WireGuard

Kernel VPN tunnelling IP over UDP with Curve25519 keys, cryptokey routing and endpoint roaming.

Provider: default
Kind: VPN gateway
Category: Edge
Official docs: https://www.wireguard.com/

Properties · 5 set by this component

property	type	values	required	kind default	this component
activeActive	boolean	—	no	false	▸ false
bgp	boolean	—	no	false	▸ false
listenPort · component property	integer	—	no	51820	inherited
managed	boolean	—	no	false	▸ false
peerType	enum	site-to-site \| point-to-site \| cloud-to-cloud	no	—	▸ site-to-site
preSharedKey · component property	boolean	—	no	false	inherited
roaming · component property	boolean	—	no	true	inherited
throughputMbps	integer	—	no	—	inherited
transport · component property	enum	udp	no	udp	inherited
tunnelType	enum	ipsec \| ssl \| wireguard	no	—	▸ wireguard

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "wireguard", component: "wireguard" }

Other VPN gateway products · 18

VPN Gatewayalibaba-vpn-gatewayalibabacloudvpn-gateway AWS Client VPNaws-client-vpnawsvpn-gateway AWS Site-to-Site VPNaws-site-to-site-vpnawsvpn-gateway Azure VPN Gatewayazure-vpn-gatewayazurevpn-gateway NetBirdnetbirdvpn-gateway OpenVPNopenvpnvpn-gateway strongSwanstrongswanvpn-gateway Submarinersubmarinervpn-gateway Tailscaletailscalevpn-gateway Generic VPN gatewayvpn-gatewayvpn-gateway ZeroTierzerotiervpn-gateway Cloud VPNgoogle-cloud-vpngcpvpn-gateway IBM Cloud VPN for VPCibm-vpn-gatewayibmvpn-gateway Client VPN for VPCibm-vpn-serveribmvpn-gateway Site-to-Site VPNoci-site-to-site-vpnocivpn-gateway Neutron VPNaaSopenstack-neutron-vpnaasopenstackvpn-gateway Client Gatewayoutscale-client-gatewayoutscalevpn-gateway Virtual Gatewayoutscale-virtual-gatewayoutscalevpn-gateway

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# WireGuard: kernel VPN that encapsulates IP packets in UDP using the Noise framework,
3# Curve25519 and ChaCha20. Peers are configured by public key (cryptokey routing) with a
4# default listening port of 51820 and full IP roaming; there is no BGP or HA layer.
5schemaVersion: "1"
6type: "component"
7id: "wireguard"
8kind: "vpn-gateway"
9provider: "default"
10docs: "https://www.wireguard.com/"
11defaults:
12  managed: false
13  tunnelType: "wireguard"
14  peerType: "site-to-site"
15  bgp: false
16  activeActive: false
17properties:
18  listenPort:
19    type: "integer"
20    default: 51820
21  transport:
22    type: "enum"
23    values: ["udp"]
24    default: "udp"
25  roaming:
26    type: "boolean"
27    default: true
28  preSharedKey:
29    type: "boolean"
30    default: false

The same page as markdown, for an agent: /catalogue/components/wireguard.md