{"id":11194,"date":"2026-06-21T23:10:00","date_gmt":"2026-06-21T23:10:00","guid":{"rendered":"https:\/\/bitep.net\/blog\/2026\/06\/21\/wireguard-vpn-ubuntu-24-04-d%c9%99-sad%c9%99-v%c9%99-t%c9%99hluk%c9%99siz-vpn-qurmaq\/"},"modified":"2026-06-22T08:57:53","modified_gmt":"2026-06-22T08:57:53","slug":"wireguard-vpn-ubuntu-24-04-d%c9%99-sad%c9%99-v%c9%99-t%c9%99hluk%c9%99siz-vpn-qurmaq","status":"publish","type":"post","link":"https:\/\/bitep.net\/blog\/2026\/06\/21\/wireguard-vpn-ubuntu-24-04-d%c9%99-sad%c9%99-v%c9%99-t%c9%99hluk%c9%99siz-vpn-qurmaq\/","title":{"rendered":"WireGuard VPN: Ubuntu 24.04-d\u0259 Sad\u0259 v\u0259 T\u0259hl\u00fck\u0259siz VPN Qurmaq"},"content":{"rendered":"

WireGuard N\u0259dir?<\/strong>
\nWireGuard, m\u00fcasir kriptoqrafiya v\u0259 minimalist dizaynla haz\u0131rlanm\u0131\u015f \u0259n s\u00fcr\u0259tli v\u0259 t\u0259hl\u00fck\u0259siz VPN protokollar\u0131ndan biridir. OpenVPN v\u0259 IPsec-d\u0259n daha s\u00fcr\u0259tli, daha sad\u0259 v\u0259 daha t\u0259hl\u00fck\u0259sizdir. Bu b\u0259l\u0259d\u00e7id\u0259 Ubuntu 24.04-d\u0259 WireGuard VPN nec\u0259 qurulur<\/strong>, server v\u0259 client konfiqurasiya n\u00fcmun\u0259l\u0259ri il\u0259 birlikd\u0259 \u0259trafl\u0131 izah ed\u0259c\u0259yik.<\/p>\n

Niy\u0259 WireGuard?<\/strong>
\n– S\u00fcr\u0259t<\/strong>: OpenVPN-d\u0259n 3-4 d\u0259f\u0259 s\u00fcr\u0259tlidir.
\n– T\u0259hl\u00fck\u0259sizlik<\/strong>: M\u00fcasir kriptoqrafiya (ChaCha20, Poly1305, BLAKE2) istifad\u0259 edir.
\n– Sad\u0259lik<\/strong>: Minimal konfiqurasiya il\u0259 i\u015fl\u0259yir.
\n– Mobil Uy\u011funluq<\/strong>: Android v\u0259 iOS \u00fc\u00e7\u00fcn d\u0259st\u0259yi var.<\/p>\n

\n

Ubuntu 24.04 haz\u0131rl\u0131\u011f\u0131: portlar, a\u00e7arlar v\u0259 sudo<\/h2>\n
    \n
  1. Ubuntu 24.04 VPS (v\u0259 ya fiziki server).<\/li>\n
  2. Root v\u0259 ya sudo giri\u015f imkan\u0131.<\/li>\n
  3. \u0130nternet ba\u011flant\u0131s\u0131.<\/li>\n
  4. \u018fsas Linux komandalar\u0131 il\u0259 tan\u0131\u015fl\u0131q.<\/li>\n<\/ol>\n
    \n

    Konfiqurasiya prosesi: a\u00e7ar c\u00fctind\u0259n servis aktivasiyas\u0131na<\/h2>\n

    WireGuard paketinin qura\u015fd\u0131r\u0131lmas\u0131<\/h3>\n
    sudo apt update && sudo apt install -y wireguard\n<\/code><\/pre>\n
    A\u00e7ar c\u00fctinin yarad\u0131lmas\u0131: private v\u0259 public key<\/h3>\n
    wg genkey | sudo tee \/etc\/wireguard\/privatekey | wg pubkey | sudo tee \/etc\/wireguard\/publickey\n<\/code><\/pre>\n
    Server t\u0259r\u0259fi: wg0.conf v\u0259 iptables qaydalar\u0131<\/h3>\n
    [Interface]\nPrivateKey = $(sudo cat \/etc\/wireguard\/privatekey)\nAddress = 10.0.0.1\/24\nListenPort = 51820\nPostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE\nPostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE\n\n[Peer]\nPublicKey = <CLIENT_PUBLIC_KEY>\nAllowedIPs = 10.0.0.2\/32\n<\/code><\/pre>\n
    Client t\u0259r\u0259fi: DNS, Endpoint v\u0259 PersistentKeepalive<\/h3>\n
    [Interface]\nPrivateKey = <CLIENT_PRIVATE_KEY>\nAddress = 10.0.0.2\/24\nDNS = 8.8.8.8\n\n[Peer]\nPublicKey = $(sudo cat \/etc\/wireguard\/publickey)\nEndpoint = <SERVER_IP>:51820\nAllowedIPs = 0.0.0.0\/0\nPersistentKeepalive = 25\n<\/code><\/pre>\n
    Servisin aktivl\u0259\u015fdirilm\u0259si v\u0259 systemd inteqrasiyas\u0131<\/h3>\n
    sudo systemctl enable --now wg-quick@wg0\n<\/code><\/pre>\n
    \n
    Firewall, IP forwarding v\u0259 a\u00e7arlar\u0131n qorunmas\u0131<\/h2>\n
    UFW qaydalar\u0131: port 51820\/udp<\/h3>\n
    sudo ufw allow 51820\/udp\n<\/code><\/pre>\n
    IP forwarding: NAT \u00fc\u00e7\u00fcn sysctl ayarlar\u0131<\/h3>\n
    echo \"net.ipv4.ip_forward=1\" | sudo tee -a \/etc\/sysctl.conf && sudo sysctl -p\n<\/code><\/pre>\n
    Private key fayl\u0131n\u0131n qorunmas\u0131: chmod 600<\/h3>\n
    sudo chmod 600 \/etc\/wireguard\/privatekey\n<\/code><\/pre>\n
    \n
    N\u00f6vb\u0259ti add\u0131mlar: mobil cihazlar v\u0259 Windows client-l\u0259ri<\/h2>\n
    WireGuard VPN, Ubuntu 24.04-d\u0259 olduqca sad\u0259 v\u0259 t\u0259hl\u00fck\u0259siz bir \u015f\u0259kild\u0259 qurula bil\u0259r. Bu b\u0259l\u0259d\u00e7i il\u0259 server v\u0259 client konfiqurasiya n\u00fcmun\u0259l\u0259ri<\/strong> daxil olmaqla, WireGuard VPN-i bir ne\u00e7\u0259 d\u0259qiq\u0259d\u0259 i\u015f\u0259 sala bil\u0259rsiniz. G\u0259l\u0259c\u0259kd\u0259 mobil cihazlar<\/strong> v\u0259 Windows<\/strong> \u00fc\u00e7\u00fcn d\u0259 client konfiqurasiya n\u00fcmun\u0259l\u0259ri \u0259lav\u0259 ed\u0259c\u0259yik.<\/p>\n
    \n
    M\u0259nb\u0259l\u0259r:<\/h3>\n