Projet

Général

Profil

Wireguard » Historique » Version 9

sacha, 07/10/2018 11:40

1 1 sacha
# Wireguard
2
3 7 sacha
Le VPN Kiss, utilisant les dernières règles de l'art, construit pour être audité & performant ! au revoir IPSec & OpenVPN ?
4 1 sacha
5
## Installation
6
7
https://www.wireguard.com/install/
8
9
## Configuration
10
11
### Serveur
12
13
~~~
14
umask 077
15
wg genkey > /etc/wireguard/private
16
wg genkey | tee /etc/wireguard/private | wg pubkey > /etc/wireguard/publickey
17
wg set wg0 private-key /etc/wireguard/private
18
ip link set wg0 up
19
20
cat << EOF > /etc/wireguard/wireguard.conf
21
[Interface]
22
ListenPort = 50000 
23
PrivateKey = `cat /etc/wireguard/private`
24
25
[Peer]
26
PublicKey = Va0X1zOpRc9471Aa3DEUUy7UkAv5aq5SojtIPqOSqwg=
27
AllowedIPs = 10.33.33.0/24
28
Endpoint = 185.233.100.19:50000
29
EOF
30
31
~~~
32
33
### Client
34
35
~~~
36
umask 077
37
wg genkey > /etc/wireguard/private
38
wg genkey | tee /etc/wireguard/private | wg pubkey > /etc/wireguard/publickey
39
wg set wg0 private-key /etc/wireguard/private
40
ip link set wg0 up
41
~~~
42 2 sacha
43 4 sacha
### 1er test: @Sacha's Home (Fibre Bouygues) --> @Hypnos (VM Aquilenet)
44 3 sacha
45 2 sacha
~~~
46
47
root@hypnos:/etc/wireguard# iperf3 -s
48
-----------------------------------------------------------
49
Server listening on 5201
50
-----------------------------------------------------------
51
Accepted connection from 10.33.33.2, port 60038
52
[  5] local 10.33.33.1 port 5201 connected to 10.33.33.2 port 60040
53
[ ID] Interval           Transfer     Bandwidth
54
[  5]   0.00-1.00   sec  15.1 MBytes   127 Mbits/sec                  
55
[  5]   1.00-2.00   sec  19.9 MBytes   167 Mbits/sec                  
56
[  5]   2.00-3.00   sec  20.1 MBytes   169 Mbits/sec                  
57
[  5]   3.00-4.00   sec  20.1 MBytes   169 Mbits/sec                  
58
[  5]   4.00-5.00   sec  19.7 MBytes   166 Mbits/sec                  
59
[  5]   5.00-6.00   sec  20.0 MBytes   168 Mbits/sec                  
60
[  5]   6.00-7.00   sec  20.2 MBytes   169 Mbits/sec                  
61
[  5]   7.00-8.00   sec  20.2 MBytes   170 Mbits/sec                  
62
[  5]   8.00-9.00   sec  20.1 MBytes   169 Mbits/sec                  
63
[  5]   9.00-10.00  sec  20.2 MBytes   169 Mbits/sec                  
64
[  5]  10.00-10.03  sec   566 KBytes   165 Mbits/sec                  
65
- - - - - - - - - - - - - - - - - - - - - - - - -
66
[ ID] Interval           Transfer     Bandwidth
67
[  5]   0.00-10.03  sec  0.00 Bytes  0.00 bits/sec                  sender
68
[  5]   0.00-10.03  sec   196 MBytes   164 Mbits/sec                  receiver
69
-----------------------------------------------------------
70
Server listening on 5201
71
-----------------------------------------------------------
72
~~~
73
74
75
~~~
76
root@hypnos:/etc/wireguard# wg
77
interface: wg0
78
  public key: Va0X1zOpRc9471Aa3DEUUy7UkAv5aq5SojtIPqOSqwg=
79
  private key: (hidden)
80
  listening port: 50000
81
82
peer: VEfmgnq/aXPX3qBB7Q2fgxAawQdfUYZDRKEQSPC8tnA=
83
  endpoint: 5.51.0.155:3418
84
  allowed ips: 10.33.33.0/24
85
  latest handshake: 4 minutes, 30 seconds ago
86
  transfer: 208.75 MiB received, 6.68 MiB sent
87
~~~
88 5 sacha
89
## InstallDebian sur Apu2
90
91
https://blog.pgeiser.com/posts/2017/04/installing-debian-stretch-on-a-machine-without-a-graphic-card/
92 6 sacha
93
aptitude install dhcpd tmux whois aptitude dnsutils curl htop
94 8 sacha
95
96
~~~
97
#!/bin/bash
98
gw=`ip  route | awk '/default/ { print $3 }'`
99 9 sacha
sysctl -w net.ipv4.ip_forward=1
100 8 sacha
ip link add dev wg0 type wireguard
101
ip address add dev wg0 10.33.33.2/24
102
ip link set up dev wg0
103
ip route add 185.233.100.19/32 via $gw dev enp1s0
104
ip route del default
105
ip route add default dev wg0
106
wg setconf wg0 /etc/wireguard/wg0.conf
107
~~~