DefGuard Server

DefGuard Server is a self-hosted WireGuard VPN control-plane designed for enterprise environments. The platform provides centralized management and configuration capabilities for WireGuard VPN infrastructure. The server supports multiple operating systems and architectures, including Linux (x64 and ARM64), FreeBSD, and Windows. It is distributed as packages for Debian/Ubuntu, Red Hat/Fedora, and FreeBSD, as well as compressed archives for various platforms. Version 1.6 introduced several enterprise-focused capabilities including pre-logon VPN functionality for Active Directory environments, enabling secure authentication before Windows login. The platform supports zero-touch enrollment through automated provisioning via MSI installers for Intune and Group Policy, App Store deployment for MDM, and integration with Active Directory and Entra ID. The system includes an always-on VPN mode that maintains persistent connections with security policy enforcement. Native platform clients are available for macOS through the App Store and Windows with WireGuardNT integration. The platform includes MTU settings configuration to address connectivity issues on restrictive networks. DefGuard Server is available as open source software with releases published on GitHub, providing organizations with full control over their VPN infrastructure deployment.