编辑“︁WireGuard”︁

{{NoteTA|G1=IT}}
{{Infobox software
| name = WireGuard
| logo = Logo of WireGuard.svg
| screenshot = 
| caption = The WireGuard logo
| author = Jason A. Donenfeld
| developer = Edge Security LLC.
| released = <!-- 从Wikidata注入 -->
| programming language = [[C语言]]（[[Linux]]、[[FreeBSD]]内核模块、[[NetBSD]]、[[OpenBSD]]内核模块、[[Microsoft Windows|Windows]]内核驱动）<br>[[Go語言|Go]]（用户空间实现）
| operating system = {{Plainlist|
* [[Linux]]
* [[macOS]]
* [[Android]]
* [[iOS]]
* [[Windows]]
* 其他<ref name="Install"/>
}}
| language = 
| genre = [[虛擬私人網路]]
| license = <!-- 从Wikidata注入 -->
| repo = <!-- 从Wikidata注入 -->
| website = <!-- 从Wikidata注入 -->
}}

'''WireGuard'''是一项加密[[虛擬私人網路|VPN]]协议和[[自由及开放源代码软件|自由及开源]]程序。<ref name="wireguard-site">{{cite web|url=https://www.wireguard.com/|title=WireGuard: fast, modern, secure VPN tunnel|publisher=WireGuard|url-status=live|archive-url=https://web.archive.org/web/20180428010439/https://www.wireguard.com/|archive-date=28 April 2018|access-date=2021-03-31}}</ref>旨在获得比[[IPsec]]和[[OpenVPN]]更好的性能<ref>{{Cite book| publisher = Springer| isbn = 978-3-319-93387-0| last = Vercauteren| first = Bart Preneel and Frederik| url = https://books.google.com/books?id=UKJfDwAAQBAJ&pg=PA3| title = Applied Cryptography and Network Security| access-date = 2018-08-27| archive-date = 2019-02-18| archive-url = https://web.archive.org/web/20190218102858/https://books.google.com/books?id=UKJfDwAAQBAJ&pg=PA3| dead-url = no}}</ref>，后两者都是常见的[[隧道协议]]。<ref>{{Cite book|publisher=Springer|isbn=978-3-319-93387-0|editor-last1=Preneel|editor-first1=Bart|editor-last2=Vercauteren|editor-first2=Frederik|url=https://books.google.com/books?id=UKJfDwAAQBAJ&pg=PA3|title=Applied Cryptography and Network Security|date=11 June 2018|access-date=25 June 2018|archive-url=https://web.archive.org/web/20190218102858/https://books.google.com/books?id=UKJfDwAAQBAJ&pg=PA3|archive-date=18 February 2019|url-status=live}}</ref>WireGuard协议的流量经由[[用户数据报协议|UDP]]传输。<ref name="wireguard-limitations"/>

2020年3月，该软件的Linux版本达到了稳定的生产版本，并被纳入Linux 5.6内核，并在一些[[Linux发行版]]中[[向後移植|向后移植]]到早期的Linux内核。<ref name="ARST-100" />Linux内核组件在[[GNU 通用公共许可证|GNU通用公共许可证]]（GPL）版本2下获得许可；其他实现则在GPLv2或其他自由/开源许可证下获得许可。<ref name="wireguard-site" />

== 协议 ==

WireGuard使用以下协议：<ref name="wg-protocols">{{Cite web |last=Donenfeld |first=Jason A. |title=Protocol & Cryptography - WireGuard |url=https://www.wireguard.com/protocol/ |access-date=2023-05-14 |website=www.wireguard.com |language=en |archive-date=2020-05-11 |archive-url=https://web.archive.org/web/20200511123348/https://www.wireguard.com/protocol/ |dead-url=no }}</ref>

* [[Curve25519]]用于[[密钥交换]]
* [[ChaCha20]]用于[[对称加密]]
* [[Poly1305]]用于[[消息认证码]]
* {{link-en|SipHash24|SipHash}}用于哈希表键
* [[BLAKE#BLAKE2|BLAKE2s]]用于[[加密哈希函數|加密哈希函数]]
* {{link-en|HKDF|HKDF}}用于[[密钥派生函数]]
* 仅基于UDP用于传输<ref name="wireguard-limitations">{{cite web|last1=Donenfeld|first1=Jason A.|title=Known Limitations - WireGuard|url=https://www.wireguard.com/known-limitations/|website=www.wireguard.com|access-date=1 June 2020|language=en|archive-date=2022-05-31|archive-url=https://web.archive.org/web/20220531043818/https://www.wireguard.com/known-limitations/|dead-url=no}}</ref>
* [[Base64]]编码的私钥、公钥和预共享密钥

