Identity & Access
WireGuard
Encrypted remote access and site-to-site tunnel
About this program
Administrative interfaces never face the internet. Staff reach them through a WireGuard tunnel that authenticates with keys, not passwords.
Features
- Modern, audited cryptography in the kernel
- Peers authenticate by public key — no shared secrets
- Roaming clients reconnect without renegotiation
- Small enough to review in an afternoon
Why we chose it
It is the smallest correct answer to remote access. Other VPN stacks carry decades of configuration surface we would have to secure; WireGuard is a few hundred lines and behaves predictably.
Related programs
