How to Set Up WireGuard on Ubuntu 26.04
The WireGuard workflow remains the same across current Ubuntu releases: install the package, create keys, assign tunnel addresses, enable forwarding, configure NAT, and import a client profile.
Confirm the operating system
cat /etc/os-release
sudo apt update
sudo apt install wireguardKeep the configuration release-neutral
Use standard files under /etc/wireguard, a private subnet such as 10.8.0.0/24, and an explicit interface name. Avoid old tutorials that assume a particular provider.
Open the right network paths
Allow SSH before enabling UFW, then allow UDP 51820. Check the provider firewall as well as the operating-system firewall.
Validate after every change
Run sudo wg show, inspect journalctl -u wg-quick@wg0, and test one client at a time. A handshake with no browsing usually points to forwarding or NAT.
Quick checklist
- The image and package versions are recorded.
- Both firewall layers allow SSH and WireGuard.
- The interface starts after reboot.
- A client can browse through the tunnel.
This guide focuses on practical self-hosting. See the complete WireGuard server guide for the full setup. Tired of maintaining the server yourself? ZeroBlock handles the VPN infrastructure so you can connect without managing a VPS.