What is WireGuard?
WireGuard is the modern VPN protocol: a fast, simple way to create encrypted tunnels between devices. It replaces the complexity of IPsec and OpenVPN with a small design built on today's best cryptography.
Every TxHub connection is a WireGuard tunnel. TxHub handles the hard part — exchanging keys, finding a path through firewalls and NAT, and applying your access policy — so devices simply connect.
- 01your device — creates its own key pair — the private key never leaves it
- 02control plane — hands out public keys and policy only
- 03peers — connect directly, end-to-end encrypted
- 04relay (fallback) — forwards ciphertext it cannot read
Modern cryptography
Curve25519 for key exchange, ChaCha20-Poly1305 for encryption, BLAKE2s for hashing. One fixed, current set — no cipher negotiation to downgrade.
Small enough to audit
Around 4,000 lines of code, against hundreds of thousands for older VPN stacks. Less code means less to get wrong, and it has been formally verified.
Built into Linux
Part of the Linux kernel since version 5.6, with fast implementations on Windows, macOS, iOS and Android.
Fast, and it roams
Connections set up in a single round trip and survive switching networks — Wi-Fi to mobile and back without dropping.
WireGuard is a registered trademark of Jason A. Donenfeld.
Sovereign networking, operated for you.
Pick your region, connect your first devices, and see the mesh form in minutes.
Prefer to talk first? info@txhub.is