WireGuard组网

1、WireGuard下载

2、wg-easy管理面板

采用 Docker Compose 部署

▶

docker-compose.yml

volumes:
  etc_wireguard:

services:
  wg-easy:
    environment:
      - LANG=chs #中文简体
      - WG_HOST=www.google.com #域名或公网IP
      - PASSWORD_HASH='$2a$12$XN1Mvww6pn3N2jGc6hyMtupgYAVJPrIBF1MVgoB6y3HuKhoeZcuzC' #docker run -it ghcr.io/wg-easy/wg-easy wgpw YOUR_PASSWORD生成web页面登陆密码
      - PORT=51821  #Web页面登陆端口
      - WG_PORT=51820
      - WG_DEFAULT_ADDRESS=10.8.0.x #客户端IP地址范围
      - WG_DEFAULT_DNS=223.5.5.5 #公共DNS
      - WG_ALLOWED_IPS=192.168.15.0/24, 10.8.1.0/24 #客户端允许使通过的IP
      - WG_PERSISTENT_KEEPALIVE=25 #定期心跳检测
      - UI_TRAFFIC_STATS=true #在 Web UI 中启用详细的RX/TX客户端统计信息

    image: ghcr.io/wg-easy/wg-easy
    container_name: wg-easy
    volumes:
      - /home/koicc/wireguard:/etc/wireguard
    ports:
      - "51820:51820/udp"
      - "51821:51821/tcp"
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1

3、群晖使用WireGuard客户的需要注意的地方

1. 删除配置文件中DNS = 223.5.5.5一行，因为群晖缺少对应的功能。
2. 添加定期心跳PersistentKeepalive不然偶尔会失联
3. 启动wg-quick up wg0
4. 查看连接状态wg show wg0
5. 关闭wg-quick down wg0

参考

https://blog.suzuhafan.com/synology/synology-920-install-wireguard-on-dsm7.html