WireGuard VPN (Optional)
WireGuard is a fast, modern VPN that is ideal for connecting multiple nodes in a private network overlay — for example, linking a Linode VPS and a home server so K3s sees them as a single flat network.
What this page covers
- When WireGuard is needed in a self-hosted setup
- Installing WireGuard on Ubuntu
- Generating key pairs and writing the interface configuration
- Bringing the interface up and verifying connectivity
- Persisting the interface across reboots with systemd
When WireGuard is needed
WireGuard is particularly useful when:
- You are building a multi-node K3s cluster where nodes are not on the same LAN.
- You want to connect a home lab node to a VPS without exposing internal services.
- You want a secure channel between your workstation and your servers for administrative access.