🔒
WireGuard 配置工作室
Client-Side Keys QR Export Template Wizard使用本地密钥生成和 QR 导出创建 WireGuard 配置。
🔐
100% Client-Side Key Generation
Private keys are generated using libsodium.js directly in your browser. Keys never leave your device.
🗝️ Key Pair Generator
⚠️ Never share your private key!
[Interface]
📥 Config Parser
Paste an existing .conf file to populate the form.
📝 Configuration Preview
# Configure your interface to see the output...
📱 QR Code
Generate a config to create QR code
Scan with the WireGuard mobile app to import configuration.
Interface Fields
| Field | Required | Description |
|---|---|---|
PrivateKey | Yes | Base64 private key for this peer |
Address | Yes | CIDR IP address(es), comma-separated |
ListenPort | No | UDP port to listen on (server only) |
DNS | No | DNS servers to use |
MTU | No | Maximum transmission unit (default: 1420) |
PostUp | No | Command after interface up |
PostDown | No | Command after interface down |
Peer Fields
| Field | Required | Description |
|---|---|---|
PublicKey | Yes | Base64 public key of remote peer |
PresharedKey | No | Additional symmetric key for quantum resistance |
AllowedIPs | Yes | CIDRs this peer can route (0.0.0.0/0 for all) |
Endpoint | No | host:port of remote peer (client only) |
PersistentKeepalive | No | Seconds between keepalive packets (NAT) |
Common Commands
| Command | Description |
|---|---|
wg genkey | tee private.key | wg pubkey > public.key | Generate key pair |
wg-quick up wg0 | Start interface |
wg-quick down wg0 | Stop interface |
wg show | Show interface status |
wg showconf wg0 | Dump current config |
Template Types
| Topology | Use Case |
|---|---|
Point-to-Point | Direct connection between two peers |
Hub-and-Spoke | Central server with multiple clients |
Site-to-Site | Connect two networks |
Road Warrior | Remote client with split tunneling |