WireGuard VPN: A Complete Guide for Remote Teams in Ireland

What is WireGuard?

WireGuard is a modern VPN protocol — a set of rules for how two devices create an encrypted tunnel between them. It was created by Jason Donenfeld and first released in 2016. In 2020, it was merged into the Linux kernel, which is as close to an official endorsement as a piece of networking software can get.

Compared to OpenVPN (released 2001) and IPSec (1990s), WireGuard is:

• Dramatically simpler: ~4,000 lines of code vs ~70,000 for OpenVPN. Fewer lines = smaller attack surface = easier to audit.
• Faster: Lower handshake overhead and modern cryptography (ChaCha20, Poly1305, Curve25519) means significantly higher throughput and lower latency.
• More reliable: Reconnects silently and instantly when switching networks (e.g., from office Wi-Fi to 4G) — OpenVPN requires a manual reconnect or a dedicated keepalive daemon.

How WireGuard works (simply)

Every device in a WireGuard network has a public/private key pair — similar to SSH keys. The server (gateway) has a list of approved public keys. A client connects, proves it has the matching private key, and the gateway opens the tunnel. No username/password flow, no certificate authority, no TLS handshake negotiation.

All traffic through the tunnel is encrypted with ChaCha20 and authenticated with Poly1305. The cryptography is modern, well-reviewed, and not dependent on any single algorithm that could be weakened by regulatory pressure or export controls.

Why Irish businesses should care

Remote work is now permanent for many Irish SMEs

Since 2020, a significant portion of Irish office workers have permanent hybrid or remote arrangements. Many of these workers access internal systems — file servers, accounting software, CCTV, office printers — over the public internet without any encryption. That's data leaving your network in plaintext.

GDPR requires encrypted data in transit

If your staff handle personal data (which most Irish businesses do), that data must be protected when transmitted. A VPN is the standard mechanism for ensuring staff connecting from home are doing so over an encrypted channel. “We rely on HTTPS” is not sufficient — not all internal systems use HTTPS, and HTTPS doesn't protect DNS queries or metadata.

It replaces expensive MPLS and leased lines

Connecting multiple Irish office locations traditionally meant expensive dedicated circuits. A WireGuard site-to-site VPN running over standard broadband connections achieves the same encrypted inter-office connectivity for a fraction of the cost.

How RAIT deploys WireGuard

The gateway

We install WireGuard on a dedicated hardware appliance (or on your existing OPNsense firewall, since OPNsense has native WireGuard support). This gateway lives in your office or data centre and acts as the central hub.

Client configuration

Each staff member gets a configuration file and a QR code. On Windows, macOS, iOS, or Android, they install the WireGuard app, scan the QR code, and they're connected. The whole process takes about 3 minutes per device. There's no client software to maintain, no annual licence, and no subscription.

Split tunnelling

We configure split tunnelling so that only traffic destined for your internal network goes through the VPN. General web browsing still goes directly to the internet — this avoids unnecessary load on your gateway and keeps speeds fast for normal use.

Kill switch

On all client devices, we configure a kill switch: if the VPN connection drops for any reason, internet access stops until the tunnel reconnects. This prevents staff accidentally sending internal traffic in plaintext during a momentary VPN dropout.

WireGuard vs OpenVPN: the practical comparison

What does WireGuard deployment cost in Ireland?

RAIT's WireGuard VPN setup for Irish businesses starts from €499 for a single-site installation (up to 10 users). This includes:

• Gateway installation and configuration
• Client configuration for all users
• Split tunnelling and kill switch setup
• Documentation and handover session
• 30-day email support

Hardware (gateway appliance) is quoted separately — typically €150–€300 depending on your throughput requirements.

For businesses that also need TrueNAS storage (so staff have something to actually connect to), our Business package bundles VPN + NAS setup from €999.