2019年5月，[[法国国家信息与自动化研究所|INRIA]]的研究人员使用{{link-en|CryptoVerif|CryptoVerif}}{{link-en|证明辅助工具|Proof assistant}}发布了WireGuard协议的机器验证证明。<ref>{{citation|first1=Benjamin|last1=Lipp|first2=Bruno|last2=Blanchet|first3=Karthikeyan|last3=Bhargavan|title=A Mechanised Cryptographic Proof of the WireGuard Virtual Private Network Protocol|url=https://hal.inria.fr/hal-02100345|date=2019|publisher=Inria|place=Paris|series=Research Report RR-9269|page=49|type=report|id=hal-02100345|accessdate=2024-08-26|archive-date=2020-04-29|archive-url=https://web.archive.org/web/20200429213246/https://hal.inria.fr/hal-02100345/|dead-url=no}}</ref>

=== 可选的预共享对称密钥模式 ===

WireGuard支持[[预共享密钥|预共享对称密钥]]（{{langx|en|Pre-shared key}}）模式，该模式提供了一层额外的[[对称密钥算法|对称加密]]，以减轻未来量子计算的进步带来的风险。{{NoteTag|对称加密的安全性来自于密钥本身的随机性和长度，量子威胁仅提供平方根级别的加速，比如经典计算最多需要<math display="inline">O(N)</math>次计算以触及目标，使用Grover算法的量子计算仍需要<math display="inline">O(\sqrt N)</math>次计算。<ref>{{Citation|title=A fast quantum mechanical algorithm for database search|url=http://arxiv.org/abs/quant-ph/9605043|date=1996-11-19|accessdate=2025-08-21|doi=10.48550/arXiv.quant-ph/9605043|first=Lov K.|last=Grover}}</ref>所以量子计算对“对称加密”的威胁相对小得多。}}这消除了流量被存储后，未来可能被量子计算机解密的风险，因为量子计算机最终可能破解[[Curve25519]]（Wireguard中必选的基于[[非对称密钥]]的密钥交换方法）。预共享密钥“从密钥管理的角度来看通常很麻烦，而且可能更容易被盗”，但在短期内，如果对称密钥被泄露，Curve25519密钥仍能提供足够的保护。<ref>{{Cite web|last=Donenfeld|first=Jason|date=May 2, 2021|title=WireGuard: Next Generation Kernel Network Tunnel|url=https://www.wireguard.com/papers/wireguard.pdf|website=Wireguard.com|access-date=2018-08-27|archive-date=2018-03-04|archive-url=https://web.archive.org/web/20180304235745/https://www.wireguard.com/papers/wireguard.pdf|dead-url=no}}</ref><ref>{{Cite web |title=Preshared Keys {{!}} Pro Custodibus Documentation |url=https://docs.procustodibus.com/guide/endpoints/preshared-key/ |website=docs.procustodibus.com |access-date=2025-01-14 |archive-date=2025-01-14 |archive-url=https://web.archive.org/web/20250114181654/https://docs.procustodibus.com/guide/endpoints/preshared-key/ |dead-url=no }}</ref>

=== 网络 ===

WireGuard仅使用<ref name=":0">{{Cite web|last=Donenfeld|first=Jason A.|title=Known Limitations - WireGuard|url=https://www.wireguard.com/known-limitations/|access-date=2021-05-02|website=www.wireguard.com|language=en|archive-date=2022-05-31|archive-url=https://web.archive.org/web/20220531043818/https://www.wireguard.com/known-limitations/|dead-url=no}}</ref>[[用户数据报协议|UDP]]，<ref name="wireguard-site"/>这是因为TCP-over-TCP存在潜在问题。<ref name=":0"/><ref>{{cite web
| url=http://sites.inka.de/bigred/devel/tcp-tcp.html
| title=Why TCP Over TCP Is A Bad Idea
| first=Olaf
| last=Titz
| date=2001-04-23
| access-date=2015-10-17
| archive-date=2015-09-01
| archive-url=https://web.archive.org/web/20150901113742/http://sites.inka.de/bigred/devel/tcp-tcp.html
| dead-url=no
}}</ref><ref>{{cite conference
| bibcode=2005SPIE.6011..138H
| title=Understanding TCP over TCP: effects of TCP tunneling on end-to-end throughput and latency
|author1=Honda, Osamu |author2=Ohsaki, Hiroyuki |author3=Imase, Makoto |author4=Ishizuka, Mika |author5=Murayama, Junichi | s2cid=8945952
|book-title=Performance, Quality of Service, and Control of Next-Generation Communication and Sensor Networks III
| volume=6011
| date=October 2005
| doi=10.1117/12.630496
| citeseerx=10.1.1.78.5815
| editor1-last=Atiquzzaman
| editor1-first=Mohammed
| editor2-last=Balandin
| editor2-first=Sergey I
}}</ref>在基于TCP的连接上隧道化[[传输控制协议|TCP]]被称为“TCP-over-TCP”，这样做会导致传输性能急剧下降（该问题被称为“TCP熔断”，{{Langx|en|TCP Meltdown}}）：基础层遇到问题的时候会尝试进行补偿，而（被基础层承载着的）上层TCP报文则会因此过度补偿（{{Langx|en|overcompensates}}），这种过度补偿会导致延迟增加并使传输性能下降。

