{"slug":"about-wireguard","title":"About WireGuard","tags":["tailscale"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# About WireGuard\r\n\r\nLast validated: Jan 5, 2026\r\n\r\n[WireGuard](https://www.wireguard.com/) is an open source network tunneling protocol for creating [encrypted](https://tailscale.com/docs/concepts/tailscale-encryption) communication channels. It's designed to replace other VPN protocols, such as OpenVPN and IPsec, as a simpler and lighter-weight alternative. The protocol maintains concurrent connections with minimal overhead per session. Independent [cryptographers have reviewed](https://eprint.iacr.org/2018/080.pdf) the WireGuard protocol, and security auditors have examined the code implementation, identifying and allowing for the correction of minor issues. For more about WireGuard's technical details, review their [whitepaper](https://www.wireguard.com/papers/wireguard.pdf).\r\n\r\nTailscale builds on top of WireGuard and adds additional components such as [NAT traversal](https://tailscale.com/blog/how-tailscale-works), TCP transport capabilities, and [access control policies](https://tailscale.com/docs/features/access-control). Tailscale's implementation differs from standard WireGuard implementations in several ways. For example, where WireGuard provides encrypted tunnels between endpoints, Tailscale constructs a [mesh network](https://tailscale.com/learn/understanding-mesh-vpns) topology with additional network services and authentication mechanisms. Tailscale maintains a fork of the open source [`wireguard-go`](https://github.com/tailscale/wireguard-go) package, which comes with Tailscale clients.\r\n\r\nTailscale has received reports of technical conflicts when running [Tailscale concurrent with other WireGuard-based VPNs](https://tailscale.com/docs/reference/faq/other-vpns), such as [Mullvad VPN](https://mullvad.net/en). These conflicts stem from how each implementation handles network interfaces and routing tables, requiring specific configuration for concurrent operation.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>About WireGuard</h1>\n<p>Last validated: Jan 5, 2026</p>\n<p><a href=\"https://www.wireguard.com/\">WireGuard</a> is an open source network tunneling protocol for creating <a href=\"https://tailscale.com/docs/concepts/tailscale-encryption\">encrypted</a> communication channels. It's designed to replace other VPN protocols, such as OpenVPN and IPsec, as a simpler and lighter-weight alternative. The protocol maintains concurrent connections with minimal overhead per session. Independent <a href=\"https://eprint.iacr.org/2018/080.pdf\">cryptographers have reviewed</a> the WireGuard protocol, and security auditors have examined the code implementation, identifying and allowing for the correction of minor issues. For more about WireGuard's technical details, review their <a href=\"https://www.wireguard.com/papers/wireguard.pdf\">whitepaper</a>.</p>\n<p>Tailscale builds on top of WireGuard and adds additional components such as <a href=\"https://tailscale.com/blog/how-tailscale-works\">NAT traversal</a>, TCP transport capabilities, and <a href=\"https://tailscale.com/docs/features/access-control\">access control policies</a>. Tailscale's implementation differs from standard WireGuard implementations in several ways. For example, where WireGuard provides encrypted tunnels between endpoints, Tailscale constructs a <a href=\"https://tailscale.com/learn/understanding-mesh-vpns\">mesh network</a> topology with additional network services and authentication mechanisms. Tailscale maintains a fork of the open source <a href=\"https://github.com/tailscale/wireguard-go\"><code>wireguard-go</code></a> package, which comes with Tailscale clients.</p>\n<p>Tailscale has received reports of technical conflicts when running <a href=\"https://tailscale.com/docs/reference/faq/other-vpns\">Tailscale concurrent with other WireGuard-based VPNs</a>, such as <a href=\"https://mullvad.net/en\">Mullvad VPN</a>. These conflicts stem from how each implementation handles network interfaces and routing tables, requiring specific configuration for concurrent operation.</p>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}