WireGuard Flags & Options
Modern VPN tunnel.All WireGuard pages
- wg set allowed-ips +10.0.5.0/24: add or remove one route without replacing the listwg set allowed-ips replaces a peer's whole list by default; +10.0.5.0/24 adds and -10.0.5.0/24 removes one network incrementally. Kernel routes are separate.
- wg set peer preshared-key: add a WireGuard preshared key for post-quantum resistancewg set peer KEY preshared-key FILE adds a symmetric preshared key for post-quantum resistance; generate it with wg genpsk and configure it on both peers.
- wg set wg0 peer KEY remove: remove a WireGuard peer from a running interfacewg set wg0 peer KEY remove deletes a WireGuard peer from the running interface without touching other sessions. Persist it with wg-quick save or edit wg0.conf.
- wg show wg0 dump: tab-separated WireGuard status for scripts and monitoringwg show wg0 dump prints WireGuard interface and peer status as tab-separated fields: endpoint, allowed IPs, latest handshake, transfer bytes. Script examples.