其默认服务器端口为UDP之51820。

WireGuard完全支持IPv6，无论是在隧道内部还是外部。它仅支持[[网络层|第3层]]的[[IPv4]]和[[IPv6]]，并且可以[[封锁 (网络)|封装]]v4-in-v6，反之亦然。<ref name="wireguard-whitepaper_section1">{{cite conference|last=Donenfeld|first=Jason A.|title=WireGuard: Next Generation Kernel Network Tunnel|url=https://www.wireguard.com/papers/wireguard.pdf|chapter=Introduction & Motivation|chapter-url=https://www.wireguard.com/papers/wireguard.pdf#section.1|url-status=live|archive-url=https://web.archive.org/web/20180304235745/https://www.wireguard.com/papers/wireguard.pdf|archive-date=4 March 2018}}</ref>

==== MTU开销 ====

WireGuard的开销细分如下：<ref name=":1">{{Cite web |last=Donenfeld |first=Jason A. |date=December 11, 2017 |title=[WireGuard] Header / MTU sizes for Wireguard |url=https://lists.zx2c4.com/pipermail/wireguard/2017-December/002201.html |access-date=2024-01-13 |archive-date=2025-01-26 |archive-url=https://web.archive.org/web/20250126175043/https://lists.zx2c4.com/pipermail/wireguard/2017-December/002201.html |dead-url=no }}</ref>

* 20字节的IPv4报头或40字节的IPv6报头
* 8字节的UDP报头
* 4字节的类型
* 4字节的密钥索引
* 8字节的随机数
* N字节的加密数据
* 16字节的身份验证标签

==== MTU操作注意事项 ====

假设传输WireGuard数据包的底层网络保持1500字节的MTU，则将所有相关对等方的WireGuard接口配置为1420字节的MTU是传输IPv6+IPv4流量的理想选择。但是，当仅承载传统的IPv4流量时，WireGuard接口的MTU可以设置为更高的1440字节。<ref name=":1" />

从操作角度和网络配置一致性来看，选择为WireGuard接口配置1420MTU是有利的。这种方法确保了一致性，并促进了将来为WireGuard对等方和接口启用IPv6的更平稳过渡。

==== 注意事项 ====

在某些情况下，例如，一个对等方位于MTU为1500字节的网络之后，而另一个对等方位于[[長期演進技術|LTE]]等无线网络之后，运营商通常会选择远低于1420字节的MTU。在这种情况下，主机的底层IP网络堆栈将对UDP封装的数据包进行[[IP分片|分片]]并发送，但隧道内的包将保持一致，并且不需要分片，因为{{Link-en|路径 MTU 发现|Path MTU Discovery|PMTUD}}将检测对等方之间的MTU（在本例中为1420字节）并在对等方之间发送固定大小的数据包。

=== 可扩展性 ===

WireGuard旨在由第三方程序和脚本进行扩展。这已被用于增强WireGuard的各种功能，包括更友好的管理界面（包括更轻松的密钥设置）、日志记录、动态防火墙更新、动态IP分配，<ref>{{Citation |title=Wireguard Dynamic IP Configuration Tool |date=2023-05-14 |url=https://github.com/WireGuard/wg-dynamic/blob/20428bc5d6923d1531bf0b2409fe3f9a5538ecd4/docs/idea.md |access-date=2023-05-14 |publisher=WireGuard |archive-date=2023-05-17 |archive-url=https://web.archive.org/web/20230517200302/https://github.com/WireGuard/wg-dynamic/blob/20428bc5d6923d1531bf0b2409fe3f9a5538ecd4/docs/idea.md |dead-url=no }}</ref>以及[[目录服务|LDAP]]集成。{{cn|date=March 2021|}}

从最小的核心代码库中排除此类复杂功能可以提高其稳定性和安全性。为了确保安全性，WireGuard限制了实现加密控件的选项，限制了[[密钥交换]]过程的选择，并将算法<ref name="wg-protocols"/> 映射到现代{{Link-en|密码基元|Cryptographic primitive}}的一小部分。如果在任何原语中发现缺陷，可以发布解决该问题的新版本。

