wireguard-interface-address/15191 "2025-10-31T18:36:11Z")

</div>

I can’t easily reach wireguard peers from the ipfire box because the wg0 interface doesn’t have an IP address (and I can’t find anywhere in the GUI to assign it one). As a result, the wireguard-bound packets have the…

[Next page](https://community.ipfire.org/c/vpn/wireguard/30.md?page=1)
