INSTALL DOCKER - I forgot to mention this in the video but installing the Docker package from the Package Center is another prerequisite. Sorry about that.
@w4term4n You're welcome!! I added a few 7.2 SPK files, but if there is another package architecture that is needed please let me know. That goes for anyone reading this comment. 😀
This was such an awesome and complete guide. It worked perfectly and I had this up and running before the switch to 7.2 update 3 with container manager. I tried going back through the steps with no luck. The contain launches but then immediately fails. Also the new 7.2 spk file (Geminlake for 1520+) you have linked in your drive shows as invalid when I try to install it on my machine. I'm sure I speak for many of us when I say any updated instructions you could provide would be most appreciated.
Thanks for the compliment on the video!! I recently tried setting up WireGuard on DSM 7.2 update 3 and it worked fine for me. Maybe it is the SPK file that is the problem. I'll try the setup on my 920+, which also has a Geminilake CPU and see if it works for me. I'll post an update here.
Perfect video, it's amazing how whenever i need to setup something on my Synology, i find a recent video from Digital Aloha about it ! Big big big thanks everything worked smooth, i can connect to my NAS with the same local ip adress :D
Yes thank you there wa a Problem on wg-easy , i dont understand when i am connected with wireguard whats my ip Shows the correct ip adresse from the nas but i cant connect to the nas from my Handy also when im not in the same Network? Thanks for Help.
@johannesrolhumer9272 You're welcome!! I'm not exactly sure if you got things working properly from your comment, but hopefully everything is working fine!!
Good video with easy explanations. I have one problem though, whenever I turn wireguard "ON" on any of my clients, they lose internet connection. I thought this WireGuard connection would for instance link my phone to my NAS so I can enter remote apps like Qbittorrent ?
Glad to hear that the video was easy to follow!! WireGuard should work exactly like you said. You should be able to access your NAS and your apps. I wonder if my other video on installing WireGuard through Container Manager would be worth you trying -> th-cam.com/video/v0Z1m658Xe8/w-d-xo.htmlsi=mFidOxJsCEyEh9iv. That is my latest video on running WireGuard on a Synology NAS.
Hello, I have the need to install wireguard on my synology and every docker images that exists gave me errors. Your SPK file saved my life. Even though I do not follow your tutorial, because I have different needs, but basically with the same requirements, I now have question: What if my synology loss its power and I have set it up to turn on when power is back? What happened to the Wireguard that I ran from the command line when my synology restarts? Will the wireguard package autorestart itself (using "proper" way - like I did in CLI) or will I need to enable service or make script to automatically run wireguard at boot? Please advice. Thank you.
@boredguy5531 Glad the SPK file helped you!! Regarding your question, from my experience, the WireGuard package should start up like other packages on reboot or power disruptions. Good luck in your setup!!
Hi. I upgraded my DS220+ to the last DSM 7.2. Wireguard stopped to work properly. I followed again your great guide to install WG again, but it doesn't work. Do you know if there is any incompatibility with the DSM7.2 and WG? Sorry for disturbing you, but I could not find anything about this on the web. Many thanks in advance and best regards
Sorry, after sending you this message, I've found the solution of this problem. I found the new spk compatible version with DSM 7.2 and everything is running perfectly now. I have the web address where I found the new spk, I don't want to publish it in your web page without your permission, so, if you want I will send you the address privately. Again, many thanks for your guide to install WireGuard.
@@joaquinloza4328 Glad you found the solution!! I would be greatful if you could send the web address where you found the new SPK file. You can visit my website (digitalaloha.com) where you'll be able to find my contact information. Thank you and you're welcome on this WireGuard video.
@@SipanSalim I don't want to publish anything in a web page without the permission of the owner. If Digital Aloha let me do that, I will publish the link here. Otherwise, please send me any way to contact you and I will send the link to you privately
@ovandoayala You'll need to enter in the password for the account that you logged in with. It should have been the same account that you log in with DSM. Hope this helps?
ufff....I went thru it and got it. Just a tip...windows users might not be very common with the use of a terminal. even a terminal that works with ssh tunnel. so you might implement that somehow. I used Putty finally to get it work Anyways many thx for your patient and good tuto
Hi Daniel, You're welcome on the tutorial and thanks for your feedback from a windows user's perspective. I guess I assume viewers already are familiar with ssh and/or have a version of windows where you can ssh from the terminal. I'll try to be more inclusive in my future videos. Glad you got things working by the way!!😀
thanks for the video, now i have an update node js 18 available but i don't know how to update it, can you esplain in detail please? thank you very much!
Another great one! Thank you! Been running Wireguard on RaspberryPi for few weeks now and it’s been great. Now I can finally move Wireguard to my DS920 and use Pi for other projects :)
This work perfectly. But I can't reach my shares (or anything else for that matter) on my Synology NAS itself. I can reach any other device on my networkt (camera's, other computers). Is there anything I can change?
@tscibilia Thanks for the compliment on the video... Much appreciated!! Regarding your question, you should be able to access network shares like if you were on your local LAN. Connections like SMB should work fine. Hope this helps? Best of luck in your setup!!
I just installed it and it works perfect! one question, in the future to update the containers, how is it done? Skip the automatic update notice or do you have to be aware? thank you.
@w4term4n You're welcome... Glad you got WireGuard up and running on your system. Regarding your question on updating, I would actually update the container by downloading the latest image rather then update the container through any notification within the running container. I personally use the setup that I go through in this video -> th-cam.com/video/kxSQ-F3ys9k/w-d-xo.html. Hope this helps?
Your videos are more accurate and easier to understand I doubt you were a teacher before haha another thing that i want to mention that the image has been little space on the image name wee jewel/wg-easy so you can edit the docker image command ;)
Haha, not a teacher for sure 😉and thanks for the compliment on my videos. Also thanks for pointing out the space in wee jewel (auto spell check caught me again).
This is a lot easier than the other method. But it's not working, and I wonder if I made mistakes in prior installations. Is there a good way to nuke everything (ie delete all settings for Wireguard) and start entirely fresh?
@RetroMythologist Hopefully you can get things working!! To delete all of the settings for WireGuard you should be able to bring up File Station, remove then recreate the wg-easy folder then you'll be set to try it again. Good luck!!
Thanks, this is the most clear document find, even in my language, Spanish . Thanks again, just a question, why you redirect in wireguard the dns to Cloudflare and not to the Nas?
Hi Sergio, You're welcome!! Happy to hear that the video was clear for you!! Regarding your question on DNS through Cloudflare there wasn't a particularly good reason that I did that (I just used Cloudflare because I know everyone could if they followed the video step by step). You should change your DNS setup to whatever you would like, including your NAS if that works for you.
Excellent tutorial, really well made. Works fine to connect my iPhone to my NAS, but not for my Windows 11 machine (over iPhone Hotspot). The official Windows client says: "Sending handshake initiation to peer 1 [...IPv6AddressHere...]" and then "Handshake for peer 1 [...] did not complete after 5 seconds, retrying" on repeat. Any ideas? Must have sth. to do with the iPhone hotspot because it works when I connect my notebook to my neighbors wifi..
Hi ewagenk, You're welcome and thank you on the compliment on the tutorial!! I know I ran into issues with some testing I did with my iPhone hotspot... Glad your Windows 11 machine works well otherwise.
