免费 · 网络与 IT 基础设施
WireGuard 配置生成器.
用浏览器内生成的密钥创建 WireGuard 服务器和客户端配置，支持 IPv4/IPv6、全局或分流隧道以及二维码。
Leave empty to keep the client’s own DNS.
25 s keeps NAT mappings open; 0 disables it.
Preparing…
使用方法: WireGuard 配置生成器
输入数据或选择文件，调整设置并生成结果。复制或下载之前，请检查结果。
限制与支持格式
输入内容在您的设备上处理。
英语技术说明
Keys use the browser’s secure random generator and X25519; they are never sent or stored by PasteZap, so save the files yourself. Server NAT rules use iptables. Everything is calculated in your browser; nothing is sent or probed on the network.
Private keys are random 32-byte values clamped as RFC 7748 requires; public keys are computed with X25519. Each client gets the next address in the tunnel network, listed as AllowedIPs on the server.
A server at vpn.example.com:51820 with laptop and phone clients gets wg0.conf, two client files with pre-shared keys and QR codes for the mobile app.