== 反响 ==

[[Ars Technica|ArsTechnica]]的一篇评论发现，WireGuard易于设置和使用，使用了强大的加密算法，并且代码库最小，攻击面小。<ref name="ars" />

WireGuard已获得[[开放技术基金会]]的资助，<ref>{{Cite web|title=Building a more secure, accessible and resilient WireGuard VPN protocol.|url=https://www.opentech.fund/results/supported-projects/wireguard/|access-date=2022-06-20|website=www.opentech.fund|archive-date=2023-10-12|archive-url=https://web.archive.org/web/20231012044823/https://www.opentech.fund/results/supported-projects/wireguard/|dead-url=no}}</ref>并接受了[[Mullvad]]、[[Private Internet Access]]、[[IVPN]]、[[NLnet|NLnet基金会]]<ref name="wireguard_donations">{{cite web |title=Donations |url=https://www.wireguard.com/donations/ |url-status=live |archive-url=https://web.archive.org/web/20180428012457/https://www.wireguard.com/donations/ |archive-date=28 April 2018 |access-date=28 April 2018 |publisher=WireGuard}}</ref>和OVPN的捐赠。<ref>{{Cite web |date=23 March 2020 |title=OVPN donates to support WireGuard |url=https://www.ovpn.com/en/blog/ovpn-donates-to-support/ |website=OVPN |access-date=2024-08-26 |archive-date=2020-03-28 |archive-url=https://web.archive.org/web/20200328214216/https://www.ovpn.com/en/blog/ovpn-donates-to-support/ |dead-url=no }}</ref>

[[俄勒冈州]]参议员[[Ron Wyden]]已建议[[美国国家标准与技术研究院]]评估WireGuard作为现有技术的替代方案。<ref>{{cite web|url=https://www.phoronix.com/scan.php?page=news_item&px=WireGuard-Senator-Recommends|title=US Senator Recommends Open-Source WireGuard To NIST For Government VPN|publisher=[[Phoronix]]|date=30 June 2018|access-date=5 August 2018|archive-url=https://web.archive.org/web/20180805142858/https://www.phoronix.com/scan.php?page=news_item&px=WireGuard-Senator-Recommends|archive-date=5 August 2018|url-status=live}}</ref>
== 可用性 ==

=== 实现 ===

WireGuard协议的实现包括：

* Donenfeld使用C语言和Go语言编写的初始实现。<ref>{{Cite web|url=https://www.wireguard.com/#source-code|title=WireGuard: fast, modern, secure VPN tunnel|last=Donenfeld|first=Jason|date=2019-06-07|access-date=2019-06-16|archive-date=2018-04-28|archive-url=https://web.archive.org/web/20180428010439/https://www.wireguard.com/#source-code|dead-url=no}}</ref>
* [[Cloudflare]]的BoringTun，一个使用[[Rust程式語言|Rust]]语言编写的[[用户空间]]实现。<ref>{{Cite web|url=https://blog.cloudflare.com/boringtun-userspace-wireguard-rust/|title=BoringTun, a userspace WireGuard implementation in Rust|last=Krasnov|first=Vlad|date=2018-12-18|website=Cloudflare Blog|language=en-US|access-date=2019-03-29|archive-url=https://web.archive.org/web/20190404164726/https://blog.cloudflare.com/boringtun-userspace-wireguard-rust/|archive-date=4 April 2019|url-status=live}}</ref><ref>{{cite web|title=CloudFlare Launches "BoringTun" As Rust-Written WireGuard User-Space Implementation|url=https://www.phoronix.com/scan.php?page=news_item&px=CloudFlare-BoringTun-WireGuard|website=[[phoronix.com]]|access-date=29 March 2019|archive-date=2009-09-21|archive-url=https://web.archive.org/web/20090921053923/https://www.phoronix.com/scan.php?page=news_item&px=CloudFlare-BoringTun-WireGuard|dead-url=no}}</ref>
* Matt Dunwoodie为OpenBSD编写的使用C语言的实现。<ref>{{Cite web|url=https://undeadly.org/cgi?action=article;sid=20200622052207|title=WireGuard imported into OpenBSD|last=Johansson|first=Janne|date=2020-06-21|access-date=2024-08-26|archive-date=2022-05-29|archive-url=https://web.archive.org/web/20220529060042/https://undeadly.org/cgi?action=article;sid=20200622052207|dead-url=no}}</ref>
* Ryota Ozaki为NetBSD编写的使用C语言的wg(4)实现。<ref>{{Cite web|url=https://man.netbsd.org/wg.4|title=wg(4) - NetBSD Manual Pages|date=2020-08-20|access-date=2024-08-26|archive-date=2021-10-28|archive-url=https://web.archive.org/web/20211028172529/https://man.netbsd.org/wg.4|dead-url=no}}</ref>
* FreeBSD的实现是用C语言编写的，并且与OpenBSD的实现共享大部分数据路径。<ref name="FreeBSD_import" />
* 自2021年8月起，名为“wireguard-nt”的原生[[Microsoft Windows|Windows]]内核实现。<ref>{{Cite web|date=2021-08-02|title=WireGuardNT, a high-performance WireGuard implementation for the Windows kernel|url=https://lists.zx2c4.com/pipermail/wireguard/2021-August/006887.html|access-date=2024-08-26|archive-date=2022-04-23|archive-url=https://web.archive.org/web/20220423043516/https://lists.zx2c4.com/pipermail/wireguard/2021-August/006887.html|dead-url=no}}</ref>
* 支持Fritz!OS 7.39及更高版本的AVM[[Fritz!Box]]调制解调-路由器。从7.50版本开始允许站点到站点的WireGuard连接。<ref>{{Cite web|url=https://en.avm.de/news/the-latest-news-from-fritz/2022/wireguard-vpn-has-never-been-so-easy|title=WireGuard: VPN has never been so easy|access-date=2024-08-26|archive-date=2025-01-14|archive-url=https://web.archive.org/web/20250114234431/https://en.avm.de/news/the-latest-news-from-fritz/2022/wireguard-vpn-has-never-been-so-easy|dead-url=no}}</ref>