I was finally able to setup everything but when I activated the wireguard on my laptop, I had no internet connection. Same experience while connecting to my mobile phone. I disabled my wifi and connected to mobile hotspot, but unfortunately didnt have any internet connection. Not sure what was doing wrong...tried the whole setup twice from scratch - not sure where to start with troubleshooting - any advice is appreciated
@sammywonks404 Hopefully you figured out your issue already but, if not, I would double check that you are using the correct network interface. Also make sure you don't have a firewall rule blocking your connection. Hope that helps? Good luck!!
@@digital_aloha Yes, I disabled the FW completely just to make sure I was not blocking some port but to no avail. by the way I assume using DDNS provided by Synology has no adverse effect bcos that was my only thing I wasnt sure about. It happened to me another time when I used their DDNS service to setup Bitwarden, and after some days it stopped working. But other than that couldnt think if any other possible issue. anyway back to Tailscale for now
@@sammywonks404 Sorry the WireGuard setup didn't work out. Regarding your question about DDNS I've had no issues using Synology as my DDNS provider so I don't think that is the issue. The good thing is that Tailscale works great and it is good to hear that your able to use that service.
Great tutorial! Now, update released on package center. from 1.0.20220627 to 1.1.20220627. Once I push Update, after download I get this error: "Invalid file format. Please contact the package developer. " Do you know how to resolve this?
@aivarassekonas1892 Thank you... Glad you found this tutorial helpful!! Regarding the update you are doing I'd assume the issue is specifically with the SPK file you are trying to use. How did you get it? The version that I've been using is 1.0.20220627.
@braydonadams9517 Hard to say exactly what the issue may be, but I'd first check the firewall on your Synology NAS. If it is enabled then disable it and see if that does the trick. Also maybe the DNS server assigned to your WireGuard connection is a problem, see if you can resolve names properly. Lastly, confirm that wg-easy web gui displays that your phone is connected. Hope this helps? Good luck in getting things working!!
Hi there, i've been following everystep till the end but my issue is that both my clients and my synology server shows that it's connected. But my client side it can't connect to the internet such as google,youtube.etc..... Can you please help me out by stating ur insight on what's wrong with it?
@123456789sdf I wonder if your issue is firewall related? See if disabling the firewall on your Synology NAS does the trick. Also, if the firewall was the issue, have a look at this video -> th-cam.com/video/-my0ilNnxR4/w-d-xo.html where I explained how to add a firewall rule for docker bridge network which should resolve the problem and will allow you to enable the Synology NAS firewall as well. Hope this helps and best of luck to you in your setup.
Hi Hugo, Thanks for the compliment on the video, much appreciated! Regarding your question (hopefully I've interpreted it correctly) but I am able to access local devices when I remotely connect to my Synology NAS running WireGuard. Local meaning other devices on the same network as my Synology NAS. This should work out of the box once everything is configured. Hopefully this answers your question, but if not please clarify and I'll see if I can help you further.
Hi Salamander, WireGuard claims to be a fast, modern and simple VPN service and hopefully something that is included in Synology's VPN offerings in the future. I did some speed tests in the past and the connection is definitely faster although the transfer rates look to be the same for me. I personally use WireGuard over OpenVPN in my setup, but I think both work fine. I'd actually suggest you run both and see what you think (you can run both on the same Synology NAS). Hope this helps and good luck to you!!
Hi Claudio, You should be able to change the DNS to Adguard by bringing up the WireGuard configuration on your client and change the DNS line to the IP address of Adguard. Hope this helps and good luck to you!!
Amazing content! I've been struggling with linking a wireguard docker instance to use the pihole (also run in a docker container). Do you think you could make a tutorial on how to do this?
Hi Stephane, Thanks for the compliment on my content!! Regarding your question on running both WireGuard and Pi-hole as docker containers and having them play nicely together, I do have a video on the topic already -> th-cam.com/video/t9v-seCZY9A/w-d-xo.html. See if that helps you with your setup and let me know if you do continue to have problems. Good luck to you!!
@@digital_aloha thanks! This video gave me an idea for an easy workaround. I ensured pihole and WireGuard were on the same network in Portainer, added the correct dns in the client config and I was good to go!
Hi Dragan, Good question!! If things work the same as going from DSM 7.0 to 7.1 there should be some development happening to support WireGuard in the new version. Hard to really say though because it depends on the developer and the community behind it.
Great video, thank you very much, works on my nas. I have a question to ask. How can I modify the udp port 51820? I'm not familiar with Linux at all. Can you please explain the specific steps in detail? I tried to forward port 51820 to 55555 on my router, but it didn't work.
Hi Ammar, You're welcome!! Regarding your question, you should be able to link AdGuard to your WireGuard connection by switching the DNS server being used by your WireGuard client. If you are running AdGuard as a Docker container on the same Synology NAS as you are running WireGuard then you'll need to make sure that both containers share the same bridge network and use the bridge IP address of the AdGuard container in your clients setup (hope this makes sense?). I don't use AdGuard but I have a video on Pi-hole that runs through how I would set this up - th-cam.com/video/1yG0p9gU104/w-d-xo.html. Maybe I'll create a video on setting up AdGuard at some point. Hope this helps and good luck to you!!
@@digital_aloha Sounds good, I could not figure out how to set the DNS in WireGuard so I will be looking forward to see AdGuard + WireGuard video tutorial 😉
@@ammarsalem I better get on it then 😃. Actually, hopefully something I'll get to in the next few months. I haven't played much with AdGuard but it looks pretty simple to setup so it may be a series of videos that eventually lead up to a AdGuard + WireGuard video.
Capo!!! I just did it! I had wrireguard on a Pi due to the lack of kernel requirement on Synoloy. I am just wondering if you can add somehow adguard or pihole to this setup so we do not use cloudflare dns. Thank you a lot for this.
Hi Walmer, Glad you got WireGuard working on your Synology!! Regarding running Adguard or Pi-hole, I'm not sure about Adguard but Pi-hole should work fine. I created a video on running Pi-hole with WireGuard on a Synology NAS that you may want to check out - th-cam.com/video/t9v-seCZY9A/w-d-xo.html. Hope the video does the trick? And good luck to you!!
2 ปีที่แล้ว +1
@@digital_aloha thank you ferd! I will definitely take a look!
Hi Ihsan, You should actually be able to access the systems and services on your remote lan as if you were connected to the lan locally if you did setup WireGuard successfully. See if you can ssh the exact same way you do when locally connected and see if that works for you?
Hi Andrew, Thank you!! Glad the video was helpful to you. Regarding your question I haven't tried out IPv6 in any of my setups and according to the developer's readme on this project it likely isn't supported. Below is a quote of what is specifically mentioned and here is a link if you would like to read about the project further - github.com/runfalk/synology-wireguard. Hope this helps and best of luck in your setup!! "IPv6 is probably not supported (at least not using wg-quick). Due to the system version of iproute2 being too old. You'll get the error message Error: argument "suppress_prefixlength" is wrong: Failed to parse rule type."
Any chance you could add the R1000 to the package list? It's for the DS1522+ I have OpenVPN working, but it's VERY slow... I hope WireGuard performs a bit better.
Hi Marcel, Sorry for the slow response. I've just updated the R1000 spk file for DSM 7.1 that you can find here -> drive.google.com/drive/folders/1EEwJkX0W51gisiEiMzzUzYmipNkAE3lq. Hopefully this works out for you. Let me know how it goes. Good luck!!
Great video, but unfortunately, in my case, still no luck... I'm not sure if it's relate with the double NAT I have; LTE 4G Modem (Huawei B535-235) -> Asus Router (RT-AC86U). Even after opening ports in both the modem (LTE) and the router (Asus), the same way I have to access outside the local network something like Plex, it still doesn't work. There's no traffic. edit: Forget it; it seems to be an innate 4G's problem that doesn't allow to port forward.
