WireGuard PiHole VPN for Raspberry Pi with iPhone (iOS)

technofox01 · March 11, 2025, 10:30am

Hi everyone,

I have successfully setup WireGuard to work with my PiHole on my Raspberry Pi Zero v1.3. I just wanted to share some links and a few comments:

WireGuard compiling and installation:

github.com/adrianmihalko/raspberrypiwireguard

README.md

master






![](https://lh5.googleusercontent.com/o7TqWF6oMhFjabUwG0Z4eu0zpQVcfdE_17pOfh_r-E5DUMlFOSd4M2UnPtyVfEgXrq5ZpolauPsH0c-eS04zOvmC1oGBXBfI2BZWQCWqArVlZscg-_pyg8scj8BEDNe2ZOgKW_75)


## 1. Wireguard installation (Raspberry Pi 2 v1.2 and above)

```console
pi@raspberrypi:~ $ sudo apt-get update
pi@raspberrypi:~ $ sudo apt-get upgrade 
pi@raspberrypi:~ $ sudo apt-get install raspberrypi-kernel-headers
pi@raspberrypi:~ $ echo "deb http://deb.debian.org/debian/ unstable main" | sudo tee --append /etc/apt/sources.list.d/unstable.list
pi@raspberrypi:~ $ sudo apt-get install dirmngr 
pi@raspberrypi:~ $ sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 8B48AD6246925553
pi@raspberrypi:~ $ sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 7638D0442B90D010
pi@raspberrypi:~ $ sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 04EE7237B7D453EC
pi@raspberrypi:~ $ printf 'Package: *\nPin: release a=unstable\nPin-Priority: 150\n' | sudo tee --append /etc/apt/preferences.d/limit-unstable

This file has been truncated. show original

Notes:
Only follow the compiling and installation guide, ignore the rest.

Generating certificates and configuring the server and client:

Notes:
This missing piece to routing with my internal LAN and Internet, was adding the IP tables information to the server config file.

iPhone (iOS) client - TunSafe:
https://itunes.apple.com/us/app/tunsafe-vpn/id1441020790?mt=8

Notes:
Copy the config file from your terminal window or transfer the actual file into TunSafe VPN client. It should handle the rest of the setup for you.

Reasons why to use WireGuard over OpenVPN:

It’s easier on the batteries of mobile devices due to smaller memory and CPU footprint, than OpenVPN.
Supposedly it’s more secure than OpenVPN, due to smaller code base - I personally don’t think that’s true, because any software can be vulnerable regardless of the size of its code base.
Works with switching between networks (e.g. going from WiFi to Cellular or vice versa).

I will add Android when I get a chance, but this is what I had time to try out for now.

Edit:

Just wanted to add this Arstechnica Article:

I will add android info when I get a chance. I have kids, house, and wife and two jobs taking up my free time to to work on that.

Edit 2:

Since there are questions about TunSafe’s security or code, here is the source code:

I appreciate anyone bringing stuff to my attention or correcting any mistakes or thing I overlooked. I have a very busy life, so I don’t have the time I used to have to research stuff. That’s why I love reddit, because the hive mind has informed in ways I couldn’t have done by myself- thank you all very much!

GhostLightPeak · March 11, 2025, 10:30am

If you want to try out the the official WireGuard iOS app it’s currently available as beta in TestFlight

Anonymous · March 11, 2025, 10:30am

Hopefully there will be a simple installer for wireguard like PiVPN

OwnManagement · March 11, 2025, 10:30am

You missed one of the biggest benefits of WireGuard: the connection speed. WireGuard is almost instant, whereas OpenVPN can take up to a minute to create the tunnel.

imillonario · March 11, 2025, 10:30am

I run mine 24/7 with little no difference in battery life

Blainezab · March 11, 2025, 10:30am

Does this work on macOS? One of the main reasons I use a vpn is to remote in and I’d rather use a computer than an app if I’m doing anything besides a checkup on something or changing my blink1 status for a test

Anonymous · March 11, 2025, 10:30am

angle materialistic wipe bake treatment fuel party distinct lavish license

This post was mass deleted and anonymized with Redact

zerocoldx911 · March 11, 2025, 10:30am

Interesting didn’t know there was an app for WG

PizzaOrTacos · March 11, 2025, 10:30am

Oh yes. Looking forward to the Android update. Well done.

Vinegar_Dick · March 11, 2025, 10:30am

So what server does this connect to? Do I need to host one and then use this when I’m abroad? Or do I use this with a slot from a host I pay for?

Is guess I’m trying to figure out the difference between this and nord or ipvanish

UngluedChalice · March 11, 2025, 10:30am

Thanks for the compilation of stuff. Wireguard is billed as “easier to set up than OpenVPN” but for me it’s the opposite.

Can you post (minus the keys, of course) what your conf file looks like so that all traffic passes through the VPN? Currently, when I run wireguard, it just takes down the internet at my house…

angelflames1337 · March 11, 2025, 10:30am

Can I run it on TCP port from my router? The guard only mentioned UDP.

kkF6XRZQezTcYQehvybD · March 11, 2025, 10:30am

Where it says “1, Install kernel headers via rpi-source” then there is just a github link, what exactly do I do with it?

_arpit_gupta · March 11, 2025, 10:30am

Thanks for the guide and pointers. Got this setup on my pi and have peers working from Mac, Android phone and chrome os. I have a question. In order to get pi hole DNS working I had to enable listen on all interfaces, permit all origins config in pi hole. Bit of a noob in this field so was wondering if this is fine or if there is a better way to set it up.

Edit: also for Android I had to change allowed ips to 192.168.2.0/24 instead of 192.168.2.1/24 as that would give me a bad address error. Config documented worked fine on my mac.

TheGacAttack · March 11, 2025, 10:30am

What kind of throughput are you getting?

magdeoz · March 11, 2025, 10:30am

What should I put in Endpoint?

systemd-plus-Linux · March 11, 2025, 10:30am

The performance over OpenVPN is insane. I’ve been using Wireguard for years and never once noticed any performance hit.

technofox01 · March 11, 2025, 10:30am

The battery difference for my initial test is barely noticeable, maybe 15 minutes extra battery life on an iPhone 7 Plus. However, the VPN connects ridiculously faster than OpenVPN and surfing the web over Visible (a Verizon MVNO) is much faster too. I will likely use both VPNs, with WebGuard for mobile devices and OpenVPN for beefier machines (laptops).

technofox01 · March 11, 2025, 10:30am

There is a Windows app:

Cheers!

technofox01 · March 11, 2025, 10:30am

Could you please share this info on this thread?

I think it would help a lot and me as well, since my time for experimentation is quite limited.