WireGuard

Source: zakaria - Published on 2022-02-15 and updated on 2025-11-20 Note: This guide is severely out of date. The author recommends using ssl-proxy instead of relayd due to changes in the Tailscale protocol regarding web-sockets. In this post I’ll detail the steps I took to install and configure headscale, an open-source self-hostable implementation of the Tailscale control server, on OpenBSD. Code blocks prefixed with # imply that the command should be run as a privileged user/root. ...

Source: IANIX - Updated: June 28, 2022 Running WireGuard on OpenBSD is easy and pleasant. This is a minimalist howto for getting a basic server/client pair running such as in a “roadwarrior” or VPS setting. OpenBSD server setup On your existing OpenBSD server type the following as root: pkg_add wireguard-tools sysctl net.inet.ip.forwarding=1 sysctl net.inet6.ip6.forwarding=1 echo "net.inet.ip.forwarding=1" >> /etc/sysctl.conf echo "net.inet6.ip6.forwarding=1" >> /etc/sysctl.conf mkdir -p /etc/wireguard chmod 700 /etc/wireguard cd /etc/wireguard wg genkey > secret.key chmod 600 secret.key wg pubkey < secret.key > public.key Now, create /etc/wireguard/wg0.conf. It should look something like this: ...