homelab-wireguard-vpn

原文涵盖的主题

• Homelab WireGuard VPN
• When to Use
• How WireGuard Works
• Server Setup (Linux)
• Client Configuration
• Split Tunnel vs Full Tunnel
• Key Generation and Peer Management
• pfSense / OPNsense WireGuard

WireGuard is a fast, modern VPN protocol. It is the right choice for remote access to a home network — simpler to configure than OpenVPN and faster than most alternatives. All configuration examples show common setups. Review each command — especially the iptables forwarding rules and key file permissions — before applying them to your system, and make changes in a maintenance window. Setting up WireGuard server on a Raspberry Pi, Linux host, pfSense, or router Generating WireGuard keypairs and writing peer config files Configuring remote access from a phone or laptop to a home network Explaining split tunneling (route only home traffic) vs full tunnel (route all traffic) Troubleshooting WireGuard connections that will not come up Automating peer configuration generation for multiple clients Keep private keys out of source control. If you use this script, write key material to files with mode 600 and never log or print it. Most home internet connections have a dynamic IP. Use DDNS so your VPN endpoint stays reachable after an IP change. Generate a unique keypair per client device — never reuse keys Use split tunneling (AllowedIPs = ) for mobile Set PersistentKeepalive = 25 on all m

这里只展示节选，请以完整原文和当前要求为准。