== 历史 ==

代码库的早期快照存在于2016年6月30日。<ref>{{Cite web|url=https://download.wireguard.com/monolithic-historical/|title=Index of /Monolithic-historical/|access-date=2024-08-26|archive-date=2020-01-31|archive-url=https://web.archive.org/web/20200131192522/https://download.wireguard.com/monolithic-historical/|dead-url=no}}</ref>WireGuard的四个早期采用者是VPN服务提供商[[Mullvad]]，<ref name="Mullvpn"/>AzireVPN，<ref name="Azirevpn"/>[[IVPN]]<ref>{{Cite web|url=https://www.ivpn.net/blog/introducing-wireguard-fully-automated|title=Introducing Wireguard|last=Pestell|first=Nick|date=11 December 2018|access-date=2019-09-22|archive-date=2019-01-03|archive-url=https://web.archive.org/web/20190103110629/https://www.ivpn.net/blog/introducing-wireguard-fully-automated|dead-url=no}}</ref>和cryptostorm。<ref name="cryptostorm"/>该协议标志的灵感源于Jason Donenfeld在参观[[德尔斐]]的博物馆时见到的一块希腊神话中的[[皮同|巨蟒]]石刻。<ref>{{cite web| title=How one hacker's push to secure the internet became a crucial part of Mac, Linux, and Windows operating systems |url=https://www.businessinsider.com/wireguard-jason-a-donenfeld-profile-secure-vpn-linux-mac-windows-2021-1 |date=16 Jan 2021 |archive-url= https://archive.today/20210116165445/https://www.businessinsider.com/wireguard-jason-a-donenfeld-profile-secure-vpn-linux-mac-windows-2021-1 |archive-date=16 Jan 2021 |work=[[Business Insider]]}}</ref>

2019年12月9日，Linux网络堆栈的主要维护者DavidMiller接受了WireGuard补丁到“net-next”维护者树中，以便包含在即将发布的内核中。<ref>{{Cite web|url=https://kernel.googlesource.com/pub/scm/linux/kernel/git/davem/net-next/+/e7096c131e5161fa3b8e52a650d7719d2857adfd|title=e7096c131e5161fa3b8e52a650d7719d2857adfd - pub/scm/linux/kernel/git/davem/net-next - Git at Google|website=kernel.googlesource.com|access-date=2024-08-26|archive-date=2020-05-16|archive-url=https://web.archive.org/web/20200516181005/https://kernel.googlesource.com/pub/scm/linux/kernel/git/davem/net-next/+/e7096c131e5161fa3b8e52a650d7719d2857adfd|dead-url=no}}</ref><ref>{{Cite web|url=https://lkml.org/lkml/2019/12/8/257|title=LKML: David Miller: Re: [PATCH net-next v2] net: WireGuard secure network tunnel|website=lkml.org|access-date=2024-08-26|archive-date=2019-12-09|archive-url=https://web.archive.org/web/20191209101652/https://lkml.org/lkml/2019/12/8/257|dead-url=no}}</ref><ref>{{Cite web|url=https://lists.zx2c4.com/pipermail/wireguard/2019-December/004704.html|archive-url=https://web.archive.org/web/20200109120322/https://lists.zx2c4.com/pipermail/wireguard/2019-December/004704.html|url-status=dead|archive-date=9 January 2020|title=[ANNOUNCE] WireGuard merged to net-next, on its way to Linux 5.6|date=9 January 2020}}</ref>