Hi Claudio, Not exactly sure what is causing port 51820 to be in use? What I'd do is stop and start the WireGuard service on the Synology NAS as well as restart wg-easy from the Docker package from within DSM and see if that does the trick. Hope this helps? Good luck in trying to resolve your issue!!
Thank you for providing the tutorial it was easy to follow from someone with basic ssh/docker knowledge, I just have one question, I have a firewall setting that allows various ports and denies everything else. After successfully connecting my laptop and phone to the wireguard on my DS918 I couldnt actually connect to anything external, turns out its the firewall setting. I've tried letting through 51820-21 udp/tcp both destination and source, but it i cant connect to the internet unless I disable the firewall setting that denies setting, just wondering if there is a solution that is more secure.
Hi binaryhelix101, You're welcome, glad the video was helpful and easy to follow!! Regarding your question I believe it is related to the Docker bridge network that wg-easy/wireguard is on. Have a look at this video that I created (I tagged the location that I think you need to start at) th-cam.com/video/-my0ilNnxR4/w-d-xo.html. Although I explain the issue as affecting DNS I think if you allow the Docker bridge network in your firewall rules you should get the results you are looking for... I think. Let me know if this does help!!
@@digital_aloha Thanks it worked, allowed 172.17.0.0 + subnet along with ports 51820-21 while denying other traffic. Funny enough I watched the other video but I stopped just before the Docker firewall part, was too impatient trying to install wireguard 😄
Hi wiffle, You’re welcome!! I believe if you do compile your own SPK file you’ll get a newer version of WireGuard, but can’t confirm for sure because I haven’t tried it (I’ll try it when I have a chance). I do see that someone mentioned version 1.0.20211208 in one of the project’s issues though so I’m thinking that may be the version you’d get - github.com/runfalk/synology-wireguard/issues/135. Good luck if you try it out and let me know how things go.
@@digital_aloha Great, thanks. Will try it.. but based on your previous video - it seems you weren't able to generate your own SPK using Synology itself? Needed a separate Ubuntu?
@@digital_aloha Another question - to confirm; this manages WG tunnelling THROUGH the Docker container. It doesn't automatically tunnel to the WireGuard SPK, correct? I ask as I'm running sudo wg show / wg0 in SSH and neither register.
@@digital_aloha @Digital Aloha Tech Tips Hey hey. Was able to get Wireguard working and connected through this - but, when remote, I'm unable to SSH into my Synology with WG connected. Nor can I access individual services using my local IP (ie. :PORT). Do you have issues with this as well?
@@fchou92 Hmm, I don't have that problem. I'm able to access all the services on my Synology NAS just fine. Hopefully you can find the root of your problem. Good luck!!
Hi, thanks for the great content! I set up wireguard as described in your video and it's working very well. I can access virtual machines and other docker apps, that are running in a macvlan. What I can not access, is other apps running also in the same bridge network as wireguard, like Portier or my Emby Server. What am I doing wrong?
Hi Eddy, You're welcome on the video and I'm glad you like my content!! Sorry for the delay in getting back to you and, if you haven't figured out the problem already, I believe this video will help -> th-cam.com/video/t9v-seCZY9A/w-d-xo.html. It covers setting up WireGuard to access Pi-hole through a bridge network, but I believe the concepts should be the same for Portier and Emby. Basically the issue is that WireGuard needs some additional iptables rules added so it is aware of the bridge network. Hope this helps and good luck!!
Hello. I am brand new to Synology and docker and climbing the steep learning curve. I have docker and plesk installed. I also have a mullgardvpn subscription. I want to use their wireguard on my Synology. Following your guide am I setting up vpnserver that uses wireguard and basically mullguard is not needed or is it just setting up the wireguard “protocol” and it will still point to mullguard… (I also sent an email from a yahoo address a few days ago)
Hi Nick/T Man, I did get your email from a few days ago but didn't have a chance to respond just yet. I'll be responding here and feel free to follow up as well if I missed anything from your email. Regarding your question on Mullvad VPN and setting up a connection to them through WireGuard, you would need to change up the setup slightly from what I've presented in the video. You'll need to install the SPK file for your Synology NAS to provide it the kernel module to run WireGuard, but after that you'll need to setup WireGuard as a client to Mullvad. This is something I haven't done just yet, but I'll prioritize it as a subject to work on and will release a video when I do have the steps to setup WireGuard as a VPN client to a VPN service provider like Mullvad. If you make progress with your setup please let me know as well. Good luck to you and keep an eye on a new video regarding this specific setup (hopefully) in the near future.
Hi S Shah, I've read that it is possible to run WireGuard on a Synology NAS as a client, but I've never been able to get it going myself. I'll be trying to figure this out and will release a video if I do, but if you figure it out please feel free to post how you did it!! Good luck and stay tuned!!
@@digital_aloha Hi, If the server is working on Synology could you please test removing the wg0.conf file and replace it with a client1.conf file that you created on a different wireguard server, restart/reboot, see if this converts it into client, also make sure you add PersistentKeepalive = 25 or so entry into client1.conf, Just wondering... cheers
@GeorgeStefanAchihaei I've updated the file WireGuard-apollolake-1.0.20220627.spk to the Google Drive linked in the description of the video. Hopefully that does the trick for you. Good luck and sorry for the delay in getting back to you.
When I imported the spk file for my NAS 718+ (wireguard appollolake) my package center threw error asking me to repair something...I didnt want to mess with my system so went ahead and uninstalled it. Is this expected? I used the 7.1 version as I am running DSM 7.1.x on my NAS
@sammywonks404 It should install without needing to repair anything... Maybe the repair was coincidental. Did the repair request show up in Package Center prior to you trying to install the SPK file?
Hi Ferdinand, Thx for the excellent video. I just have a problem installing the apollolake spk on my ds218+ running DSM 7.0.1-42218 Update 3. Message: "The operation failed. Please sign in again on DSM and retry" Any suggestions? BRPPee
Hi BRPPee, I haven't run into your problem before, but what I've found that other suggest is first reboot the NAS. Next, if you have other third party packages installed try disabling and/or removing the package and see if that helps. Lastly try another web browser and see if that does the trick. Hopefully one of these suggestions helps? Good luck to you and let me know if any of these suggestions helped!
Hi Popcorncandy, Yes, you should be able too! Here are a couple of examples from my setup. For Full Tunnel you just need to download the configuration file from wg-easy which should look like this if you edit it or view it after importing it into the WireGuard client. [Interface] PrivateKey = Address = 10.8.0.2/24 DNS = 1.1.1.1 [Peer] PublicKey = PresharedKey = AllowedIPs = 0.0.0.0/0, ::/0 PersistentKeepalive = 0 Endpoint = :51820 For Split Tunnel edit the same file and change the AllowedIPs line to include just the network that wg-easy is running on. In my case it would be set to 192.168.81.0/24. The full example would be something like the following. [Interface] PrivateKey = Address = 10.8.0.2/24 DNS = 1.1.1.1 [Peer] PublicKey = PresharedKey = AllowedIPs = 192.168.81.0/24 PersistentKeepalive = 0 Endpoint = :51820 Hope this helps and good luck to you in your setup!!
Yes I just updated my DSM and am running into problems. wg-easy keeps closing and restarting in a loop and I get an email notification every 2 minutes. I cant even delete it!
@dominiknill1163 Seems you and @jlrgamer1 are having the same issue ☹. I don't have a Synology NAS with the same processor so no way for me to troubleshoot. Maybe check out github.com/runfalk/synology-wireguard to see if the developer has any info that can help. Good luck to you both in finding a solution!!
