WireGuard Global Settings
Help
- 1. Endpoint Address
- The public IP address of your WireGuard server that the client will connect to. Click on Suggest button to auto detect the public IP address of your server.
- 2. DNS Servers
- The DNS servers will be set to client config.
- 3. MTU
- The MTU will be set to server and client config. By default it is
1450. You might want to adjust the MTU size if your connection (e.g PPPoE, 3G, satellite network, etc) has a low MTU. - Leave blank to omit this setting in the configs.
- 4. Persistent Keepalive
- By default, WireGuard peers remain silent while they do not need to communicate,
so peers located behind a NAT and/or firewall may be unreachable from other peers
until they reach out to other peers themselves. Adding
PersistentKeepalivecan ensure that the connection remains open. - Leave blank to omit this setting in the Client config.
- 5. Firewall Mark
- Add a matching
fwmarkon all packets going out of a WireGuard non-default-route tunnel. Default value:0xca6c - 6. Table
- Value for the
Tablesetting in the wg conf file. Default value:auto - 7. WireGuard Config File Path
- The path of your WireGuard server config file. Please make sure the parent directory exists and is writable.
- 8. Config File Permissions
- Octal file mode applied to the generated config file, which contains private keys.
Default value:
0600(owner read/write only). Leave blank to use the default. - 9. MaxMind License Key
- Your MaxMind license key, used to download the GeoLite2-City database. Create a free
account at
maxmind.comto generate one. Click Install / Update to download it locally; it also auto-updates on startup when older than 7 days. Once installed, a Location column (flag, city, country) is shown next to each peer's endpoint on the Status page.