Home / Marketplace / WireGuard on Ubuntu 24.04 LTS

WireGuard on Ubuntu 24.04 LTS

WireGuard is a fast, modern VPN protocol with state-of-the-art cryptography and a minimal attack surface. This image gives you a production-ready deployment within minutes of first boot — no dependency wrangling, no manual hardening checklist. Published and maintained by Derek Coleman & Associates Inc: freshly rebuilt against current security advisories and deployable straight from the Azure Marketplace into your own subscription.

Get it on Azure Marketplace Deploy on Azure Support & quick start

Version: WireGuard (Ubuntu 24.04 package 1.0.20210914)Platform: Ubuntu 24.04 LTSPorts: 51820/udp (VPN)Category: Networking & VPN

What's included

WireGuard 1.0.20210914 installed from the official upstream source
Ubuntu 24.04 LTS base with automatic security updates enabled
No shared or default passwords — a unique admin credential is generated on your VM at first boot
Trusted Launch support: Secure Boot + vTPM
Azure Monitor Agent, Defender for Cloud, and Update Manager install cleanly

Quick start

Deploy from the Azure Marketplace (Get It Now → Create), choosing your SSH key at the Administration step.
Allow inbound SSH (22) for yourself plus the application port(s): 51820/udp (VPN) — restrict to your own IP where possible. The in-image firewall already allows them; only the Network Security Group (NSG) keeps them closed.
Add a peer with `wg set` and `wg-quick save` (see First login below), then configure the client with the server's public key and endpoint.
Enable forwarding/NAT rules for the subnets you want to reach through the tunnel (sysctl is pre-set in /etc/sysctl.d/99-wireguard.conf).

Get your admin password (one time)

ssh <your-username>@<VM-IP>
sudo cat /etc/wireguard/wg0.conf  # server config (private key, 10.8.0.1/24); no peers are pre-configured

There is no credential file to read — this image generates the server key pair only. Peer configs are created by you (see the steps above); keep /tmp/peer.key off the server once copied.

Common use cases

Site-to-Azure VPN tunnels
Secure remote access for teams
Private connectivity between VNets and devices
Road-warrior VPN for laptops and phones

Why our images

Freshly rebuilt against the latest security advisories, no shared default credentials, Trusted Launch support, and automatic OS security updates — everything runs in your own Azure subscription under your governance.

Need help?

Product support page
support@dcassociatesgroup.com
Contact form