# Wireguard Question/Help

**URL:** <https://community.umbrel.com/t/wireguard-question-help/18751>\
**Category:** Support and Troubleshooting\
**Created:** [August 10, 2024, 11:57am UTC](https://community.umbrel.com/t/wireguard-question-help/18751 "2024-08-10T11:57:02Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Diiikco](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@Diiikco](https://community.umbrel.com/u/Diiikco)\
**Post date:** [August 10, 2024, 11:57am UTC](https://community.umbrel.com/t/wireguard-question-help/18751/1 "2024-08-10T11:57:02Z")

</div>

Hello. I’m trying to understand the Wireguard application and what it does. I have installed it and I have added a client. There doesn’t seem to many configuration options for the client adding apart from an IP address. My goal or expectation was that it would mean my umbrel to the outside world would now be anonymous? So if I’m browsing Firefox for example on my umbrel… my traffic would be routed through the wireguard app I’ve installed?

Can anyone point me to some reading or guides or can explain like I’m 5?

Thank you

---

<div class="post-metadata">

**Author:** ![denny](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/denny/32/6330_2.png) [@denny](https://community.umbrel.com/u/denny)\
**Post date:** [August 10, 2024, 12:22pm UTC](https://community.umbrel.com/t/wireguard-question-help/18751/2 "2024-08-10T12:22:37Z")

</div>

Hey, I hope this thread can help you:

> [@Wireguard client, Not resolving DNS for umbrel.local](https://community.umbrel.com/t/wireguard-client-not-resolving-dns-for-umbrel-local/17509):
>
> I just installed Wireguard from the app store. On my mobile device side, I installed wireguard and scanned the QR code I generated for a new client. On the mobile side the Endpoint is umbrel.local and the application says it can’t resolve the DNS hostname. I have tried with the IP that wget -qO- [ifconfig.me](http://ifconfig.me) gives me from the terminal on my umbrel home, but it doesn’t work either. Could someone help me with this? Thanks in advance

---

<div class="post-metadata">

**Author:** ![Diiikco](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@Diiikco](https://community.umbrel.com/u/Diiikco)\
**Post date:** [August 10, 2024, 1:18pm UTC](https://community.umbrel.com/t/wireguard-question-help/18751/3 "2024-08-10T13:18:06Z")

</div>

Thanks - I read this one previously, and it’s more around setting up connecting your mobile device. It doesn’t really answer my question.

---

<div class="post-metadata">

**Author:** ![denny](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/denny/32/6330_2.png) [@denny](https://community.umbrel.com/u/denny)\
**Post date:** [August 10, 2024, 2:20pm UTC](https://community.umbrel.com/t/wireguard-question-help/18751/4 "2024-08-10T14:20:55Z")

</div>

Ok. From what I understand, you want to know what Wireguard is and how it works?! 🙃

WireGuard is a simple yet fast and modern VPN (Virtual Private Network) that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than other VPN solutions, and is easier to configure. Here’s a simplified explanation of how it works:

**1. VPN Basics:**

A VPN creates a secure, encrypted connection between your device and a VPN server. This means that all your internet traffic is routed through the VPN server, which can hide your IP address and encrypt your data, providing privacy and security.

**2. WireGuard’s Role:**

WireGuard is the software that establishes and manages this VPN connection. It is known for its high speed and simplicity.

---

<div class="post-metadata">

**Author:** ![Diiikco](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@Diiikco](https://community.umbrel.com/u/Diiikco)\
**Post date:** [August 10, 2024, 2:32pm UTC](https://community.umbrel.com/t/wireguard-question-help/18751/5 "2024-08-10T14:32:47Z")

</div>

Thank you for the explanation.

To be a bit more specific then - I think I have 2 questions…

Q1: Once I install the Wireguard application on my Umbrel, is it configured to connect to a VPN server by default? i.e. It is already connected to a VPN server without me having to do anything at all. (If not - how do I find one to connect to? Do I have to pay someone?)

Q2: Once the Wireguard application is configured to connect to a VPN server - does my Umbrel route traffic through it by default?

