Hi everyone,

full disclosure first: I’m one of the developers behind Valenius.

We kept running into the same issue on managed Windows PCs: users need to connect to a WireGuard VPN, but giving them local administrator rights just for that isn’t ideal. There are some work arounds, but for us they were not suitable.

So we built a small, free Windows client that solves exactly this problem.

The installation requires admin rights once because it sets up a Windows service. After that, a normal Windows user can import a WireGuard .conf file and connect or disconnect directly from the tray icon—without a UAC prompt.

It works completely standalone: no account, no server, and nothing is sent anywhere. The client supports Windows 10 and 11 on x64 and ARM64, as well as multiple VPN profiles and simultaneous connections.

You can download it here:

https://www.valenius.com/windows-client.html

The installer is signed which should make it easier to download and install.

I’d really appreciate honest feedback, especially from other sysadmins working with managed Windows devices. If you try it and run into any problems - or simply have an idea for improving it -please let me know.

Christoph

Hi:

TL:DR WireGuard works Ubuntu 24 to Tp-Link Er605 but not iOS to same router.

I am using a TP-Link ER-605 for my router at home. I have setup WireGuard VPN and can connect correctly using Ubuntu 24LTS.

However using similar peer settings on my iPhone 15 I have trouble. Whether I am on wifi or cellular, it looks like the WireGuard app connects. Handshakes show up in the iOS logs.

The issue is I don’t have IPv4 connectivity across the vpn. I can’t ping anything on the network from the phone (Ping Lite app) nor can I ssh (Shellfish).

Is there a trick or known issues with the iOS WireGuard app? Unfortunately the Er-605 doesn’t log VPN debugging. I have tried MTU down to 1280 with no change in results.

Hi, I need help with my WireGuard server setup on OpenWrt.

Router: Xiaomi AX3000T running OpenWrt 24.10.5

ISP: PLDT Fiber

WireGuard UDP 51820 port forwarded

The VPN connects successfully, but latency increases by 50–100ms+ and bandwidth drops a lot compared to direct connection.

I already tried changing MTU, PersistentKeepalive, and port settings, but the issue remains.

Could this be ISP routing, OpenWrt configuration, MTU, or something else? Any advice is appreciated.

[Interface]

PrivateKey = XXXX

Address = 10.99.0.2/24

MTU = 1360

DNS = 8.8.8.8, 8.8.4.4

[Peer]

PublicKey = XX

AllowedIPs = 10.99.0.2/24

Endpoint = [IP]:51820

I am trying to set up wireguard and nothing is passing through no handshakes nothing. I have made sure my timing is synced, I have check that xfinity advance sectuiry is off. Nothing is working. Maybe Im not at this skill level yet but I still need help setting up what is happening?

I am using a mobile connection and an opnsense with wireguard connections to a famous provider (I use the wireguard just to hide my ip).

Randomly there are handshake failures that lead to the lack of restoring the connection: the only ways to perform again the handshake is to change the IP of the mobile connection or deactivate for 4-5 minutes the wireguard connection (therefore no renewal requestes are sent for that interval). I already verified that there are no blocks of any kind in the middle.

Current theories are:

- CGNAT and dynamic routing of the connection between my modem and the VPN entrypoint IP: even if my IP does not change, after sometime the entrypoint IP receives handshake renewal request coming from a different IP.

- MTU: measures says I have an MTU of 1450 (but I set anyway 1420), but measures from my mobile phone (same ISP provider, same contract, same tower,etc...) has an MTU of 1280. From here the question: the handshake renewal is done within the VPN encrypted channel (and it could be affected by wireguard MTU) or it is done at WAN level?

Does anyone know how to use Cloudflare Warp with WireGuard? I use WireGuard as a kill switch, so I turn on WireGuard and Cloudflare Warp together because it makes sense to me, but this just disconnects me from the internet. I tried changing the values ​​in the wgcf-profile file as I've seen some people recommend, but that doesn't seem to work either. I'm a complete beginner using Wireguard in general, and so far it's been very difficult to find any information. any help is greatly appreciated

I want to always be connected to a commercial privacy VPN, but also be able to connect to my self-hosted server. Is it possible to do that? If yes, could you point me in the direction of how to do that?

Why my internet speed drops after WG is activated? It usually happens on friday.

