mirror of
https://github.com/jetkvm/kvm.git
synced 2026-03-02 22:58:00 -05:00
Feature Request: Add WireGuard Support #44
Labels
No labels
component/keyboard-layout
component: cloud
component: device screen
component: extensions
component: hid/keyboard
component: hid/mouse
component: network
component: timesync
component: ui
component: updater
component: usb
component: usb/hid
component: usb/storage
component: video
component: webrtc
component: webserver
need-more-details
status: working-in-progress
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/kvm#44
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Gummibaer on GitHub (Jan 12, 2025).
Description
Would it be possible to implement support for WireGuard in JetKVM?
WireGuard is a modern, lightweight, and highly efficient VPN solution that could greatly enhance JetKVM's networking capabilities. Its simplicity and speed make it an excellent choice for secure communication and managing network connections.
@adrianmeraz commented on GitHub (Jan 12, 2025):
Wouldn't the Tailscale feaure serve this purpose? It's based on Wireguard, and has more functionality.
@Gummibaer commented on GitHub (Jan 12, 2025):
Thank you for your response!
While the Tailscale feature is indeed based on WireGuard and provides additional functionality, there are several key advantages to having native WireGuard support directly in JetKVM:
Eliminates the Need for External Services
Lightweight and Direct Integration
Flexibility for Advanced Configurations
Tailscale is an excellent solution for certain use cases, but having the option for native WireGuard support would offer greater flexibility and control for users who prefer or require a direct, self-contained approach to VPN management.
@lbayerlein commented on GitHub (Jan 12, 2025):
+1
@Nobeernogman commented on GitHub (Jan 12, 2025):
+1
@geerlingguy commented on GitHub (Jan 12, 2025):
Just cross-linking the Tailscale issue for completeness: https://github.com/jetkvm/kvm/issues/44
@adrianmeraz commented on GitHub (Jan 13, 2025):
Alright, I'm convinced. Having the option of native Wireguard sounds useful in the cases you've described.
@rcludwick commented on GitHub (Jan 14, 2025):
To add another point. Tailscale is good in many cases, but I've been slowly removing use cases for it in my home network. The reality is that there's kinda too much magic in Tailscale for it's own good sometimes and a simpler networking is just well simpler.
@kpma1985 commented on GitHub (Feb 14, 2025):
you can install it urself via ssh
i installed cloudflared on it 🗡
@vedeyn commented on GitHub (Feb 24, 2025):
+1
@SamuelDudley commented on GitHub (Mar 6, 2025):
+1
Looking to add wireguard to a jetkvm and found this blog post howto guide: https://simonmicro.de/blog/hacking/wireguard-vpn-on-a-jetkvm/
@simonmicro commented on GitHub (Mar 7, 2025):
Hehehe, I wrote it, because I found this issue - how small the world really is... Problem is with their implementation of the Web-RTC layer. As also linked in that post, the Tailscale plugin suffers from the same issue: The ICE in the browser is maybe aware of how to reach the JetKVM endpoint, but you'll likely run into another issue.
Checking with Web-RTC debug the issue becomes visible... During my tests I used an intermediate server (OPNsense), so I could not reach the JetKVM IPv4 directly, as WireGuard is a P2P solution and I did not setup the WireGuard server as relay. So, I just used good old
ssh -L, which is able to tunnel the TCP packets for HTTP, but cannot cover the Web-RTC traffic. So, if you want to use this solution, the JetKVM basically has to connect itself directly with the target system, from which you want to remote-control it, or you have to setup a WireGuard relay so you can reach the JetKVM ip directly...Alternatively, as Web-RTC was designed with these issues in mind, a TURN server would be required. But we cannot set one on the JetKVM and also this would sort of introduce additional delay (beside someone needing to host it)... Meh. Other solutions, like the PiKVM, have a fallback for that case, which consists of the CPU taking snapshots of the stream and providing them as image directly over HTTP to the browser, hence bypassing the broken Web-RTC connection...
Just my two cents onto this issue...
@DanForever commented on GitHub (May 15, 2025):
Has there been any movement on this?
@IrishTR commented on GitHub (May 21, 2025):
Having native Wireguard would be awesome option to have for this solution, hopefully it gets future traction, thanks!
@gyllen commented on GitHub (Jun 4, 2025):
Plus one on this Wireguard support would be really useful
@purepani commented on GitHub (Sep 28, 2025):
Native wireguard support would help for anyone who doesn't tailscale but uses different mesh VPN service, since many different VPN providers offer wireguard support
@phonkd commented on GitHub (Oct 24, 2025):
+1
@itsjustnickdev commented on GitHub (Nov 9, 2025):
+1
@amaksymov commented on GitHub (Nov 18, 2025):
+1
@DanForever commented on GitHub (Dec 11, 2025):
To be clear, I want wireguard so I can connect it to my local self-hosted vpn
@hoh commented on GitHub (Dec 15, 2025):
I think many people are looking for doing exactly that.
@DonOregano commented on GitHub (Dec 28, 2025):
Would love this! I don't want to sign up for cloud services when I can avoid it, so the built-in cloud thing or tailscale do not appeal to me at all.
@bcyran commented on GitHub (Jan 13, 2026):
I created a script automating WireGuard building and installation steps described in already mentioned blog post by @simonmicro: jetkvm-wireguard-setup.
Personally, I did not encounter any Web-RTC issues. My setup involves a VPS acting as a sort of gateway to which all clients, including JetKVM, connect to. I can freely use JetKVM from other clients connected to the VPS.
@tunip commented on GitHub (Feb 1, 2026):
Shoutout to @bcyran for the automated WireGuard build script. Works like a charm with self-hosted Pangolin. 🙌
@afunworm commented on GitHub (Feb 19, 2026):
+1