Wireguard
App in the BluixApps catalog
What it is
WireGuard is a modern VPN protocol and implementation — drastically simpler than IPsec / OpenVPN, faster, more auditable. Now in mainline Linux kernel. The deployment here is WireGuard server with web UI (wg-easy) for managing peer configurations.
For self-hosters needing a VPN that's simple to deploy and fast, WireGuard is the modern default.
What it's for
- Personal VPN — encrypted internet access from anywhere
- Site-to-site VPN — connect branch offices / data centers
- Remote work VPN — secure access to internal resources
- Bypass geoblocks — egress traffic from VPN endpoint
- Privacy tunnel — encrypt all traffic from untrusted networks
Who it's for
- Self-hosters running personal VPN for travel
- Small businesses providing employee remote access
- Privacy-conscious users avoiding ISP traffic logging
- DevOps teams building secure inter-service VPN
- Remote workers accessing on-prem resources
Why teams pick WireGuard over alternatives
- GPLv2 — fully open
- Modern crypto — ChaCha20-Poly1305, Curve25519
- Tiny codebase — <4000 lines of code (vs IPsec's 100k+)
- Kernel-native — in mainline Linux kernel
- Fast — faster throughput than OpenVPN / IPsec
- Simple config — public/private keypair model
Integrations
- Clients — Linux, macOS, Windows, iOS, Android, OpenWrt, official native
- Web UI — wg-easy for visual peer management
- Mobile apps — official WireGuard apps with QR code config
- Identity — public/private keys (no usernames/passwords)
- DNS — configurable per-tunnel DNS
- Routing — full or split tunnel
- Tools — wg-quick CLI for easy config
Notable users & community
- WireGuard is in mainline Linux + standard for VPN in 2024
- Used by Mullvad VPN, NordVPN, ProtonVPN as primary protocol
- Backed by Jason A. Donenfeld + WireGuard LLC
- Adopted by virtually every modern VPN provider
- Standard self-hosted VPN tool
Tips & operations
- Persistent state — keys + peer configs critical to backup
- Firewall rules — VPN traffic + NAT setup carefully
- DNS leak prevention — set DNS per-tunnel
- Routing decisions — full tunnel = all traffic, split = some
- Peer config QR codes — share via QR for mobile setup
- Per-peer access control — different peers see different services
What we ship in BluixApps
- Docker compose: wg-easy (WireGuard + web UI)
- Pinned
ghcr.io/wg-easy/wg-easy:14(release-tagged) - HTTPS via Let's Encrypt for admin UI
- Admin password via env config
- Persistent volume for keys + peer configs
- QR code generation for mobile setup
- Backup hook covers
/etc/wireguard(CRITICAL — VPN config)
Get this app — pick a BluixApps plan
Same catalog. Scaling tenant isolation, white-label and support tier.
| Tier | Tenants | Catalog | Support | White-label | Monthly | |
|---|---|---|---|---|---|---|
| Stacks | 1 | 19 curated stacks | Standard | — | $19/mo | DetailDeploy |
| Starter | 10 | Full catalog | Standard | +$15–25/mo | $49/mo | DetailDeploy |
| Pro | 25 | Full catalog | Priority bugfix | +$15–25/mo | $149/mo | DetailDeploy |
| Growth | 100 | Full catalog | Priority bugfix | +$15–25/mo | $349/mo | DetailDeploy |
| Scale | 500 | Full catalog | 7-day window | +$15–25/mo | $799/mo | DetailDeploy |
| Enterprise | Unlimited | Full catalog | Priority 7-day | Bundled | $1,499/mo | DetailDeploy |