{"id":1146,"date":"2026-01-01T19:16:45","date_gmt":"2026-01-01T11:16:45","guid":{"rendered":"https:\/\/www.52runoob.com\/?p=1146"},"modified":"2026-01-01T19:16:45","modified_gmt":"2026-01-01T11:16:45","slug":"%e7%bb%84%e7%bd%91%e7%a5%9e%e5%99%a8wireguard%e5%ae%89%e8%a3%85%e4%b8%8e%e9%85%8d%e7%bd%ae%e6%95%99%e7%a8%8b%e8%b6%85%e8%af%a6%e7%bb%86","status":"publish","type":"post","link":"https:\/\/www.52runoob.com\/index.php\/2026\/01\/01\/%e7%bb%84%e7%bd%91%e7%a5%9e%e5%99%a8wireguard%e5%ae%89%e8%a3%85%e4%b8%8e%e9%85%8d%e7%bd%ae%e6%95%99%e7%a8%8b%e8%b6%85%e8%af%a6%e7%bb%86\/","title":{"rendered":"\u7ec4\u7f51\u795e\u5668wireguard\u5b89\u88c5\u4e0e\u914d\u7f6e\u6559\u7a0b(\u8d85\u8be6\u7ec6)"},"content":{"rendered":"\n

\u597d\u7684\uff0c\u6211\u7ed9\u4f60\u6574\u7406\u4e00\u4efd WireGuard \u5b89\u88c5\u4e0e\u914d\u7f6e\u6559\u7a0b<\/strong>\uff0c\u4ece\u96f6\u5f00\u59cb\uff0c\u6db5\u76d6 \u5b89\u88c5\u3001\u5bc6\u94a5\u751f\u6210\u3001\u670d\u52a1\u7aef\u914d\u7f6e\u3001\u5ba2\u6237\u7aef\u914d\u7f6e\u3001\u7f51\u7edc\u6d4b\u8bd5<\/strong>\uff0c\u9002\u7528\u4e8e Linux\uff08Ubuntu\/CentOS\uff09\u73af\u5883\uff0c\u540c\u65f6\u7ed9\u51fa Windows\/\u624b\u673a\u5ba2\u6237\u7aef\u914d\u7f6e\u65b9\u6cd5\u3002\u6559\u7a0b\u5c3d\u91cf\u8be6\u7ec6\u5230\u5b9e\u6218\u7ea7\u522b\u3002<\/p>\n\n\n\n

\n\n\n\n

WireGuard \u7ec4\u7f51\u795e\u5668\u5b89\u88c5\u4e0e\u914d\u7f6e\u6559\u7a0b\uff08\u8d85\u8be6\u7ec6\uff09<\/h1>\n\n\n\n
\n\n\n\n

1\ufe0f\u20e3 WireGuard \u7b80\u4ecb<\/h2>\n\n\n\n
    \n
  • WireGuard<\/strong> \u662f\u4e00\u6b3e\u8f7b\u91cf\u3001\u5feb\u901f\u3001\u5b89\u5168\u7684 VPN \u5de5\u5177<\/strong><\/li>\n\n\n\n
  • \u6838\u5fc3\u7279\u70b9\uff1a\n
      \n
    • \u57fa\u4e8e UDP \u534f\u8bae<\/strong>\uff0c\u901f\u5ea6\u5feb\uff0c\u5ef6\u8fdf\u4f4e<\/li>\n\n\n\n
    • \u4f7f\u7528 \u73b0\u4ee3\u52a0\u5bc6\u7b97\u6cd5\uff08ChaCha20, Poly1305\uff09<\/strong><\/li>\n\n\n\n
    • \u914d\u7f6e\u7b80\u5355\uff0c\u4e0d\u4f9d\u8d56\u590d\u6742\u8bc1\u4e66\u4f53\u7cfb<\/li>\n\n\n\n
    • \u652f\u6301 Linux\u3001Windows\u3001macOS\u3001iOS\u3001Android \u7b49\u591a\u5e73\u53f0<\/li>\n<\/ul>\n<\/li>\n\n\n\n
    • \u5178\u578b\u5e94\u7528\u573a\u666f\uff1a\n
        \n
      • \u5bb6\u5ead\u6216\u516c\u53f8\u5185\u7f51\u7ec4\u7f51<\/li>\n\n\n\n
      • \u7a7f\u900f NAT \/ \u516c\u7f51\u8bbf\u95ee\u5185\u7f51<\/li>\n\n\n\n
      • \u5b89\u5168\u8fdc\u7a0b\u529e\u516c<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
        \n\n\n\n

