What is WireGuard?
WireGuard is a new connection protocol which you can use to connect to our servers. We had pptp, l2tp, ipsec, ikev2 and openvpn protocols before - and now we added support for wireguard as well.
What should I know about WireGuard?
WireGuard is a new protocol, which development started only 4 years ago. So compared to ipsec/openvpn, which both are already 15+ years on the market, it's considered as a less secure protocol - but still much more secure than pptp or l2tp which both are considered very weak in 2019.
Does WireGuard have any advantages compared to openvpn or ipsec?
Yes, it has. Due to very small code base and simple implementation - it connects quicker than ipsec or openvpn. It also will offer you a better speed, which you should notice if your internet speed is above 100mbps.
What are private and public keys in wireguard?
WireGuard uses your private key for security and encryption mechanism. And public key is generated from private key and is used to identify you on the server side.
Your private key is used in your wireguard config and should be kept in secret only on your computer/smartphone which you use to connect. And your public key is distributed to all our servers so they could identify you as a valid customer.
What is wireguard preshared key?
It's another key you can add for an additional layer of symmetric-key cryptography to be mixed into the already existing public-key cryptography, for post-quantum resistance. Right now it can be natively generated only on linux/macOS machines with following commands:
root@ubuntu:~# wg genpsk > preshared
root@ubuntu:~# cat preshared
/Ai2y+KihB3qmybQ2sbvmmsmnJZfLJl2xI1sk+Rh+s4=
After that - just copy preshared key and add it alongside with your public key.
Does Port forwarding work with wireguard?
Yes, it does. You can add up to 5 public keys and port forwarding rule will work with everyone. However, this feature is still in testing, so if you will have some issues with it - please contact our support team.
Do you store my ip when I use Wireguard?
Wireguard protocol is still very young and not so flexible as openvpn or ipsec. So in order to get it work, we need to store your private ip address which you got on our site on each wireguard-capable server. You should take this into account if you want maximum privacy and use another protocol.
Do you have guides for wireguard?
Yes, we have guides for Windows, Linux, MacOS and Android. It's also compatible with iOS, so if you want setup it there - please contact us, we will help you to setup it there too.