WireGuard
Lightweight open-source VPN protocol and tunnel software built into the Linux kernel.
HN commenters use it for simple, reliable remote access to their home networks1234 and for self-hosted tunnels through a VPS.5678 The most common caveat is that managing peer keys by hand gets unwieldy as the number of devices grows,910 where Tailscale is easier for a full mesh.1112
Why people recommend it
Home remote access · 3
Gives secure access to home servers, files, media and LAN from anywhere.
“Then I use Wireguard to seamlessly access my home setup.”
“Set up wireguard in my router and now I've got remote access into my LAN.”
Show 1 more
“can access them anywhere via a WireGuard VPN”
Simple setup · 3
Commenters describe setup as quick and simple compared with OpenVPN, IPsec and strongSwan.
“up to 954mbps or so of Wireguard to right inside my home network. It took 2 minutes to set up.”
“Wireguard is lightweight, simple, and easy to setup/configure.”
Show 1 more
“I have now mostly switched to Wireguard for this, which is much more sane”
Self-hosted VPS tunnels · 3
Pairs with a cheap VPS for a public endpoint, an exit node or a way around CGNAT.
“Using Wireguard, you connect from a always on server in your home to your VPS.”
“I use the cloud for one thing, to run Wireguard VPN to have a public point of presence”
Show 1 more
“setting up a VPS to act as an exit node for Wireguard, my article covers most things”
Just works · 3
Commenters report stable connections they rarely need to think about.
“I use Wireguard for several site-to-site VPNs. It just works.”
“Wireguard literally just works (to a VPS).”
Show 1 more
“raw wireguard more stable (I don't have to fight the DNS issues on my mobile phones) it feels faster and is amazingly simple to set up”
Router support · 3
Runs directly on routers such as OpenWrt, so it can cover a whole LAN or work with travel hotspots.
“I have an openwrt router running wireguard.”
“Install the Wireguard packages, create a connection to your VPN of choice”
Show 1 more
“since it's just WG, it works perfectly with my GL.iNet travel hotspots”
Speed · 3
Reported as fast, with near-gigabit throughput and strong bulk performance in the kernel.
“up to 954mbps or so of Wireguard to right inside my home network. It took 2 minutes to set up.”
“raw wireguard more stable (I don't have to fight the DNS issues on my mobile phones) it feels faster and is amazingly simple to set up”
Show 1 more
“i found kernel wireguard performs better at bulk throughput”
Caveats and dissent
Mesh scaling · 3
Keys and peer entries become hard to maintain by hand beyond about ten devices.
“I initially used WireGuard, but as my home lab scaled, it became unwieldy.”
“I like Wireguard, but Tailscale is much easier to manage for full mesh and just adding personal devices.”
Show 1 more
“you can also manage this configuration yourself”
NAT issues · 1
One DIY setup at work kept hitting NAT problems on poorly configured hotel networks.
“too many random issues with NAT with our standard DIY Wireguard setup”
High-end throughput · 1
One commenter says IPsec with hardware firewalls scales better at 10G and above.
“WireGuard is comparatively quite slow performance-wise.”
Often compared with
1 moved from Tailscale to WireGuard
4 moved from WireGuard to TailscaleHeadscale6 comments mention both
1 moved from WireGuard to Headscale
1 moved from Tinc to WireGuard
Who recommends it in their own words
Threads where it came up
- Making Tailscale Faster 4 mentions
- Tailscale SSH: Investigation and remediation update 3 mentions
- Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? 3 mentions
- What I self-host 2 mentions
- Tailscale didn't stop the Hugging Face intrusion 2 mentions
- I traced my traffic through a home Tailscale exit node 2 mentions
Data: wireguard.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 41
“Using Wireguard, you connect from a always on server in your home to your VPS.”
“my WireGuard connection needs nat as it terminates on my router”
“I use plain WireGuard.”
“Then I use Wireguard to seamlessly access my home setup.”
“allow split horizon DNS that allows Wireguard tunnels to work seamlessly whether you’re on or off your home network”
“i found kernel wireguard performs better at bulk throughput”
“I like Wireguard, but Tailscale is much easier to manage for full mesh and just adding personal devices.”
“I initially used WireGuard, but as my home lab scaled, it became unwieldy.”
“can all see each other on the same Wireguard network via the VPS”
“I use the cloud for one thing, to run Wireguard VPN to have a public point of presence”
“switched to Wireguard. I find its much better”
“I have an openwrt router running wireguard.”
“all over a wireguard VPN”
“up to 954mbps or so of Wireguard to right inside my home network. It took 2 minutes to set up.”
“Wireguard is lightweight, simple, and easy to setup/configure.”
“raw wireguard more stable (I don't have to fight the DNS issues on my mobile phones) it feels faster and is amazingly simple to set up”
“I just prefer WireGuard UX.”
“Wireguard VPN”
“my own DNS server at home + wg to access it when I'm away”
“use something like WireGuard (or Tailscale) and bind only to that interface.”
“since it's just WG, it works perfectly with my GL.iNet travel hotspots”
“Set up wireguard in my router and now I've got remote access into my LAN.”
“I have now mostly switched to Wireguard for this, which is much more sane”
“I use Wireguard for several site-to-site VPNs. It just works.”
“How would it be different with plain wireguard?”
“treat things like WireGuard or ZeroTier as virtual uplinks”
“Setting up wireguard into my LAN permanently changed the way I used computers.”
“While I love wireguard”
“Friends get Wireguard QR codes, periodically we rotate them.”
“I use a Wireguard VPN to tunnel traffic to a tiny public facing Caddy server”
“too many random issues with NAT with our standard DIY Wireguard setup”
“you'd need to be on the wireguard vpn to hit them”
“I route both IPv6 and v4 back to my home network over wireguard”
“I use wireguard to access it.”
“There are lots of guide online of getting a cheap VPS and installing Wireguard on it.”
“some here use Wireguard”
“setting up a VPS to act as an exit node for Wireguard, my article covers most things”
“I also use Wireguard to have it available from outside”
“can access them anywhere via a WireGuard VPN”
“(WireGuard may already do it, dunno)”
“you can also manage this configuration yourself”