2020年1月28日，[[林纳斯·托瓦兹|Linus Torvalds]]合并了David Miller的net-next树，WireGuard进入了mainline Linux内核树。<ref>{{cite web|last1=Torvalds|first1=Linus|title=index : kernel/git/torvalds/linux.git|url=https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bd2463ac7d7ec51d432f23bf0e893fb371a908cd|website=Linux kernel source tree|publisher=Kernel.org|access-date=2 February 2020|archive-date=2020-05-16|archive-url=https://web.archive.org/web/20200516181023/https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bd2463ac7d7ec51d432f23bf0e893fb371a908cd|dead-url=no}}</ref>

2020年3月20日，[[Debian]]开发人员在其Debian 11版本（测试版）的内核配置中启用了WireGuard的模块构建选项。<ref>{{cite web|url=https://salsa.debian.org/kernel-team/linux/-/commit/9d60411cee4c646fe5006dcd57a1709d0377aaa6|title=drivers/net: Enable WIREGUARD as module|date=21 March 2020|access-date=2024-08-26|archive-date=2020-03-21|archive-url=https://web.archive.org/web/20200321165422/https://salsa.debian.org/kernel-team/linux/-/commit/9d60411cee4c646fe5006dcd57a1709d0377aaa6|dead-url=no}}</ref>

2020年3月29日，WireGuard被纳入Linux 5.6版本树。Windows版本的软件仍处于测试阶段。<ref name="ARST-100"/>

2020年3月30日，[[Android操作系統|Android]]开发人员在其通用内核映像中添加了对WireGuard的原生内核支持。<ref>{{cite web|url=https://android.googlesource.com/kernel/common/+/99761f1eac33d14a4b1613ae4b7076f41cb2df94%5E%21|title=ANDROID: GKI: enable CONFIG_WIREGUARD|access-date=2024-08-26|archive-date=2020-04-03|archive-url=https://web.archive.org/web/20200403164948/https://android.googlesource.com/kernel/common/+/99761f1eac33d14a4b1613ae4b7076f41cb2df94%5E%21/|dead-url=no}}</ref>

2020年4月22日，[[NetworkManager]]开发人员BeniaminoGalvani在[[GNOME]]中合并了对WireGuard的[[GUI]]支持。<ref>{{cite web|title=merge branch 'bg/wireguard' (d321d0df) · Commits · GNOME / network-manager-applet|url=https://gitlab.gnome.org/GNOME/network-manager-applet/-/commit/d321d0dffa4fd872f7b39b8ca108f377cd80a12d|website=gitlab.gnome.org|date=22 April 2020|access-date=30 May 2020|language=en|archive-date=2022-06-14|archive-url=https://web.archive.org/web/20220614204220/https://gitlab.gnome.org/GNOME/network-manager-applet/-/commit/d321d0dffa4fd872f7b39b8ca108f377cd80a12d|dead-url=no}}</ref>

2020年5月12日，Matt Dunwoodie提出了在[[OpenBSD]]中对WireGuard的原生内核支持的补丁。<ref>{{cite web|url=https://lists.zx2c4.com/pipermail/wireguard/2020-May/005427.html|title=WireGuard for OpenBSD Kernel Patches Posted|date=12 May 2020|access-date=2024-08-26|archive-date=2022-09-15|archive-url=https://web.archive.org/web/20220915072151/https://lists.zx2c4.com/pipermail/wireguard/2020-May/005427.html|dead-url=no}}</ref>

2020年6月22日，在MattDunwoodie和Jason A. Donenfeld的努力下，WireGuard支持被导入OpenBSD。<ref>{{cite web|url=https://marc.info/?l=openbsd-cvs&m=159274150512676|title=add wg(4), an in kernel driver for WireGuard vpn communication|access-date=2024-08-26|archive-date=2020-06-22|archive-url=https://web.archive.org/web/20200622202121/https://marc.info/?l=openbsd-cvs&m=159274150512676|dead-url=no}}</ref>

2020年11月23日，Jason A. Donenfeld发布了[[Microsoft Windows|Windows]]软件包的更新，改进了安装、稳定性、[[ARM架構|ARM]]支持和[[企业级软件|企业]]功能。<ref>{{cite web|url=https://lists.zx2c4.com/pipermail/wireguard/2020-November/006075.html|title=[ANNOUNCE] WireGuard for Windows 0.3: ARM support, enterprise features, & more|date=23 November 2020|access-date=2024-08-26|archive-date=2021-04-10|archive-url=https://web.archive.org/web/20210410145608/https://lists.zx2c4.com/pipermail/wireguard/2020-November/006075.html|dead-url=no}}</ref>

