🌐 Cyber-Mesh Topology Designer

WireGuard Mesh Generator & MTU Calculator

Design full-mesh WireGuard peer topologies, generate production-ready wg0.conf files, and optimize MTU parameters to prevent packet fragmentation.

⚡ Network Parameters

Network Architecture

Active Peer Nodes (N)

Overlay Subnet

Listen Port

Transport & MTU Tuning

WAN Transport Overhead

Enable PersistentKeepalive = 25 (Required for NAT/Firewalls)

Active WireGuard Tunnels

Direct Encrypted Links

Recommended WireGuard MTU

1420

Zero Fragmentation

Crypto Overhead

60 Bytes

ChaCha20-Poly1305 + IP

/etc/wireguard/wg0.conf (Peer 1 Server)

[Interface]
# Node 1 - Hub Gateway
PrivateKey = <CLIENT_PRIVATE_KEY_1>
Address = 10.8.0.1/24
ListenPort = 51820
MTU = 1420

# Peer 2 - Laptop
[Peer]
PublicKey = <PEER_PUBLIC_KEY_2>
AllowedIPs = 10.8.0.2/32
PersistentKeepalive = 25

# Peer 3 - Server Node
[Peer]
PublicKey = <PEER_PUBLIC_KEY_3>
AllowedIPs = 10.8.0.3/32
PersistentKeepalive = 25

🛡️ Technical Protocol Insights

WireGuard overhead is exactly 60 bytes (20B IPv4 header + 8B UDP header + 32B WireGuard header).
Setting MTU to 1420 prevents ICMP fragmentation issues across standard 1500 WAN interfaces.
PersistentKeepalive = 25 ensures stateful NAT routers keep UDP session mapping alive.