$linuxjunkies
>

WireGuard peer

A WireGuard peer is a participant in a WireGuard VPN connection, identified by a public key and associated with an IP address on the VPN network.

In WireGuard, a peer is any remote endpoint that connects to your WireGuard interface. Each peer is uniquely identified by its public key and configured with one or more allowed IP addresses—the addresses that traffic from that peer is permitted to use.

When setting up a WireGuard tunnel, you define peers on both sides of the connection. For example, a server might have a peer entry for a client's public key, and that client configures the server as a peer with its own public key. WireGuard uses these public keys to authenticate and encrypt traffic automatically.

A typical peer configuration includes the peer's public key, its endpoint address (host and port if initiating from behind NAT), and the IP addresses it's allowed to tunnel through. For example: AllowedIPs = 10.0.0.2/32 means this peer can send traffic using that single IP address on the VPN network.

Related terms