How to Set Up a Secure VPN with WireGuard on Ubuntu 20.04

on May 21, 2025

Introduction

Setting up a Virtual Private Network (VPN) is crucial for enhancing your digital security and privacy. WireGuard is a modern VPN protocol that offers state-of-the-art cryptography and is easier to set up compared to older counterparts. This tutorial will guide you through installing and configuring WireGuard on a Ubuntu 20.04 server.

Step 1: Installing WireGuard

First, update your system's package index: sudo apt update Then install WireGuard using the following command: sudo apt install wireguard This command installs the WireGuard software and all necessary dependencies.

Step 2: Configuring WireGuard

WireGuard works by creating a network interface on each peer, identified by a private and public key pair. Start by generating these keys: wg genkey | tee privatekey | wg pubkey > publickey Ensure to secure the access to the private key: chmod 600 privatekey Next, create and edit the WireGuard configuration file: sudo nano /etc/wireguard/wg0.conf Replace 'wg0' with your desired interface name. Add the following configuration, replacing placeholders with actual values:

[Interface]
PrivateKey = <your-private-key>
Address = 10.0.0.1/24
ListenPort = 51820
SaveConfig = true

This configuration sets the VPN interface, listening port, and IP address.

Step 3: Starting WireGuard

Enable and start the WireGuard service with the following commands: sudo systemctl enable wg-quick@wg0 sudo systemctl start wg-quick@wg0 Replace 'wg0' with the name of your WireGuard interface. You can check the status to ensure it's running properly: sudo systemctl status wg-quick@wg0

Step 4: Configuring Firewall and Forwarding

It's important to configure the firewall to allow VPN traffic. If you’re using UFW, use the following commands: sudo ufw allow 51820/udp Also, enable IP forwarding to allow traffic to flow through the VPN: echo "net.ipv4.ip_forward = 1" | sudo tee -a /etc/sysctl.conf sudo sysctl -p This updates your system's IP forwarding settings immediately.

Conclusion

You now have a functioning WireGuard VPN on your Ubuntu 20.04 server. WireGuard provides a secure and easy-to-manage VPN solution that is perfect for personal use or small businesses. Remember to regularly update your server and WireGuard to maintain security and performance.

LifeBytes Journal