Hi Johannes, If you can't connect to your NAS or Docker containers then it is most likely that you aren't connected properly to WireGuard. Double check on the WireGuard/wg-easy side of things. Hope this helps? Good luck to you!!
Hi there... See if the spk file listed here works for you - drive.google.com/drive/folders/1EEwJkX0W51gisiEiMzzUzYmipNkAE3lq and let me know how it goes. I tried the kvmx64 spk file and that one worked for me when installing on Virtual DSM. Good luck to you!!
@@digital_aloha hi bro it work fine as the previous one that you share with us in your previous video on dsm 7 but the problem is no conection when i try to connect using wireguard from my android phone also from another phone and other laptop anyway to check logs or. missing something ? i follow your previous video and it work fine but when i update nas to dsm 7.1 vpn mention is connected but no conection bro
Additionnal information when i run command wg show root@vpn:/# wg interface: wg0 public key: sds87SDS7D8S78D77XXXXXXXXXXXXX= private key: (hidden) listening port: 51820 peer: 9Z7UoboXXXXXXXXXXXXXXXXXXX= preshared key: (hidden) allowed ips: 192.168.2.2/32
Hi yttam15 D, This probably won't work with CGNAT. You'll need to be able to setup port forwarding for this to work. In your case I would check out Tailscale which I have a video on - th-cam.com/video/x7SVbkHaEaA/w-d-xo.html. Good luck in your setup!!
Hi MrHorseYT, I've compiled an SPK file for the v1000 CPU and have uploaded it to the Google Drive link posted in the description of this video (WireGuard-v1000-1.0.20211208.spk). See if it works for you!
@@digital_aloha That works perfectly, thank you very much!. I did try Tailscale and while that connected, it didn't allow local access (maybe a port forward issue)
@@L0rdLogan You're welcome. Glad the SPK file worked for you. Regarding Tailscale, if you want access to other local devices you need to setup your node as a subnet router. Check out this video if you are interested -> th-cam.com/video/uJ8PsImiDrM/w-d-xo.html.
Hi Jacob, I have no idea why sudo doesn't work for you? It should be a standard command that comes with the operating system that ships with Synology NASs. What Synology NAS model are you using by the way?
@@digital_aloha i got this installed, i using DSM 7.1 - DS420+ - but how can i put my TorGuard vpn on this ? i want to my synology nas server using Torguard vpn. aslo i got PrivateKey and publickey from torguard i can put in, but how ?
@@digital_aloha i hope you might be able to help me with this over teamviewer, to set up nas server run on wireguard with torguard vpn .. i found out that openvpn on synology runs max 7 mb / s. and have read that wireguard should do better than openvpn network
@@jacoblaursen5398 Great, I'm glad you got it installed and actually the setup described in this video is more so for setting up WireGuard as a VPN server and not a VPN client. I believe it is possible, but I've never figured it out as of yet.
@@jacoblaursen5398 I'll get back to you if I do figure out how to setup WireGuard as a VPN client (I'll probably release a video if I do). Then we can connect up an try to setup torguard vpn in your environment.
Oh i forgot to mention, but anyone that has access to my nas via vpn, has also access to my docker containers. Anyway to avoir that ? I dont want my parents or my cousins to mess with radarr et stuff 😂
Muy buenas espero alguien me pueda ayudar porque tengo un problema y no se como solucionarlo, todo me va bien pero cuando intento conectar otro dispositivo ese dispositivo no puede conectarse a mis servidores internos de casa, por ejemplo no puedo entrar en el nas ni tampoco en ningun servicio del nas, alguna ayuda?? porfavor me estoy volviendo loco con esto JAJAJA
Is it slow as well with another VPN server like OpenVPN? Just curious if you see a difference between a Docker based and native VPN connection. I haven't seen much of a difference on my end.
INSTALL DOCKER - I forgot to mention this in the video but installing the Docker package from the Package Center is another prerequisite. Sorry about that.
Hi and thanks for this nice tutorial! Is it possible to get the SPK file for R1000 (Ryzen 1600) and DSM7.1 (DS1522+)? Thanks in advance :)
Just a small but important step. I'm struggling with the mount path and getting the docker container to run without stopping unexpectedly.
What about setting up Synology as the client
Thanks!
@SuleimanALAQEL You're welcome!! Thank you for the Super Thanks Tip... Much appreciated!!
I go in looking for the new version for 7.2 and I see that you already have them updated, thank you again!
@w4term4n You're welcome!! I added a few 7.2 SPK files, but if there is another package architecture that is needed please let me know. That goes for anyone reading this comment. 😀
This is definitely the easiest video on how to get this to work! And nice that you added the DS1621+ spk file! Thanks alot it just works flawless
Hi Jakob, You’re welcome! I’m happy to hear that everything worked out with your setup.
Please add DSM 7.2 compiled files to the drive please? Thanks!
This was such an awesome and complete guide. It worked perfectly and I had this up and running before the switch to 7.2 update 3 with container manager. I tried going back through the steps with no luck. The contain launches but then immediately fails. Also the new 7.2 spk file (Geminlake for 1520+) you have linked in your drive shows as invalid when I try to install it on my machine. I'm sure I speak for many of us when I say any updated instructions you could provide would be most appreciated.
Thanks for the compliment on the video!! I recently tried setting up WireGuard on DSM 7.2 update 3 and it worked fine for me. Maybe it is the SPK file that is the problem. I'll try the setup on my 920+, which also has a Geminilake CPU and see if it works for me. I'll post an update here.
Perfect video, it's amazing how whenever i need to setup something on my Synology, i find a recent video from Digital Aloha about it ! Big big big thanks everything worked smooth, i can connect to my NAS with the same local ip adress :D
Awesome!! And thank you for your comment (much appreciated)!!
Awesome video. Thanks a lot. Very easy to follow and I finally installed the Wireguard in my Synology 220+ NAS.
@joaquinloza4328 You're welcome!! Great to hear that the video was helpful!!
Yes thank you there wa a Problem on wg-easy , i dont understand when i am connected with wireguard whats my ip Shows the correct ip adresse from the nas but i cant connect to the nas from my Handy also when im not in the same Network? Thanks for Help.
@johannesrolhumer9272 You're welcome!! I'm not exactly sure if you got things working properly from your comment, but hopefully everything is working fine!!
Good video with easy explanations. I have one problem though, whenever I turn wireguard "ON" on any of my clients, they lose internet connection. I thought this WireGuard connection would for instance link my phone to my NAS so I can enter remote apps like Qbittorrent ?
Glad to hear that the video was easy to follow!! WireGuard should work exactly like you said. You should be able to access your NAS and your apps. I wonder if my other video on installing WireGuard through Container Manager would be worth you trying -> th-cam.com/video/v0Z1m658Xe8/w-d-xo.htmlsi=mFidOxJsCEyEh9iv. That is my latest video on running WireGuard on a Synology NAS.
Hello, I have the need to install wireguard on my synology and every docker images that exists gave me errors. Your SPK file saved my life. Even though I do not follow your tutorial, because I have different needs, but basically with the same requirements, I now have question: What if my synology loss its power and I have set it up to turn on when power is back? What happened to the Wireguard that I ran from the command line when my synology restarts? Will the wireguard package autorestart itself (using "proper" way - like I did in CLI) or will I need to enable service or make script to automatically run wireguard at boot? Please advice. Thank you.