2020年11月29日，WireGuard支持被导入[[FreeBSD]]13内核。<ref name="FreeBSD_import">{{cite web|url=https://svnweb.freebsd.org/base?view=revision&revision=368163|title=Import kernel WireGuard support|access-date=2024-08-26|archive-date=2022-04-30|archive-url=https://web.archive.org/web/20220430142029/https://svnweb.freebsd.org/base?view=revision&revision=368163|dead-url=no}}</ref>

2021年1月19日，在[[pfSense]]社区版 (CE)2.5.0开发快照中添加了对WireGuard的预览支持。<ref>{{cite web|url=https://www.netgate.com/blog/wireguard-for-pfsense-software.html|title=WireGuard for pfSense Software|access-date=2024-08-26|archive-date=2021-05-17|archive-url=https://web.archive.org/web/20210517121320/https://www.netgate.com/blog/wireguard-for-pfsense-software.html|dead-url=no}}</ref>

2021年3月，在FreeBSDWireGuard中紧急代码清理无法快速完成之后，内核模式WireGuard支持从仍在测试中的FreeBSD13.0中删除。<ref>{{cite news|url=https://www.theregister.com/2021/03/23/freebsd_130_no_wireguard/|title=FreeBSD 13.0 to ship without WireGuard support as dev steps in to fix 'grave issues' with initial implementation|first=Tim|last=Anderson|date=2021-03-23|access-date=2021-03-31|work=[[The Register]]|publisher=[[Situation Publishing]]|archive-date=2022-06-14|archive-url=https://web.archive.org/web/20220614204216/https://www.theregister.com/2021/03/23/freebsd_130_no_wireguard/|dead-url=no}}</ref> 基于FreeBSD的pfSense社区版 (CE)2.5.0和pfSense Plus 21.02也删除了基于内核的WireGuard。<ref name="netgate-removed">{{Cite web|last=Thompson|first=Jim|date=2021-03-18|title=WireGuard Removed from pfSense® CE and pfSense® Plus Software|url=https://www.netgate.com/blog/wireguard-removed-from-pfsense-ce-and-pfsense-plus-software.html|access-date=2021-03-20|website=Netgate blog|language=en|publisher=Rubicon Communications|archive-date=2021-06-18|archive-url=https://web.archive.org/web/20210618064434/https://www.netgate.com/blog/wireguard-removed-from-pfsense-ce-and-pfsense-plus-software.html|dead-url=no}}</ref>

2021年5月，WireGuard支持作为pfSense社区成员Christian McDonald编写的实验包重新引入pfSense CE和pfSense Plus开发快照中。pfSense的WireGuard软件包包含了最初由Netgate赞助的Jason A. Donenfeld正在进行的内核模式WireGuard开发工作。<ref>{{Cite web|last=Long|first=Scott|date=2021-05-05|title=pfSense: WireGuard returns as an Experimental Package|url=https://www.netgate.com/blog/pfsense-wireguard-returns-as-an-experimental-package.html|access-date=2021-06-09|website=Netgate - Secure networks start here.|language=en|archive-date=2021-06-18|archive-url=https://web.archive.org/web/20210618064631/https://www.netgate.com/blog/pfsense-wireguard-returns-as-an-experimental-package.html|dead-url=no}}</ref><ref>{{Cite web|last=Paxson|first=Audian|date=2021-01-19|title=WireGuard for pfSense Software|url=https://www.netgate.com/blog/wireguard-for-pfsense-software.html|access-date=2021-06-09|website=Netgate - Secure networks start here.|language=en|archive-date=2021-05-17|archive-url=https://web.archive.org/web/20210517121320/https://www.netgate.com/blog/wireguard-for-pfsense-software.html|dead-url=no}}</ref><ref>{{Cite web|title=wireguard-freebsd - WireGuard implementation for the FreeBSD kernel|url=https://git.zx2c4.com/wireguard-freebsd/|access-date=2021-06-09|website=git.zx2c4.com|archive-date=2022-10-24|archive-url=https://web.archive.org/web/20221024063505/https://git.zx2c4.com/wireguard-freebsd|dead-url=no}}</ref>

2021年6月，pfSense CE 2.5.2和pfSense Plus 21.05的官方软件包存储库都包含了WireGuard软件包。<ref>{{Cite web|last=Pingle|first=Jim|date=2021-06-02|title=pfSense Plus 21.05-RELEASE Now Available|url=https://www.netgate.com/blog/pfsense-plus-21-05-release-now-available.html|access-date=2021-06-09|website=Netgate - Secure networks start here.|language=en|archive-date=2021-06-18|archive-url=https://web.archive.org/web/20210618044427/https://www.netgate.com/blog/pfsense-plus-21-05-release-now-available.html|dead-url=no}}</ref>

