Wireguard Reverse Proxy

Generate key

wg genkey | tee azure_privatekey | wg pubkey > azure_publickey

Install Wg Client side on all servers

Create config file in /etc/wireguard. For example cone.conf

[Interface]
# Name = ray
Address = 192.168.168.2/32
PrivateKey = `SERVER_PRIVATE_KEY`
[Peer]
# Name = cone
PublicKey = `HOST_PUBLIC_KEY`
Endpoint = `HOST_IP`:`HOST_PORT`
# Allow IPs from WG
AllowedIPs = 192.168.168.0/24
PersistentKeepalive = 25

Notice: 192.168.168.2/32 should be set to a specific IP for machine in wg network.

Host side config

For example: cone.conf

[Interface]
# Name = conf
Address = 192.168.168.1/24
ListenPort = `HOST_PORT`
PrivateKey = `HOST_PRIVATE_KEY`
[Peer]
# Name = ray
PublicKey = `SERVER_PUBLIC_KEY`
AllowedIPs = 192.168.168.2/32
# If have multiple machines
[Peer]
# Name = jazz
PublicKey = ...
AllowedIPs = 192.168.168.3/32
[Peer]
# Name = gala
PublicKey = ...
AllowedIPs = 192.168.168.4/32

Start Instructions

1. Genrate keys
2. Start host on host-side: wg-quick up cone
3. Start clients on client-side: wg-quick up cone