🛡️

WireGuard: Modern VPN with Minimal Attack Surface

Medium

Free preview · 2 of 5 steps

WireGuard: VPN simplified to its essential parts

WireGuard is a VPN protocol designed for simplicity and security. The codebase is ~4,000 lines (OpenVPN: ~70,000, IPsec: ~100,000). Fewer lines means smaller attack surface and easier auditing.

Key design choices: fixed, modern cryptographic primitives (no cipher negotiation), public key identity (no certificates or CA), UDP transport (handles roaming), and silence on unauthenticated packets (invisible to port scanners).

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step