No handshake, or no traffic at all
WireGuard needs its UDP port open, and a TCP rule does nothing
What you see
- The console shows no recent handshake for the device.
- The WireGuard app shows data sent but nothing received.
Why it happens
WireGuard runs over UDP only, on port 51820 unless you chose another one in setup. A firewall rule for TCP 51820, or a cloud firewall that allows only TCP, drops every packet.
-
Allow the WireGuard port over UDP
In your cloud firewall or security group, allow UDP 51820 inbound from anywhere, or the port you chose in setup.
-
Check the ports from the internet
The console's Check ports button cannot test UDP while WireGuard holds the port, so run the check from the shell.
sudo warpspeed check ports -
Try another network
Some guest and hotel networks block UDP. If the device connects from a phone hotspot, the network it was on is the cause.