[GH-ISSUE #1329] Add WireGuard to TRMM so servers can be hosted anywhere without any port forwarding. #828

New issue

Closed

opened 2026-03-02 02:19:18 +03:00 by kerem · 3 comments

kerem commented

2026-03-02 02:19:18 +03:00

Owner

Originally created by @applebyp on GitHub (Oct 26, 2022).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/1329

I'm testing TRMM behind a Zerotier SDN. It's working ok but tricky to route LAN to the SDWAN.

If TRMM server and agents had WireGuard baked in there would be a big jump in security.

Originally created by @applebyp on GitHub (Oct 26, 2022). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/1329 I'm testing TRMM behind a Zerotier SDN. It's working ok but tricky to route LAN to the SDWAN. If TRMM server and agents had WireGuard baked in there would be a big jump in security.

kerem

2026-03-02 02:19:18 +03:00

closed this issue
added the
dev-triage
label

kerem commented

2026-03-02 02:19:19 +03:00

Author

Owner

@silversword411 commented on GitHub (Oct 26, 2022):

Currently WireGuard is outside TRMM core scope, and is a separate service you can add yourself.

At the current time, I think this would be outside scope.

FYI, you are still going to have to forward the Wireguard port.

@silversword411 commented on GitHub (Oct 26, 2022): Currently WireGuard is outside TRMM core scope, and is a separate service you can add yourself. At the current time, I think this would be outside scope. FYI, you are still going to have to forward the Wireguard port.

kerem commented

2026-03-02 02:19:19 +03:00

Author

Owner

@NiceGuyIT commented on GitHub (Oct 26, 2022):

I use Nebula which doesn't have routing like a traditional VPN. Routing is determined by the address you request. If DNS returns the SDWAN IP, routing uses the SDWAN. If DNS returns the WAN IP, routing uses the WAN. DNS is part of the implementation.

When setup like this, I don't need to have WireGuard in the agent, or ZeroTier for that matter. I just need control of the DNS for the domain hosting TRMM to tell the agents to use the SDWAN IP.

@NiceGuyIT commented on GitHub (Oct 26, 2022): I use Nebula which doesn't have routing like a traditional VPN. Routing is determined by the address you request. If DNS returns the SDWAN IP, routing uses the SDWAN. If DNS returns the WAN IP, routing uses the WAN. DNS is part of the implementation. When setup like this, I don't need to have WireGuard in the agent, or ZeroTier for that matter. I just need control of the DNS for the domain hosting TRMM to tell the agents to use the SDWAN IP.

kerem commented

2026-03-02 02:19:19 +03:00

Author

Owner

@wh1te909 commented on GitHub (Oct 26, 2022):

yea wireguard or any vpn technology doesn't have anything to do with the actual trmm software functionality. you can deploy trmm however you want, behind whatever network or proxy you want. so definitely outside the scope of a feature request

@wh1te909 commented on GitHub (Oct 26, 2022): yea wireguard or any vpn technology doesn't have anything to do with the actual trmm software functionality. you can deploy trmm however you want, behind whatever network or proxy you want. so definitely outside the scope of a feature request

kerem referenced this issue

2026-03-14 04:08:22 +03:00

[GH-ISSUE #828] Blank disk list in Summary #2469