rockylinux 安装 wireguard

dnf install -y wireguard-tools

modprobe wireguard

lsmod | grep wireguard
wg --version

firewall-cmd --permanent --add-port=51820/udp
firewall-cmd --reload

wg genkey | tee privatekey | wg pubkey > publickey

chmod 700 /etc/wireguard

vim /etc/wireguard/wg0.conf

[Interface]
Address = 10.0.0.1/24
ListenPort = 51820
PrivateKey = <服务端私钥>

[Peer]
PublicKey = <客户端公钥>
AllowedIPs = 10.0.0.2/32

firewall-cmd --permanent --add-port=51820/udp
firewall-cmd --reload

[Interface]
Address = 10.0.0.2/24
PrivateKey = <客户端私钥>
DNS = 1.1.1.1

[Peer]
PublicKey = <服务端公钥>
Endpoint = <服务器公网IP>:51820
AllowedIPs = 0.0.0.0/0, ::/0
PersistentKeepalive = 25

systemctl enable wg-quick@wg0
systemctl status wg-quick@wg0