Thanks

---

<div class="post-metadata">

**Author:** ![Diiikco](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@Diiikco](https://community.umbrel.com/u/Diiikco)\
**Post date:** [August 11, 2024, 8:44am UTC](https://community.umbrel.com/t/wireguard-question-help/18751/6 "2024-08-11T08:44:27Z")

</div>

Some further understanding I’ve gained…

Wireguard is a VPN (virtual private network) protocol (language/instructions/crytography). Much like Tailscale, it can enable you to setup a secure network between your devices. One benefit of this being that you can access your Umbrel from anywhere.

Installing the Wireguard app, likely adds your Umbrel to the virtual private network. You can then add other “clients” such as your phone. I already use Tailscale to do this and I found it easier.

For the question around servers and anonymous browsing. Wireguard is just the tool that sends secure messages around the private network. Once your stuff leaves your VPN and goes to your ISP (internet service provider), they will do what they want with it.

A “VPN Server” is just a name to refer to someone else’s server that you can connect to, to make your private network larger. You might be in Europe and the VPN Server is in Japan. Your communication is now “Wireguarded” to Japan, and the server in Japan is now the place where your “stuff” leaves from, to go to the wider internet.

From what I can understand, you pretty much just shift where you are placing your “trust”, from your ISP to the Japan VPN server.

Can someone confirm if I am correct?

---

<div class="post-metadata">

**Author:** ![denny](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/denny/32/6330_2.png) [@denny](https://community.umbrel.com/u/denny)\
**Post date:** [August 11, 2024, 6:54pm UTC](https://community.umbrel.com/t/wireguard-question-help/18751/7 "2024-08-11T18:54:41Z")

</div>

You’ve got a solid understanding of Wireguard and how it functions in the context of VPNs. Here’s a breakdown to confirm and clarify your points:

**1. Wireguard as a VPN Protocol:** 🕵️‍♂️  
Yes, Wireguard is a VPN protocol that uses state-of-the-art cryptography to create secure connections between devices. It allows you to set up a secure network, much like Tailscale, enabling remote access to your devices such as your Umbrel server.

**2. Setting Up Wireguard:** ⚙  
Installing the Wireguard app on your device sets up a secure VPN connection. Adding your Umbrel to this network allows secure access to it from anywhere. Adding other clients (like your phone) to this VPN network allows all these devices to communicate securely.

**3. Comparison with Tailscale:** ⚖  
Tailscale also uses Wireguard under the hood but simplifies the setup and management of the VPN network, making it easier for users who prefer a more user-friendly approach.

**4. Wireguard and ISP:** ☂  
Correct, Wireguard secures the communication between your devices within the VPN. However, once the data exits the VPN (at the VPN server), it goes through your ISP and can be subjected to their policies and monitoring.

**5. VPN Server Functionality:** 🇯🇵  
A VPN server acts as an intermediary in the VPN network. By connecting to a VPN server in another location (e.g., Japan), your internet traffic appears to originate from that server, thereby masking your actual location.

**6. Trust Shift:** 👁  
You are correct that using a VPN server shifts your trust from your ISP to the VPN server provider. While your ISP might not be able to see the contents of your traffic when using a VPN, the VPN server provider can potentially see it, depending on their logging policies and practices.

To sum up, your understanding is accurate. Using Wireguard or any other VPN protocol secures the communication between your devices, but where your data exits the VPN (the VPN server) becomes a new point of trust. This is a fundamental aspect of using VPN services, whether self-hosted or provided by a third party.

If you have any further questions, let me know. 🙂

---

<div class="post-metadata">

**Author:** ![Tiger](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/tiger/32/6762_2.png) [@Tiger](https://community.umbrel.com/u/Tiger)\
**Post date:** [February 5, 2025, 4:47pm UTC](https://community.umbrel.com/t/wireguard-question-help/18751/8 "2025-02-05T16:47:41Z")

</div>

I wanted to ask how it is possible to change the language of wireguard easy in umbrelos. in os house the same docker has a directive “lang=en” that allows it to be changed to the desired language. something not feasible in umbrelos that does not allow you to modify the variables. am I wrong or is it possible?
