--- title: Cloud description: published: true date: 2019-12-07T11:07:07.334Z tags: --- # Header ## Oracle Cloud Tier: monzi ### Create Instance #### Assign Public Ip Compute > Instances > Instance > DetailsAttached > VNICs > VNIC Details ![cloud_wireguard_ip.png](/cloud_wireguard_ip.png) ### Open Port from extern Networking > Virtual Cloud Networks >Virtual Cloud Network Details > Network Security Groups ![cloud_wireguard_ports.png](/cloud_wireguard_ports.png) Networking > Virtual Cloud Networks >Virtual Cloud Network Details > Security Lists ### Wireguard Server #### Install ``` sudo add-apt-repository ppa:wireguard/wireguard sudo apt-get install wireguard # Activate kernel module sudo modprobe wireguard ``` #### Enable NAT ``` cat << EOF >> /etc/sysctl.conf net.ipv4.ip_forward=1 EOF sudo sysctl -p ``` #### Generate Keys ``` cd /etc/wireguard umask 077 wg genkey | sudo tee privatekey | wg pubkey | sudo tee publickey sudo vim /etc/wireguard/wg0.conf ``` Content: ``` [Interface] PrivateKey = Address = 10.50.0.1/24 SaveConfig = false PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o ens3 -j MASQUERADE; PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -D FORWARD -o wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o ens3 -j MASQUERADE; ListenPort = 54541 ``` #### Start Server ``` # Start Server sudo wg-quick up wg0 # Enable Server as Servuce sudo systemctl enable wg-quick@wg0 ```