Skip to main content

WireGuard collector

WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography.

This module monitors WireGuard VPN network interfaces and peers traffic.


  • Grant CAP_NET_ADMIN capability to go.d.plugin.

    sudo setcap CAP_NET_ADMIN+epi <INSTALL_PREFIX>/usr/libexec/netdata/plugins.d/go.d.plugin


All metrics have "wireguard." prefix.

Labels per scope:

  • device: device.
  • peer: device, public_key.
device_network_iodevicereceive, transmitB/s
peer_network_iopeerreceive, transmitB/s


No configuration needed.


To troubleshoot issues with the wireguard collector, run the go.d.plugin with the debug option enabled. The output should give you clues as to why the collector isn't working.

  • Navigate to the plugins.d directory, usually at /usr/libexec/netdata/plugins.d/. If that's not the case on your system, open netdata.conf and look for the plugins setting under [directories].

    cd /usr/libexec/netdata/plugins.d/
  • Switch to the netdata user.

    sudo -u netdata -s
  • Run the go.d.plugin to debug the collector:

    ./go.d.plugin -d -m wireguard

Do you have any feedback for this page? If so, you can open a new issue on our netdata/learn repository.