使用 Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper 安装 wireguard-tools

项目链接

• 主页

命令和别名

• wg
• wg-quick

项目历史

WireGuard was designed around a deliberately small kernel or userspace tunnel implementation plus simple userspace configuration. The official repositories page identifies wireguard-tools as the cross-platform userspace tooling for configuring WireGuard implementations, including `wg(8)` and `wg-quick(8)`.

`wg` became the protocol-specific tool for setting and reading interface state, peers, keys, endpoints, allowed IPs, handshakes, and transfer counters. `wg-quick` grew into the pragmatic wrapper for common host setups: it reads an interface-named config file, adds the interface, assigns addresses, configures routes, and then tears that setup down again on request.

采用历史

The tools package became the everyday interface to WireGuard both before and after the protocol reached Linux 5.6. Before mainline inclusion, it paired with out-of-tree kernel modules and userspace implementations; after inclusion, it remained necessary because the kernel feature alone does not provide the user-facing `wg` and `wg-quick` commands.

Its cross-platform scope also matters: the official project describes wireguard-tools as tooling for WireGuard implementations rather than only for Linux. Package ecosystems therefore treat it as the stable CLI surface that can sit on top of kernel drivers, BSD ports, macOS interfaces, Windows support, and wireguard-go.

使用方式

`wg` is used for precise interface inspection and configuration: showing runtime status, setting peers, applying keys, and dumping machine-readable state for scripts. It is the command admins reach for when they need to see whether a tunnel has handshaken or exactly which allowed IPs are active.

`wg-quick` is the fast path for common deployments. It looks for an interface config such as `/etc/wireguard/wg0.conf`, applies WireGuard settings, assigns addresses, and infers routes from peer allowed IPs, while still allowing more advanced users to bypass it and call `wg` plus platform networking commands directly.

为什么软件包爱好者会关心

This is the package that turns WireGuard from a kernel feature or protocol implementation into something shell users can operate. For many systems, installing WireGuard really means installing the tunnel implementation plus wireguard-tools.

The package is also beloved in automation because `wg` has script-friendly output and `wg-quick` keeps the common one-file tunnel pattern boring. That combination made WireGuard unusually approachable for sysadmins compared with older VPN stacks that relied on larger daemon configurations and certificate-heavy workflows.

时间线

• 2017: The WireGuard paper describes a separate userspace `wg(8)` tool for configuration.
• 2019: WireGuard is accepted into the net-next path toward Linux 5.6, increasing the importance of stable userspace tooling around the kernel implementation.
• 2020: Linux 5.6 ships WireGuard support; wireguard-tools remains the common CLI package for configuring it.
• 2026: The upstream cgit repository continues to publish tagged wireguard-tools releases and cross-platform fixes.

Related projects

• wireguard-go can create a userspace WireGuard interface that is then configured with `wg`.
• NetworkManager and desktop network settings tools can cover higher-level workflows, but wireguard-tools remains the reference command-line layer.

来源

• https://git.zx2c4.com/wireguard-tools/
• https://git.zx2c4.com/wireguard-tools/about/src/man/wg-quick.8
• https://git.zx2c4.com/wireguard-tools/about/src/man/wg.8
• https://kernelnewbies.org/Linux_5.6
• https://www.wireguard.com/papers/wireguard.pdf
• https://www.wireguard.com/repositories/