WireGuard

Spec sheet

What it does

WireGuard is a VPN that securely encapsulates IP packets over UDP.Read 11 Oct 2026 · wireguard.com

Purpose

WireGuard is a fast, modern VPN that securely encapsulates IP packets over UDP.Read 11 Oct 2026 · wireguard.com

Platforms

The project lists Windows, macOS, BSD, iOS, and Android as supported cross-platform targets, and provides Linux installation instructions.Read 11 Oct 2026 · wireguard.com

Free plan

YesRead 22 Sep 2026 · wireguard.com

Integrations

The project describes using WireGuard with Docker network namespaces and lists packages or installation instructions for many Linux distributions and BSD systems.Read 11 Oct 2026 · wireguard.com

Support

The project recommends its #wireguard IRC channel for setup and usage help, and directs development discussion to its mailing list.Read 11 Oct 2026 · wireguard.com

License

The kernel components are GPLv2; other project components use MIT, BSD, Apache 2.0, or GPL depending on context.Read 11 Oct 2026 · wireguard.com

Access model

vpnRead 22 Sep 2026 · wireguard.com

Admin control level

basicRead 22 Sep 2026 · wireguard.com

Configuration

Peers authenticate with public keys, and WireGuard handles the rest of the connection transparently.Read 11 Oct 2026 · wireguard.com

Container use

A WireGuard interface can be moved into a Docker container's network namespace so the tunnel is the container's only network interface.Read 11 Oct 2026 · wireguard.com

Containers

A WireGuard interface can be moved into a Docker container’s network namespace so the container can use the tunnel as its only network interface.Read 11 Oct 2026 · wireguard.com

Cryptography

The protocol uses Noise_IK, Curve25519, ChaCha20-Poly1305, BLAKE2s, SipHash24, and HKDF, and supports an optional pre-shared key.Read 11 Oct 2026 · wireguard.com

Denial-of-service mitigation

The first handshake message is authenticated before the server allocates state, and the protocol describes cookie-based mitigation when the server is under load.Read 11 Oct 2026 · wireguard.com

Installation options

The installation page provides Windows, macOS, iOS, Android, and numerous Linux and BSD installation options, with source compilation available for unlisted distributions.Read 11 Oct 2026 · wireguard.com

Key security

The protocol periodically establishes rotating session keys to provide perfect forward secrecy.Read 11 Oct 2026 · wireguard.com

Licensing

The kernel components are GPLv2, while other project components use MIT, BSD, Apache 2.0, or GPL depending on context.Read 11 Oct 2026 · wireguard.com

Limit: obfuscation

WireGuard does not focus on obfuscation and says that should happen at a layer above the protocol.Read 11 Oct 2026 · wireguard.com

Limit: post-quantum

WireGuard is not post-quantum secure by default, though its pre-shared-key parameter can add a layer of post-quantum secrecy.Read 11 Oct 2026 · wireguard.com

Limit: transport

WireGuard does not support tunneling over TCP; the site says transforming its UDP packets to TCP is the job of an upper layer.Read 11 Oct 2026 · wireguard.com

Performance and design

The project describes WireGuard as a fast, simple VPN designed for uses ranging from embedded interfaces to supercomputers.Read 11 Oct 2026 · wireguard.com

Roaming

WireGuard supports IP roaming: peers update their endpoint based on authenticated traffic from the most recent endpoint.Read 11 Oct 2026 · wireguard.com

Routing

Its cryptokey routing associates peer public keys with allowed tunnel IP addresses, which serve as routing and access-control rules.Read 11 Oct 2026 · wireguard.com

Security review

The project says its cryptographic choices have been reviewed by cryptographers and its small implementation is designed to be auditable.Read 11 Oct 2026 · wireguard.com

Supported platforms

The project lists Windows, macOS, BSD, iOS, and Android as cross-platform targets, and its installation page provides Linux distribution instructions.Read 11 Oct 2026 · wireguard.com

Tools

The included wg utility configures interfaces and peers, while wg-quick can automate routine interface setup and teardown.Read 11 Oct 2026 · wireguard.com

Where Specifiction places it

• Virtual Private Network Software#36 of 547.3
• Business VPN Software#75 of 947.4
• Vpn Client#21 of 257.3