Wireguard

App in the BluixApps catalog

What it is

WireGuard is a modern VPN protocol and implementation — drastically simpler than IPsec / OpenVPN, faster, more auditable. Now in mainline Linux kernel. The deployment here is WireGuard server with web UI (wg-easy) for managing peer configurations.

For self-hosters needing a VPN that's simple to deploy and fast, WireGuard is the modern default.

What it's for

  • Personal VPN — encrypted internet access from anywhere
  • Site-to-site VPN — connect branch offices / data centers
  • Remote work VPN — secure access to internal resources
  • Bypass geoblocks — egress traffic from VPN endpoint
  • Privacy tunnel — encrypt all traffic from untrusted networks

Who it's for

  • Self-hosters running personal VPN for travel
  • Small businesses providing employee remote access
  • Privacy-conscious users avoiding ISP traffic logging
  • DevOps teams building secure inter-service VPN
  • Remote workers accessing on-prem resources

Why teams pick WireGuard over alternatives

  • GPLv2 — fully open
  • Modern crypto — ChaCha20-Poly1305, Curve25519
  • Tiny codebase — <4000 lines of code (vs IPsec's 100k+)
  • Kernel-native — in mainline Linux kernel
  • Fast — faster throughput than OpenVPN / IPsec
  • Simple config — public/private keypair model

Integrations

  • Clients — Linux, macOS, Windows, iOS, Android, OpenWrt, official native
  • Web UI — wg-easy for visual peer management
  • Mobile apps — official WireGuard apps with QR code config
  • Identity — public/private keys (no usernames/passwords)
  • DNS — configurable per-tunnel DNS
  • Routing — full or split tunnel
  • Tools — wg-quick CLI for easy config

Notable users & community

  • WireGuard is in mainline Linux + standard for VPN in 2024
  • Used by Mullvad VPN, NordVPN, ProtonVPN as primary protocol
  • Backed by Jason A. Donenfeld + WireGuard LLC
  • Adopted by virtually every modern VPN provider
  • Standard self-hosted VPN tool

Tips & operations

  • Persistent state — keys + peer configs critical to backup
  • Firewall rules — VPN traffic + NAT setup carefully
  • DNS leak prevention — set DNS per-tunnel
  • Routing decisions — full tunnel = all traffic, split = some
  • Peer config QR codes — share via QR for mobile setup
  • Per-peer access control — different peers see different services

What we ship in BluixApps

  • Docker compose: wg-easy (WireGuard + web UI)
  • Pinned ghcr.io/wg-easy/wg-easy:14 (release-tagged)
  • HTTPS via Let's Encrypt for admin UI
  • Admin password via env config
  • Persistent volume for keys + peer configs
  • QR code generation for mobile setup
  • Backup hook covers /etc/wireguard (CRITICAL — VPN config)
Read this app's deep dive on bluix.app ↗

Get this app — pick a BluixApps plan

Same catalog. Scaling tenant isolation, white-label and support tier.

TierTenantsCatalogSupportWhite-labelMonthly
Stacks119 curated stacksStandard$19/moDetailDeploy
Starter10Full catalogStandard+$15–25/mo$49/moDetailDeploy
Pro25Full catalogPriority bugfix+$15–25/mo$149/moDetailDeploy
Growth100Full catalogPriority bugfix+$15–25/mo$349/moDetailDeploy
Scale500Full catalog7-day window+$15–25/mo$799/moDetailDeploy
EnterpriseUnlimitedFull catalogPriority 7-dayBundled$1,499/moDetailDeploy

Powered by WHMCompleteSolution