Simple definition
WireGuard is an encrypted VPN protocol using UDP and cryptographic key pairs to establish secure peer-to-peer tunnels.
Purpose and use
WireGuard establishes encrypted VPN tunnels between peers identified by their public keys.
How does it work?
It uses UDP with a configurable listening port. AllowedIPs prefixes participate in address-to-peer association and packet handling.
Example and verification
If a tunnel is established but applications are unreachable, check routes, AllowedIPs, IP forwarding and firewall rules on both sides.
Points to watch
A recent handshake does not prove that every subnet is correctly routed. Private-key protection and peer revocation remain necessary.
In short
WireGuard supplies encrypted transport; resource access still depends on routing and authorization around the tunnel.