Wireguard preferred method.

Forssux

Member
Mar 27, 2022
45
3
8
Hi there,

I'm new to Proxmox and have it running (Virtual Environment 7.1-11)
I want to install Wireguard but didn't found anything that compares the 5 methods that I'm now aware of.
-on host
-in VM
-In LXC
-In Docker in LXC
-turnkey solution

The differences that I would like to know is performance impact,safety and Maintenance impact.
I choose the turnkey implementation as it has already a template in Proxmox.

I followed the small guide here https://github.com/turnkeylinux-apps/wireguard/blob/master/docs/setup.rst
It seems however that whenever I change the port in the /etc/wireguard/wg0.conf it got changed wright back to the initial one.

In the last section they speak of...
1.Choose client profile in the inithooks
But I can't seem to find it, so I copied text from /etc/wireguard/clients/guyf.conf
to /etc/wireguard/wg0.conf but that got erased to.
So can somebody explain to me the final steps to get it working

Thanks in advance
Guy
 

Forssux

Member
Mar 27, 2022
45
3
8
I got it working..
so I configuered 2 clients on the server with
Bash:
wireguard-addclient

and then copied the content into the /etc/wireguard/wg0.conf
and then copied the clients to the smartphones

and then I changed firewal port on the router of the ISP
and then I did a portforward to the wireguard container 192.168.1.254 in my main router
It works but is noticably slower than my real hardware machine ...NOT good enough for video streaming of security cameras
 
  • Like
Reactions: cobmojo

liamlows

Member
Jan 9, 2020
35
4
13
Sorry to revive this topic but I was curious if anyone had opinions on running Wireguard in an LXC vs. VM? Planning to install on a new node this weekend and i have always installed as an unprivileged LXC. I had someone the other day mentioning that due to it being internet facing a VM may be safer with better isolation. However, with wireguard being really well built and also running unprivileged on the host, is it really neccesary to use a VM?

Curious to hear people's replies!
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get your own in 60 seconds.

Buy now!