VPNHUB: WG Portal

Web-Based WireGuard VPN Management

A beautiful and simple UI to manage your WireGuard peers and interfaces. Create, monitor, and revoke VPN access from one self-hosted portal — no command line required. Built on WireGuard's official wgctrl library.

Get started

Everything You Need to Run WireGuard at Scale

Peer Management

Create, edit, enable, or disable WireGuard peers from a clean web interface. New users are activated without disturbing existing VPN connections

Zero-Touch Onboarding

Every client receives a QR code and a ready-to-import wg-quick configuration file, delivered automatically by email

Built on wgctrl

Drives WireGuard's official wgctrl library, so it works with your existing WireGuard setup and manages multiple interfaces side by side

Enterprise Authentication

Authenticate against a database, OAuth/OIDC, or LDAP (Active Directory, OpenLDAP), with passkey support for passwordless login

Self-Hosted, Single Binary

The whole application ships as one binary and is Docker ready. Your private keys and peer data never leave your own infrastructure

Monitoring & Automation

Exposes Prometheus metrics for monitoring and alerting, a REST API for client deployment, and webhooks for custom actions

Comprehensive VPN Management Capabilities

Network & Addressing

  • •Automatic IP selection from the client network pool
  • •Handles route and DNS settings the same way wg-quick does
  • •Support for multiple WireGuard interfaces
  • •IPv6 ready
  • •Pluggable backends: wgctrl, MikroTik, or pfSense

Access Control

  • •Peer expiry for time-limited access
  • •Seamless enable / disable without dropping live tunnels
  • •User profiles sourced from your identity provider
  • •Role separation between administrators and end users
  • •Auditable peer and interface lifecycle

Operations

  • •Responsive multi-language interface with dark mode
  • •On-demand generation of wg-quick (wgX.conf) files
  • •Email delivery of QR codes and client configurations
  • •REST API for automated client deployment
  • •Single binary or container deployment

Integration

  • •Webhooks on peer, interface, or user updates
  • •Prometheus metrics for monitoring and alerting
  • •Database backends: SQLite, MySQL, MsSQL, or PostgreSQL
  • •Compatible with existing WireGuard deployments
  • •Customisable mail templates for client provisioning

Where Teams Deploy WG Portal

Remote Workforce

Give employees secure access to internal resources without exposing services to the public internet or maintaining a hardware VPN concentrator

Site-to-Site Links

Connect branch offices, warehouses, and remote industrial sites to headquarters over encrypted WireGuard tunnels

Field Devices

Provision and revoke VPN access for BWR routers, gateways, and field equipment from one central portal

Managed Service Providers

Operate VPN access for multiple customers, using peer expiry and webhooks to automate provisioning and lifecycle management

Ready to manage your WireGuard network?

Sign in to our hosted VPNHUB portal and hand out your first VPN configuration in minutes.

Get started