# WireGuard

WireGuard is a fast, lightweight virtual private network (VPN) server that creates encrypted point-to-point tunnels for secure remote access, private network sharing, and home-lab deployments. It is open source and self-hosted, installable on Docker Hub, Proxmox, Kubernetes (Helm), Umbrel and Unraid.

Canonical page: https://ourlocalhost.com/app/377/wireguard

## Description

WireGuard is a fast, lightweight virtual private network (VPN) server that creates encrypted point-to-point tunnels for secure remote access, private network sharing, and home-lab deployments.

## Platform availability

Available on 5 of 9 platforms: Unraid, Umbrel, ZimaOS, Proxmox, Helm.

## Health score

82/100 (Excellent), based on 5 of 5 factors.
- Maintained: 100 (last commit 23 days ago)
- Popular: 71 (3,637 GitHub stars)
- Easy to install: 75 (5 install platforms, install notes, Docker image)
- Light to run: 80 (1 GB minimum RAM, runs on ARM)
- Security check: 69 (no serious findings, CI, OpenSSF Scorecard 4.5/10)

## Links

- Documentation: https://www.wireguard.com/#about-the-project
- Docker Hub: https://hub.docker.com/r/linuxserver/wireguard
- Proxmox: https://community-scripts.github.io/ProxmoxVE/scripts?id=wireguard
- Kubernetes (Helm): https://artifacthub.io/packages/helm/wireguard/wireguard
- Umbrel: https://apps.umbrel.com/app/wireguard
- Unraid: https://ca.unraid.net/apps/wireguard-1ynf0sy0kmxxfi?q=wireguard
- Official website: https://www.wireguard.com/
- GitHub: https://github.com/linuxserver/docker-wireguard

## Common questions

### What Docker settings are required for the WireGuard container to work?

Run the container with --cap-add=NET_ADMIN, publish 51820/udp, set the src_valid_mark sysctl, mount /config, and set PUID/PGID to your host user and group. Missing these settings can stop the VPN from working.

### What should I back up to preserve my WireGuard configuration?

Back up the /config folder because it stores your tunnel configs, peer templates, and DNS settings. If it is lost, the container restarts fresh and your old VPN setup is gone.

### How can I verify the container loaded my tunnels?

Check the container log after startup for lines saying tunnels were found and 'All tunnels are now active.' If that is missing, the container did not load your tunnel configs, so clients will not connect.

### Why might WireGuard not show traffic immediately?

WireGuard is silent by design and sends nothing until there is data to carry.

## Alternatives

- Amnezia VPN: Enables classic, free, and self-hosted VPN modes, works under high censorship, uses a WireGuard-based protocol for better blocking resistan…
- Fossorial Pangolin: Open-source identity-based remote access platform using WireGuard, offering unified management, tunneled connections, granular access contr…
- LogMeIn Hamachi: Seamlessly connects devices and networks, extending LAN-like connectivity to mobile users and teams with a secure, hosted VPN service.
- OpenVPN Connect: OpenVPN Connect provides flexible VPN solutions to secure your data communications, whether it's for Internet privacy, remote access for em…
- Outline VPN: Journalists need safe access to information to research issues, communicate with sources, and report the news.
- Shadowsocks: Shadowsocks is a self-hosted SOCKS5 proxy that uses the open-source Shadowsocks encryption protocol.
- SoftEther VPN: SoftEther VPN ("SoftEther" means "Software Ethernet") is one of the world's most powerful and easy-to-use multi-protoco…
- Tailscale: Private networks made easy.
- ZeroTier: ZeroTier is an open-source, cross-platform virtual LAN/VPN service that connects your devices and servers into one private network, so you…
- defguard: Defguard is a self-hosted secure remote access platform that combines WireGuard virtual private network (VPN), identity and access manageme…

---
Source: Our Local Host (https://ourlocalhost.com/app/377/wireguard), the self-hosted and open-source app directory.