2023年，WireGuard从德国的{{Link-en|主权科技基金|Sovereign Tech Fund|主权科技基金}}获得了超过200,000欧元的支持。<ref>{{Cite web |title=WireGuard |url=https://www.sovereigntechfund.de/tech/wireguard |access-date=2024-05-26 |website=Sovereign Tech Fund |language=en |archive-date=2024-11-03 |archive-url=https://web.archive.org/web/20241103121020/https://www.sovereigntechfund.de/tech/wireguard |dead-url=no }}</ref>

== 参见 ==
{{Portal|自由軟體|Linux}}
* [[虚拟私人网络]]
* [[OpenSSH]]

== 注释 ==
{{NoteFoot}}

== 參考來源 ==
{{Reflist|refs=
<ref name="ars">{{cite web|url=https://arstechnica.com/gadgets/2018/08/wireguard-vpn-review-fast-connections-amaze-but-windows-support-needs-to-happen|title=WireGuard VPN review: A new type of VPN offers serious advantages|website=[[Ars Technica]]|first=Jim|last=Salter|date=26 August 2018|url-status=live|archive-url=https://web.archive.org/web/20180920191342/https://arstechnica.com/gadgets/2018/08/wireguard-vpn-review-fast-connections-amaze-but-windows-support-needs-to-happen/|archive-date=20 September 2018}}</ref>
<ref name="Mullvpn">{{cite web|title=Mullvad Review|url=https://thebestvpn.com/reviews/mullvad-vpn/|access-date=8 April 2019|website=thebestwpn|date=13 February 2019|first=John|last=Mason|id=2. Strong Tunneling Protocols – OpenVPN & WireGuard|archive-url=https://archive.today/20190624223831/https://thebestvpn.com/reviews/mullvad-vpn/|archive-date=24 June 2019|url-status=live}}</ref>
<ref name="Azirevpn">{{cite web|title=AzireVPN Review|url=https://thebestvpn.com/reviews/azirevpn/|access-date=8 April 2019|website=thebestvpn|date=19 February 2019|first=John|last=Mason|id=2. Impressive Protocols and Encryption|archive-url=https://archive.today/20190508212047/https://thebestvpn.com/reviews/azirevpn|archive-date=8 May 2019|url-status=live}}</ref>
<ref name="cryptostorm">{{cite web|title=WireGuard support added!|url=https://cryptostorm.is/blog/wireguard-support-added|access-date=9 December 2019|website=cryptostorm blog|date=5 April 2019|archive-url=https://web.archive.org/web/20191209103924/https://cryptostorm.is/blog/wireguard-support-added|archive-date=9 December 2019|url-status=live}}</ref>
<ref name="ARST-100">{{Cite web|last=Salter|first=Jim|date=30 March 2020|title=WireGuard VPN makes it to 1.0.0—and into the next Linux kernel|url=https://arstechnica.com/gadgets/2020/03/wireguard-vpn-makes-it-to-1-0-0-and-into-the-next-linux-kernel/|url-status=live|access-date=23 April 2020|archive-url=https://web.archive.org/web/20200331182738/https://arstechnica.com/gadgets/2020/03/wireguard-vpn-makes-it-to-1-0-0-and-into-the-next-linux-kernel/|archive-date=31 March 2020}}</ref>
<ref name="Install">{{cite web|url=https://www.wireguard.com/install|title=Installation|publisher=WireGuard|access-date=23 April 2020|archive-date=2025-02-11|archive-url=https://web.archive.org/web/20250211183630/https://www.wireguard.com/install/|dead-url=no}}</ref>
}}

==外部链接==
* [https://www.wireguard.com/ WireGuard官网]{{Wayback|url=https://www.wireguard.com/ |date=20180428010439 }}
* [https://web.archive.org/web/20180826214649/https://git.zx2c4.com/WireGuard WireGuard源代码]
* [https://github.com/WireGuard WireGuard源代码GitHub镜像]{{Wayback|url=https://github.com/WireGuard |date=20220508234740 }}
* [https://play.google.com/store/apps/details?id=com.wireguard.android WireGuard Android客户端]{{Wayback|url=https://play.google.com/store/apps/details?id=com.wireguard.android |date=20220506162021 }}
* [https://web.archive.org/web/20190824125031/https://apps.apple.com/app/wireguard/id1441195209 WireGuard iOS客户端]
* [https://web.archive.org/web/20190824125035/https://apps.apple.com/app/wireguard/id1451685025 WireGuard macOS客户端]

{{VPN}}

[[Category:网络协议]]
[[Category:网络安全]]
[[Category:安全软件]]
[[Category:开放源代码]]
[[Category:用Go編程的自由軟件]]
[[Category:穿隧協議]]
[[Category:虛擬私人網路]]