WireGuard VPN implemented on Amazon Linux 2 with Load Balancing
This is an example repo to demonstrate WireGuard VPN deployed on Amazon EC2 with Network Load Balancer, a Route53 Domain and Amazon Linux 2. Keys are handled via AWS Parameter Store, encrypted with AWS KMS to prevent the need for reconfiguration when instances are scaled, updated or terminated.
Disclaimer: provided as an example and some assumptions have been made for network layout.
Reach out on Reddit with any queries or tips!
wg genkey | tee privatekey | wg pubkey > publickey
then save them in encrypted SSM Parameters called /wireguard/private
and /wireguard/peerpublic
config/wireguard-${your region}.json
to suitpipeline.yml
via Cloudformation