@boredguy5531 Glad the SPK file helped you!! Regarding your question, from my experience, the WireGuard package should start up like other packages on reboot or power disruptions. Good luck in your setup!!
Hi. I upgraded my DS220+ to the last DSM 7.2. Wireguard stopped to work properly. I followed again your great guide to install WG again, but it doesn't work. Do you know if there is any incompatibility with the DSM7.2 and WG? Sorry for disturbing you, but I could not find anything about this on the web. Many thanks in advance and best regards
Sorry, after sending you this message, I've found the solution of this problem. I found the new spk compatible version with DSM 7.2 and everything is running perfectly now. I have the web address where I found the new spk, I don't want to publish it in your web page without your permission, so, if you want I will send you the address privately. Again, many thanks for your guide to install WireGuard.
@@joaquinloza4328 Glad you found the solution!! I would be greatful if you could send the web address where you found the new SPK file. You can visit my website (digitalaloha.com) where you'll be able to find my contact information. Thank you and you're welcome on this WireGuard video.
@@joaquinloza4328 can you please share the file with us? I don't know how to contact you.
@@SipanSalim I don't want to publish anything in a web page without the permission of the owner. If Digital Aloha let me do that, I will publish the link here. Otherwise, please send me any way to contact you and I will send the link to you privately
When I paste the codes, it tells me the password which I should put the one of my dsm or which one
@ovandoayala You'll need to enter in the password for the account that you logged in with. It should have been the same account that you log in with DSM. Hope this helps?
ufff....I went thru it and got it. Just a tip...windows users might not be very common with the use of a terminal. even a terminal that works with ssh tunnel. so you might implement that somehow. I used Putty finally to get it work
Anyways many thx for your patient and good tuto
Hi Daniel, You're welcome on the tutorial and thanks for your feedback from a windows user's perspective. I guess I assume viewers already are familiar with ssh and/or have a version of windows where you can ssh from the terminal. I'll try to be more inclusive in my future videos. Glad you got things working by the way!!😀
thanks for the video, now i have an update node js 18 available but i don't know how to update it, can you esplain in detail please? thank you very much!
Another great one! Thank you! Been running Wireguard on RaspberryPi for few weeks now and it’s been great. Now I can finally move Wireguard to my DS920 and use Pi for other projects :)
Hi szczottie, You're welcome!! Glad the video helped you get WireGuard working on your DS920!!
This work perfectly. But I can't reach my shares (or anything else for that matter) on my Synology NAS itself. I can reach any other device on my networkt (camera's, other computers). Is there anything I can change?
Great video, easy to follow, I'm just wondering how would you access the network shares using wireguard on synology?
@tscibilia Thanks for the compliment on the video... Much appreciated!! Regarding your question, you should be able to access network shares like if you were on your local LAN. Connections like SMB should work fine. Hope this helps? Best of luck in your setup!!
I just installed it and it works perfect! one question, in the future to update the containers, how is it done? Skip the automatic update notice or do you have to be aware? thank you.
@w4term4n You're welcome... Glad you got WireGuard up and running on your system. Regarding your question on updating, I would actually update the container by downloading the latest image rather then update the container through any notification within the running container. I personally use the setup that I go through in this video -> th-cam.com/video/kxSQ-F3ys9k/w-d-xo.html. Hope this helps?
@@digital_aloha Thank you very much for your help!
@@w4term4n No problem. Good luck to you!!
Great video. I got this setup quickly with your help. Thank you for your service!
Awesome and you're welcome!! Glad the video helped get you setup quickly!!
Your videos are more accurate and easier to understand I doubt you were a teacher before haha
another thing that i want to mention that the image has been little space on the image name wee jewel/wg-easy
so you can edit the docker image command ;)
Haha, not a teacher for sure 😉and thanks for the compliment on my videos. Also thanks for pointing out the space in wee jewel (auto spell check caught me again).
@@digital_aloha no your welcome thx again for your videos
@@Tachkila You're welcome as well!!
This is a lot easier than the other method.
But it's not working, and I wonder if I made mistakes in prior installations.
Is there a good way to nuke everything (ie delete all settings for Wireguard) and start entirely fresh?
@RetroMythologist Hopefully you can get things working!! To delete all of the settings for WireGuard you should be able to bring up File Station, remove then recreate the wg-easy folder then you'll be set to try it again. Good luck!!
Thanks, this is the most clear document find, even in my language, Spanish . Thanks again, just a question, why you redirect in wireguard the dns to Cloudflare and not to the Nas?
Hi Sergio, You're welcome!! Happy to hear that the video was clear for you!! Regarding your question on DNS through Cloudflare there wasn't a particularly good reason that I did that (I just used Cloudflare because I know everyone could if they followed the video step by step). You should change your DNS setup to whatever you would like, including your NAS if that works for you.
Excellent tutorial, really well made. Works fine to connect my iPhone to my NAS, but not for my Windows 11 machine (over iPhone Hotspot). The official Windows client says: "Sending handshake initiation to peer 1 [...IPv6AddressHere...]" and then "Handshake for peer 1 [...] did not complete after 5 seconds, retrying" on repeat. Any ideas?
Must have sth. to do with the iPhone hotspot because it works when I connect my notebook to my neighbors wifi..
Hi ewagenk, You're welcome and thank you on the compliment on the tutorial!! I know I ran into issues with some testing I did with my iPhone hotspot... Glad your Windows 11 machine works well otherwise.
I was finally able to setup everything but when I activated the wireguard on my laptop, I had no internet connection. Same experience while connecting to my mobile phone. I disabled my wifi and connected to mobile hotspot, but unfortunately didnt have any internet connection. Not sure what was doing wrong...tried the whole setup twice from scratch - not sure where to start with troubleshooting - any advice is appreciated
@sammywonks404 Hopefully you figured out your issue already but, if not, I would double check that you are using the correct network interface. Also make sure you don't have a firewall rule blocking your connection. Hope that helps? Good luck!!
@@digital_aloha Yes, I disabled the FW completely just to make sure I was not blocking some port but to no avail. by the way I assume using DDNS provided by Synology has no adverse effect bcos that was my only thing I wasnt sure about. It happened to me another time when I used their DDNS service to setup Bitwarden, and after some days it stopped working. But other than that couldnt think if any other possible issue. anyway back to Tailscale for now
@@sammywonks404 Sorry the WireGuard setup didn't work out. Regarding your question about DDNS I've had no issues using Synology as my DDNS provider so I don't think that is the issue. The good thing is that Tailscale works great and it is good to hear that your able to use that service.
@@digital_aloha Yes Tailscale is very responsive as well, just need to subnet, next
@@sammywonks404 Good luck with getting subnets setup!!
Hello, could you create a tutorial on how to use wg-easy in truenas scale and openwrt as main router? thanks in advance!
@johnbajerify I wish I could but I don't have a TrueNAS Scale system or OpenWRT router. Hopefully you can figure out the setup. Good luck!!
Great tutorial! Now, update released on package center. from 1.0.20220627 to 1.1.20220627. Once I push Update, after download I get this error: "Invalid file format. Please contact the package developer. " Do you know how to resolve this?
@aivarassekonas1892 Thank you... Glad you found this tutorial helpful!! Regarding the update you are doing I'd assume the issue is specifically with the SPK file you are trying to use. How did you get it? The version that I've been using is 1.0.20220627.
I did all this and added to my phone using QR Code and then it did not work. My phone says no internet when connected. Any Ideas?
