← Directory

Defguard

Defguard is a self-hosted secure remote access platform that combines a WireGuard virtual private network, identity and access management, multi-factor…

  • Network Services
  • Security
Defguard is a self-hosted secure remote access platform that combines a WireGuard virtual private network, identity and access management, multi-factor authentication, and network access control to give organizations centralized control over private infrastructure.

Platform availability

Available on 1 of 9 platforms

  • Unraid (not listed)
  • TrueNAS (not listed)
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox
  • Helm (not listed)
  • Mac (not listed)
  • Windows (not listed)
  • Linux (not listed)

Health score

Not enough data yet for a health score. It needs at least 2 of 4 factors: maintenance, popularity, ease of install, resource needs.

Availability: platform listings confirmed today

No GitHub repository data collected yet.

Resources & Compatibility

Minimum requirements: 1 GB RAM.

Checked today - source: Docker Hub image tags and published docs

First-install notes

  • Install the core Defguard packages Use the listed `sudo apt install` commands, where `apt` is the package manager on Debian/Ubuntu, to install `defguard`, `defguard-proxy`, `defguard-gateway`, and `defguard-client`. If you miss one piece, the admin site, VPN gateway, or client may not work, and users may be unable to sign in or connect. source
  • Check the ports your install exposes If you run Defguard in Docker (container software), check that `defguard-core-1` is listening on port 8000 for the web UI and 50055 for client/VPN traffic, and that `defguard-db-1` is using 5432 for its database. If the firewall blocks the web or VPN ports, people may be able to run the containers but still cannot sign in or connect. source
  • Start the VPN service after enrollment After your one-time enrollment (the first setup that connects the computer to Defguard), run `systemctl start dg` to start the background VPN service. If you skip this, the VPN may not keep running after you log out or close the terminal. source
  • Install core Defguard packages with apt Use sudo apt to install defguard, defguard-proxy, defguard-gateway, and defguard-client; missing a package can stop the admin site, VPN gateway, or client from working. source

Fetched today - each note links to its source

Alternatives

No alternatives collected yet.

Common questions

Can Defguard let users sign in with Google or Microsoft?

Yes, it supports external OIDC providers including Google and Microsoft, and it can also sync users from LDAP or AD.

Can I restrict access to specific internal networks by user or group?

Yes, firewall allow/deny rules can be applied per VPN location by user or group in real time.

Is there an audit log for VPN and access events?

Defguard includes an activity log with filtering and search; real-time SIEM streaming is listed as an Enterprise feature.

Does Defguard require calling outside services for authentication or data?

No, it is described as fully self-hosted with no external dependencies, and no data leaves your infrastructure.

What main components are involved in a Defguard deployment?

The architecture uses Core for identity and policy, Edge as the public entry point, and Gateway to enforce network access policies.

Answers sourced from github.com

Community

Collected today - public community threads