WireGuard Gateway

The WireGuard gateway is used to connect to a WireGuard network. The WireGuard tunnel runs entirely within the app. It is not a system-level VPN, does not modify system network settings, and does not affect other apps' network traffic. It only provides a data channel for resources within OmniGate.

OmniGate currently assumes a common mobile access scenario with a single peer, and AllowedIPs is always generated as 0.0.0.0/0.

Configuration

Field	Description
Name	Display name in the gateway list
Peer IP or Domain	Address of the WireGuard server
Peer Port	UDP port of the WireGuard server, commonly 51820
Local Private Key	WireGuard private key for this client
Peer Public Key	WireGuard server peer public key
Preshared Key	Optional. Fill in if the server is configured with a PresharedKey
Local IP	Client tunnel address, for example 10.0.0.2/32
DNS	DNS within the tunnel, for example 1.1.1.1 or an internal DNS server

Generated Configuration

OmniGate generates a configuration similar to the following based on your input:

[Interface]
PrivateKey = <local private key>
Address = <local IP>
DNS = <DNS>

[Peer]
PublicKey = <peer public key>
PresharedKey = <preshared key>
AllowedIPs = 0.0.0.0/0
Endpoint = <peer IP or domain>:<peer port>
PersistentKeepalive = 25

Usage Tips

• First verify your configuration works with the official WireGuard client, then copy the key fields into OmniGate.
• The local IP typically needs a CIDR suffix, for example 10.7.0.2/32.
• If target resources use internal domain names, the DNS field should be set to a server that can resolve those internal domains.

Common Issues

Gateway connects but resource won't open

Check whether the target resource's IP is within a network segment that the WireGuard server allows forwarding to. Using 0.0.0.0/0 on the OmniGate client side does not mean the server necessarily allows access to all internal network addresses.

DNS names don't work but IP addresses do

Check the DNS field. Make sure the DNS server is accessible through the WireGuard network and can resolve the target domain name.