@braydonadams9517 Hard to say exactly what the issue may be, but I'd first check the firewall on your Synology NAS. If it is enabled then disable it and see if that does the trick. Also maybe the DNS server assigned to your WireGuard connection is a problem, see if you can resolve names properly. Lastly, confirm that wg-easy web gui displays that your phone is connected. Hope this helps? Good luck in getting things working!!
Hi there, i've been following everystep till the end but my issue is that both my clients and my synology server shows that it's connected. But my client side it can't connect to the internet such as google,youtube.etc..... Can you please help me out by stating ur insight on what's wrong with it?
@123456789sdf I wonder if your issue is firewall related? See if disabling the firewall on your Synology NAS does the trick. Also, if the firewall was the issue, have a look at this video -> th-cam.com/video/-my0ilNnxR4/w-d-xo.html where I explained how to add a firewall rule for docker bridge network which should resolve the problem and will allow you to enable the Synology NAS firewall as well. Hope this helps and best of luck to you in your setup.
@@digital_aloha Thanks alot! I'll let you know whether i failed or not LOL
@@123456789sdf You're welcome!! Hope that does the trick.🤞
@@digital_aloha It works, ur brilliant!
@@123456789sdf Awesome, glad that worked!!
Hello, how can I use synology as a client? my router has a wireguard server.
Great Video, any idea how to make local devices accesible from a remote connection?
Hi Hugo, Thanks for the compliment on the video, much appreciated! Regarding your question (hopefully I've interpreted it correctly) but I am able to access local devices when I remotely connect to my Synology NAS running WireGuard. Local meaning other devices on the same network as my Synology NAS. This should work out of the box once everything is configured. Hopefully this answers your question, but if not please clarify and I'll see if I can help you further.
super, I will try tomorrow. thank you again Ferd !
Hi Patryk, You're welcome!! Hopefully the setup works for you!!
Is it worth to configure over the builtin DSM OpenVPN package? Sounds interesting.
Hi Salamander, WireGuard claims to be a fast, modern and simple VPN service and hopefully something that is included in Synology's VPN offerings in the future. I did some speed tests in the past and the connection is definitely faster although the transfer rates look to be the same for me. I personally use WireGuard over OpenVPN in my setup, but I think both work fine. I'd actually suggest you run both and see what you think (you can run both on the same Synology NAS). Hope this helps and good luck to you!!
Works great thank you for the great video!
Awesome and you're welcome!! Glad the video was helpful.
Hi, how to change DNS to point to an Adguard DNS (I have it on the same Synology NAS) ?
Hi Claudio, You should be able to change the DNS to Adguard by bringing up the WireGuard configuration on your client and change the DNS line to the IP address of Adguard. Hope this helps and good luck to you!!
Amazing content! I've been struggling with linking a wireguard docker instance to use the pihole (also run in a docker container). Do you think you could make a tutorial on how to do this?
Hi Stephane, Thanks for the compliment on my content!! Regarding your question on running both WireGuard and Pi-hole as docker containers and having them play nicely together, I do have a video on the topic already -> th-cam.com/video/t9v-seCZY9A/w-d-xo.html. See if that helps you with your setup and let me know if you do continue to have problems. Good luck to you!!
@@digital_aloha thanks! This video gave me an idea for an easy workaround. I ensured pihole and WireGuard were on the same network in Portainer, added the correct dns in the client config and I was good to go!
@@stephanelambert1846 Great and you're welcome! I'm happy to hear you got things working!!
What will happen once Synology releases DSM7.2?
Hi Dragan, Good question!! If things work the same as going from DSM 7.0 to 7.1 there should be some development happening to support WireGuard in the new version. Hard to really say though because it depends on the developer and the community behind it.
@@digital_aloha I do feel you, let’s see what’s coming and we’ll adjust accordingly.
Also, kudos on a great video.
@@gajotres Yeah, you never know about these things? Thanks the for compliment on the video!!
Hi, it´s neccesary to lauch terminal command each time i reboot the server?
Hi Dani, Not in my experience. You'll just need to run the terminal command once and you'll be set.
Great instruction. Works on DS920+ and DS1515+ Thank you.
Hi Marcin, You're welcome! I'm happy to hear you got WireGuard working on your Synology NASs.
Great video, thank you very much, works on my nas. I have a question to ask. How can I modify the udp port 51820? I'm not familiar with Linux at all. Can you please explain the specific steps in detail? I tried to forward port 51820 to 55555 on my router, but it didn't work.
Thanks a lot for this excellent video. Is there a way to link this with AdGuard to block ads on the go?
Hi Ammar, You're welcome!! Regarding your question, you should be able to link AdGuard to your WireGuard connection by switching the DNS server being used by your WireGuard client. If you are running AdGuard as a Docker container on the same Synology NAS as you are running WireGuard then you'll need to make sure that both containers share the same bridge network and use the bridge IP address of the AdGuard container in your clients setup (hope this makes sense?). I don't use AdGuard but I have a video on Pi-hole that runs through how I would set this up - th-cam.com/video/1yG0p9gU104/w-d-xo.html. Maybe I'll create a video on setting up AdGuard at some point. Hope this helps and good luck to you!!
@@digital_aloha Sounds good, I could not figure out how to set the DNS in WireGuard so I will be looking forward to see AdGuard + WireGuard video tutorial 😉
@@ammarsalem I better get on it then 😃. Actually, hopefully something I'll get to in the next few months. I haven't played much with AdGuard but it looks pretty simple to setup so it may be a series of videos that eventually lead up to a AdGuard + WireGuard video.
@@digital_aloha Hahaa, Awesome!!
Capo!!! I just did it! I had wrireguard on a Pi due to the lack of kernel requirement on Synoloy. I am just wondering if you can add somehow adguard or pihole to this setup so we do not use cloudflare dns. Thank you a lot for this.
Hi Walmer, Glad you got WireGuard working on your Synology!! Regarding running Adguard or Pi-hole, I'm not sure about Adguard but Pi-hole should work fine. I created a video on running Pi-hole with WireGuard on a Synology NAS that you may want to check out - th-cam.com/video/t9v-seCZY9A/w-d-xo.html. Hope the video does the trick? And good luck to you!!
@@digital_aloha thank you ferd! I will definitely take a look!
@ You're welcome. Best of luck with your setup!!
How can i access my remote lan? for example ssh server in the network while i am outside?
Hi Ihsan, You should actually be able to access the systems and services on your remote lan as if you were connected to the lan locally if you did setup WireGuard successfully. See if you can ssh the exact same way you do when locally connected and see if that works for you?
Hi. I did setup everything. After some research i found out that i need to low the ip of the container access to my networks
great video, just what i need. does it support ipv6 btw?
Hi Andrew, Thank you!! Glad the video was helpful to you. Regarding your question I haven't tried out IPv6 in any of my setups and according to the developer's readme on this project it likely isn't supported. Below is a quote of what is specifically mentioned and here is a link if you would like to read about the project further - github.com/runfalk/synology-wireguard. Hope this helps and best of luck in your setup!!
"IPv6 is probably not supported (at least not using wg-quick). Due to the system version of iproute2 being too old. You'll get the error message Error: argument "suppress_prefixlength" is wrong: Failed to parse rule type."
thx 4 the reply that's super sweet
@@andrewz8135, You're welcome!!
Any chance you could add the R1000 to the package list? It's for the DS1522+
I have OpenVPN working, but it's VERY slow... I hope WireGuard performs a bit better.
Hi Marcel, Sorry for the slow response. I've just updated the R1000 spk file for DSM 7.1 that you can find here -> drive.google.com/drive/folders/1EEwJkX0W51gisiEiMzzUzYmipNkAE3lq. Hopefully this works out for you. Let me know how it goes. Good luck!!