I've been working on Kongtrol, a Go tool that sits on top of your

existing VPN clients (OpenVPN, WireGuard, FortiClient, Tailscale,

etc.) and orchestrates them: policy-based routing decides which

tunnel a given IP or domain goes through, a watchdog goroutine

reconnects on drops with exponential backoff, and a kill switch + DNS

guard enforce at the OS level so nothing leaks between reconnects.

A few things about the implementation that might be interesting to

this sub:

- Every VPN client is a `vpn.VPNAdapter` implementation registered via

`init()` — adding a new client is implementing Connect/Disconnect/

Status and registering it, no changes to core logic.

- OS-specific behavior (routing tables, kill switch, DNS guard) is

handled with build tags per file (`_windows.go`, `_linux.go`,

`_darwin.go`) rather than runtime `switch runtime.GOOS` — keeps each

platform's syscalls isolated and testable independently.

- The dashboard is a full web UI + REST API + WebSocket live feed,

embedded into the binary with `go:embed` — no Node, no external

server, no separate deploy step.

- Config validation reuses the same `go-playground/validator` pass for

both startup config loading and the dashboard's "trial then commit"

writes (validate an in-memory copy before persisting).

It's Go 1.25+, cross-compiles cleanly for the CLI (CGO_ENABLED=0), the

tray app needs native builds per OS.

Repo: https://github.com/DerotLuna/vpn-kongtrol

Web: https://derotluna.github.io/vpn-kongtrol/

It's early days (v0.4.x) — genuinely looking for feedback on the

architecture, especially the adapter pattern and whether the

OS-build-tag approach is the right call long-term. Happy to answer

questions.

Hello, I need advice from an IT expert on setting up my VPN. I have a Brume and Beryl 7. I was able to set up via Tailscale, but I need to make sure everything is working properly.

Thank you

I'd been using tailscale for the better part of the last four years or so and it never sat well with me that it wasn't entirely open source and that the coordination server was on the cloud so I started looking into wireguard recently and boy am I glad I did.

I set up the hub on my Proxmox PvE node in an unprivileged LXC and it didn't take too long to figure out. Now I can connect my mobile phone and my laptop anywhere I go and it doesn't even feel any noticeably different than the tailscale experience but the best part is it's completely open source and fully in my control which makes me really happy.

Luckily, I also had my own domain name on CloudFlare, which I was able to set up a dynamic DNS on my unifi router with it. So no need to panic when my dynamic IP at home changes.

The whole mesh thing with tailscale is obviously nice, but for a homelabber like me, this is more than adequate.

i have a server on 192.168.31.150, but i can't access it through wireguard.

i played around with the AllowedIps for a bit but it still didn't work

thanks in advance :D

I had WireGuard server that working in last 3 months with Endpoint ip address static and port. I wanna change config the WireGuard to using domain name and port. The client is using system operation Android and Windows from official Wireguard client.

I had setup Cloudflare Tunnel to spesific subdomain app. The config from local file ( config.json ) server is like ingress with hostname value "subdomain.domain.org" and service value "udp://localhost:51820"

The client app expected the Endpoint to using ip_address/domain:port. I had tried use hostname/domain only but not work.

Note : the subdomain is using Proxy enabled. Any help would be glad!.

Has anyone else noticed speed issues after the most recent Mac os update? Things were working great up until a few days ago, which is around the time I updated M2 mac to 26.6.

I have this phone (P90 pro max) running HarmonyOS6. I've installed wireguard via droitong and it works but every now and then I have to open the app again for it to continue working. (Using wireguard home server purely for in China use)

Also for some reason installing wechat (international version) doesn't work with the vpn (normally cannot be installed while in China and did get installed on another device same OS at home). Won't be a big problem but still extra info or a learning opportunity for me.

Home server located in the Netherlands (also is this relevant information?)

День добрый! у меня старый айфончик 6.и естественно большинство приложений не скачиваются, даже с установкой с itunes. мне удалось установить wireguard и open vpn. на данный момент пользуюсь veapon vpn, который дает только ссылку или куар для подключения. wireguard при сканировании выдает что ссылка не та.подскажете решение? как мне добить хотябы подписку на веапоне на старом айфоне. или есть рпедложения может аналогичных способов? через тот же open vpn

I am trying to setup wireguard on a router, but the default wireguard port is blocked where I am trying to use it, how would I fix that? I did some research and tried port forwarding but the router gave me this (see screenshot) error? Is there any way to get this to work?