        2\ufe0f\u20e3 \u73af\u5883\u51c6\u5907<\/h2>\n\n\n\n
          \n
        • \u670d\u52a1\u5668\u7aef<\/strong>\uff1a\u516c\u7f51 IP \u7684 Linux \u670d\u52a1\u5668\uff08Ubuntu 22.04 \/ CentOS 7\/8\uff09<\/li>\n\n\n\n
        • \u5ba2\u6237\u7aef<\/strong>\uff1aWindows \/ Linux \/ macOS \/ Android \/ iOS<\/li>\n<\/ul>\n\n\n\n
          \n\n\n\n

          3\ufe0f\u20e3 \u5b89\u88c5 WireGuard<\/h2>\n\n\n\n

          3.1 Ubuntu\/Debian<\/h3>\n\n\n
          \n# \u66f4\u65b0\u8f6f\u4ef6\u6e90\nsudo apt update\n\n# \u5b89\u88c5 WireGuard\nsudo apt install wireguard -y\n\n# \u67e5\u770b\u7248\u672c\nwg --version\n\n<\/pre><\/div>\n\n\n
          3.2 CentOS 7\/8<\/h3>\n\n\n
          \n# \u5b89\u88c5 EPEL \u4ed3\u5e93\nsudo yum install epel-release -y\n\n# \u5b89\u88c5 WireGuard\nsudo yum install wireguard-tools -y\n\n# \u67e5\u770b\u7248\u672c\nwg --version\n\n<\/pre><\/div>\n\n\n
          \n\n\n\n
          4\ufe0f\u20e3 \u751f\u6210\u5bc6\u94a5\u5bf9<\/h2>\n\n\n\n
          WireGuard \u4f7f\u7528 \u516c\u94a5\/\u79c1\u94a5<\/strong>\u673a\u5236\uff0c\u6bcf\u53f0\u8282\u70b9\u90fd\u9700\u8981\u4e00\u5bf9\u5bc6\u94a5\u3002<\/p>\n\n\n
          \n# \u521b\u5efa\u76ee\u5f55\u5b58\u653e\u5bc6\u94a5\nmkdir -p \/etc\/wireguard\/keys\ncd \/etc\/wireguard\/keys\n\n# \u751f\u6210\u79c1\u94a5\nwg genkey > server_private.key\n\n# \u6839\u636e\u79c1\u94a5\u751f\u6210\u516c\u94a5\nwg pubkey &lt; server_private.key > server_public.key\n\n# \u67e5\u770b\u5bc6\u94a5\ncat server_private.key\ncat server_public.key\n\n<\/pre><\/div>\n\n\n
          \n
          \u5ba2\u6237\u7aef\u4e5f\u540c\u6837\u751f\u6210\u5bc6\u94a5\u5bf9\uff0c\u53ea\u662f\u6362\u540d\u5b57\u5373\u53ef\uff0c\u4f8b\u5982 client_private.key<\/code> \u548c client_public.key<\/code><\/p>\n<\/blockquote>\n\n\n\n
          \n\n\n\n
          5\ufe0f\u20e3 \u670d\u52a1\u5668\u7aef\u914d\u7f6e<\/h2>\n\n\n\n
          5.1 \u521b\u5efa WireGuard \u914d\u7f6e\u6587\u4ef6<\/h3>\n\n\n
          \nsudo nano \/etc\/wireguard\/wg0.conf\n\n<\/pre><\/div>\n\n\n
          \u793a\u4f8b\u5185\u5bb9\uff1a<\/p>\n\n\n
          \n[Interface]\n# \u670d\u52a1\u5668\u672c\u673a\u79c1\u94a5\nPrivateKey = &lt;\u670d\u52a1\u5668\u79c1\u94a5>\n# WireGuard \u76d1\u542c\u7aef\u53e3\nListenPort = 51820\n# VPN \u7f51\u6bb5\nAddress = 10.0.0.1\/24\n# \u5141\u8bb8\u670d\u52a1\u5668\u5c06 VPN \u6d41\u91cf\u8f6c\u53d1\u5230\u516c\u7f51\nPostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE\nPostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE\n\n<\/pre><\/div>\n\n\n