Great video, but unfortunately, in my case, still no luck...
I'm not sure if it's relate with the double NAT I have; LTE 4G Modem (Huawei B535-235) -> Asus Router (RT-AC86U). Even after opening ports in both the modem (LTE) and the router (Asus), the same way I have to access outside the local network something like Plex, it still doesn't work. There's no traffic.
edit: Forget it; it seems to be an innate 4G's problem that doesn't allow to port forward.
It was working fine, but now stopped saying port 51820 is in use .. but I don't see anything else that is using the port 51820
Hi Claudio, Not exactly sure what is causing port 51820 to be in use? What I'd do is stop and start the WireGuard service on the Synology NAS as well as restart wg-easy from the Docker package from within DSM and see if that does the trick. Hope this helps? Good luck in trying to resolve your issue!!
@@digital_aloha solved by restarting the NAS
@@claudiof.barbano5530 Great... Glad you got things working!
Thank you for providing the tutorial it was easy to follow from someone with basic ssh/docker knowledge, I just have one question, I have a firewall setting that allows various ports and denies everything else. After successfully connecting my laptop and phone to the wireguard on my DS918 I couldnt actually connect to anything external, turns out its the firewall setting. I've tried letting through 51820-21 udp/tcp both destination and source, but it i cant connect to the internet unless I disable the firewall setting that denies setting, just wondering if there is a solution that is more secure.
Hi binaryhelix101, You're welcome, glad the video was helpful and easy to follow!! Regarding your question I believe it is related to the Docker bridge network that wg-easy/wireguard is on. Have a look at this video that I created (I tagged the location that I think you need to start at) th-cam.com/video/-my0ilNnxR4/w-d-xo.html. Although I explain the issue as affecting DNS I think if you allow the Docker bridge network in your firewall rules you should get the results you are looking for... I think. Let me know if this does help!!
@@digital_aloha Thanks it worked, allowed 172.17.0.0 + subnet along with ports 51820-21 while denying other traffic. Funny enough I watched the other video but I stopped just before the Docker firewall part, was too impatient trying to install wireguard 😄
Hi binaryhelix101, Nice!! Glad adding the network did the trick for you!!
Hey! Thanks for this. Following to a T.
Just curious - are there any updates to 1.0.20210606 Wireguard version if we compile our own SPKs?
Hi wiffle, You’re welcome!! I believe if you do compile your own SPK file you’ll get a newer version of WireGuard, but can’t confirm for sure because I haven’t tried it (I’ll try it when I have a chance). I do see that someone mentioned version 1.0.20211208 in one of the project’s issues though so I’m thinking that may be the version you’d get - github.com/runfalk/synology-wireguard/issues/135. Good luck if you try it out and let me know how things go.
@@digital_aloha Great, thanks. Will try it.. but based on your previous video - it seems you weren't able to generate your own SPK using Synology itself? Needed a separate Ubuntu?
@@digital_aloha Another question - to confirm; this manages WG tunnelling THROUGH the Docker container. It doesn't automatically tunnel to the WireGuard SPK, correct? I ask as I'm running sudo wg show / wg0 in SSH and neither register.
@@digital_aloha @Digital Aloha Tech Tips Hey hey. Was able to get Wireguard working and connected through this - but, when remote, I'm unable to SSH into my Synology with WG connected. Nor can I access individual services using my local IP (ie. :PORT). Do you have issues with this as well?
@@fchou92 Hmm, I don't have that problem. I'm able to access all the services on my Synology NAS just fine. Hopefully you can find the root of your problem. Good luck!!
Hi, thanks for the great content! I set up wireguard as described in your video and it's working very well. I can access virtual machines and other docker apps, that are running in a macvlan. What I can not access, is other apps running also in the same bridge network as wireguard, like Portier or my Emby Server. What am I doing wrong?
Hi Eddy, You're welcome on the video and I'm glad you like my content!! Sorry for the delay in getting back to you and, if you haven't figured out the problem already, I believe this video will help -> th-cam.com/video/t9v-seCZY9A/w-d-xo.html. It covers setting up WireGuard to access Pi-hole through a bridge network, but I believe the concepts should be the same for Portier and Emby. Basically the issue is that WireGuard needs some additional iptables rules added so it is aware of the bridge network. Hope this helps and good luck!!
@@digital_aloha Thank you very much for your feedback! I will give it a try 👍
@@eddymouser4575 You're welcome and good luck!!
Thank you. Very easy.
You're welcome!! Glad to hear that you found it easy to setup WireGuard after watching the video.
Hello. I am brand new to Synology and docker and climbing the steep learning curve. I have docker and plesk installed. I also have a mullgardvpn subscription. I want to use their wireguard on my Synology. Following your guide am I setting up vpnserver that uses wireguard and basically mullguard is not needed or is it just setting up the wireguard “protocol” and it will still point to mullguard… (I also sent an email from a yahoo address a few days ago)
Hi Nick/T Man, I did get your email from a few days ago but didn't have a chance to respond just yet. I'll be responding here and feel free to follow up as well if I missed anything from your email.
Regarding your question on Mullvad VPN and setting up a connection to them through WireGuard, you would need to change up the setup slightly from what I've presented in the video. You'll need to install the SPK file for your Synology NAS to provide it the kernel module to run WireGuard, but after that you'll need to setup WireGuard as a client to Mullvad. This is something I haven't done just yet, but I'll prioritize it as a subject to work on and will release a video when I do have the steps to setup WireGuard as a VPN client to a VPN service provider like Mullvad.
If you make progress with your setup please let me know as well. Good luck to you and keep an eye on a new video regarding this specific setup (hopefully) in the near future.
Can this be configured only as client on NAS, server is on pi.
Hi S Shah, I've read that it is possible to run WireGuard on a Synology NAS as a client, but I've never been able to get it going myself. I'll be trying to figure this out and will release a video if I do, but if you figure it out please feel free to post how you did it!! Good luck and stay tuned!!
@@digital_aloha Hi, If the server is working on Synology could you please test removing the wg0.conf file and replace it with a client1.conf file that you created on a different wireguard server, restart/reboot, see if this converts it into client, also make sure you add PersistentKeepalive = 25 or so entry into client1.conf, Just wondering... cheers
@@sshah876 Thanks... I'll try this out!! Has this worked for you?
@@digital_aloha yes works very well.
@@sshah876 Great! Thank you... I'll give it a try.
Installed into DS218+ kernel not supported DSM 7.1.1-42962. can you help me to solve this? so i have no 7.1 image for apollolake!
@GeorgeStefanAchihaei I've updated the file WireGuard-apollolake-1.0.20220627.spk to the Google Drive linked in the description of the video. Hopefully that does the trick for you. Good luck and sorry for the delay in getting back to you.
Great tutorial
@tarocjsu thank you... I appreciate the compliment on the video!!
What a great tutorial - thanks for this!
Hi Adrian, You're welcome!! I'm glad you liked the tutorial!!
Work Perfect ;) THX !
Hi Piotr, You're welcome!! I'm glad that it things worked out for you!!
Another awesome video, thanks a lot !
Hi Roehl, You're welcome and thank you for taking the time to leave a comment. I appreciate it!!
When I imported the spk file for my NAS 718+ (wireguard appollolake) my package center threw error asking me to repair something...I didnt want to mess with my system so went ahead and uninstalled it. Is this expected? I used the 7.1 version as I am running DSM 7.1.x on my NAS
@sammywonks404 It should install without needing to repair anything... Maybe the repair was coincidental. Did the repair request show up in Package Center prior to you trying to install the SPK file?
