wireguard

Identity

• Kernel module: wireguard (built into kernel 5.6+; backported to 5.4 via DKMS)
• Config: /etc/wireguard/wg0.conf (interface name matches filename: wg0)
• Manage via: wg-quick up wg0 / wg-quick down wg0 / wg (status and stats)
• Unit: wg-quick@wg0.service (systemd unit for persistent operation)
• Install: apt install wireguard / dnf install wireguard-tools (kernel module usually pre-included on modern distros)

Key Generation

# Generate server keys
wg genkey | tee server_private.key | wg pubkey > server_public.key

# Generate client keys
wg genkey | tee client_private.key | wg pubkey > client_public.key

# Optional: pre-shared key (adds post-quantum resistance layer)
wg genpsk > preshared.key