@@digital_aloha No, it showed up after I tried importing the spk file which I downloaded from the google drive you had in your instructions
Thanks you very much!
@antoniobenavente9734 You're welcome!!
Hi Ferdinand,
Thx for the excellent video.
I just have a problem installing the apollolake spk on my ds218+ running DSM 7.0.1-42218 Update 3.
Message: "The operation failed. Please sign in again on DSM and retry"
Any suggestions?
BRPPee
On the runfalk github site there is a newer version of the spk ( WireGuard-apollolake-1.0.20201221.spk ), which returns "invalid file format"
oops, that was dsm 6.2...
Hi BRPPee, I haven't run into your problem before, but what I've found that other suggest is first reboot the NAS. Next, if you have other third party packages installed try disabling and/or removing the package and see if that helps. Lastly try another web browser and see if that does the trick. Hopefully one of these suggestions helps? Good luck to you and let me know if any of these suggestions helped!
We should probably make some requests to Synology to natively support this piece of software. I'll add the link in a separate comment.
Can you do a Split Tunnel and Full Tunnel configs like in your openVPN tutorial so you can easily switch between them?
Hi Popcorncandy, Yes, you should be able too! Here are a couple of examples from my setup.
For Full Tunnel you just need to download the configuration file from wg-easy which should look like this if you edit it or view it after importing it into the WireGuard client.
[Interface]
PrivateKey =
Address = 10.8.0.2/24
DNS = 1.1.1.1
[Peer]
PublicKey =
PresharedKey =
AllowedIPs = 0.0.0.0/0, ::/0
PersistentKeepalive = 0
Endpoint = :51820
For Split Tunnel edit the same file and change the AllowedIPs line to include just the network that wg-easy is running on. In my case it would be set to 192.168.81.0/24. The full example would be something like the following.
[Interface]
PrivateKey =
Address = 10.8.0.2/24
DNS = 1.1.1.1
[Peer]
PublicKey =
PresharedKey =
AllowedIPs = 192.168.81.0/24
PersistentKeepalive = 0
Endpoint = :51820
Hope this helps and good luck to you in your setup!!
@@digital_aloha Great ! thank you very much for your in depth response !
@@Popcorncandy09 You're welcome. Hope everything works out!!
Wireguard doenst start with a v1000 and DS 7.2. After starting with SSH, the app will "close manually"
Yes I just updated my DSM and am running into problems. wg-easy keeps closing and restarting in a loop and I get an email notification every 2 minutes. I cant even delete it!
@dominiknill1163 Seems you and @jlrgamer1 are having the same issue ☹. I don't have a Synology NAS with the same processor so no way for me to troubleshoot. Maybe check out github.com/runfalk/synology-wireguard to see if the developer has any info that can help. Good luck to you both in finding a solution!!
Thank you that help's me.
Hi khalid, You're welcome!! Happy to hear that the video helped you!!
Hello how can i connect to my nas or docker container 192.168.178.2:5001? ,thats not possible!
Hi Johannes, If you can't connect to your NAS or Docker containers then it is most likely that you aren't connected properly to WireGuard. Double check on the WireGuard/wg-easy side of things. Hope this helps? Good luck to you!!
back to you bro can you provide me spk file for dsm 7.1 if it is possible ?
The package arch is Geminilake for dsm720+
Thanks
Hi there... See if the spk file listed here works for you - drive.google.com/drive/folders/1EEwJkX0W51gisiEiMzzUzYmipNkAE3lq and let me know how it goes. I tried the kvmx64 spk file and that one worked for me when installing on Virtual DSM. Good luck to you!!
@@digital_aloha Thank you bro i will check it and back to you
@@Tachkila You're welcome! Hopefully the spk file works out!!
@@digital_aloha hi bro it work fine as the previous one that you share with us in your previous video on dsm 7 but the problem is no conection when i try to connect using wireguard from my android phone also from another phone and other laptop anyway to check logs or. missing something ? i follow your previous video and it work fine but when i update nas to dsm 7.1 vpn mention is connected but no conection bro
Additionnal information when i run command
wg show
root@vpn:/# wg
interface: wg0
public key: sds87SDS7D8S78D77XXXXXXXXXXXXX=
private key: (hidden)
listening port: 51820
peer: 9Z7UoboXXXXXXXXXXXXXXXXXXX=
preshared key: (hidden)
allowed ips: 192.168.2.2/32
will this still work even though my ISP is on CGNAT?
Hi yttam15 D, This probably won't work with CGNAT. You'll need to be able to setup port forwarding for this to work. In your case I would check out Tailscale which I have a video on - th-cam.com/video/x7SVbkHaEaA/w-d-xo.html. Good luck in your setup!!
@@digital_aloha thanks will check that video.
@@yttam15d41 Hopefully Tailscale does the trick for you.
Could one be made for thhe V1000 CPU?
DS1821+ AMD Ryzen V1500B Quad Core 8 Yes V1000 DDR4 ECC SODIMM 4GB
There is no version for this CPU
Hi MrHorseYT, I've compiled an SPK file for the v1000 CPU and have uploaded it to the Google Drive link posted in the description of this video (WireGuard-v1000-1.0.20211208.spk). See if it works for you!
@@digital_aloha That works perfectly, thank you very much!. I did try Tailscale and while that connected, it didn't allow local access (maybe a port forward issue)
@@L0rdLogan You're welcome. Glad the SPK file worked for you. Regarding Tailscale, if you want access to other local devices you need to setup your node as a subnet router. Check out this video if you are interested -> th-cam.com/video/uJ8PsImiDrM/w-d-xo.html.
THANK YOU!
Hi Ihsan, You're welcome!!
why can i not write sudo, it says command does not exist.
Hi Jacob, I have no idea why sudo doesn't work for you? It should be a standard command that comes with the operating system that ships with Synology NASs. What Synology NAS model are you using by the way?
@@digital_aloha i got this installed, i using DSM 7.1 - DS420+ - but how can i put my TorGuard vpn on this ? i want to my synology nas server using Torguard vpn. aslo i got PrivateKey and publickey from torguard i can put in, but how ?
@@digital_aloha i hope you might be able to help me with this over teamviewer, to set up nas server run on wireguard with torguard vpn .. i found out that openvpn on synology runs max 7 mb / s. and have read that wireguard should do better than openvpn network
@@jacoblaursen5398 Great, I'm glad you got it installed and actually the setup described in this video is more so for setting up WireGuard as a VPN server and not a VPN client. I believe it is possible, but I've never figured it out as of yet.
@@jacoblaursen5398 I'll get back to you if I do figure out how to setup WireGuard as a VPN client (I'll probably release a video if I do). Then we can connect up an try to setup torguard vpn in your environment.
thx😊
Hi John, You're welcome!!
Oh i forgot to mention, but anyone that has access to my nas via vpn, has also access to my docker containers. Anyway to avoir that ? I dont want my parents or my cousins to mess with radarr et stuff 😂
Muy buenas espero alguien me pueda ayudar porque tengo un problema y no se como solucionarlo, todo me va bien pero cuando intento conectar otro dispositivo ese dispositivo no puede conectarse a mis servidores internos de casa, por ejemplo no puedo entrar en el nas ni tampoco en ningun servicio del nas, alguna ayuda?? porfavor me estoy volviendo loco con esto JAJAJA
xynology very slow. 10 mbit
Is it slow as well with another VPN server like OpenVPN? Just curious if you see a difference between a Docker based and native VPN connection. I haven't seen much of a difference on my end.