How to use Blokada Plus with the WireGuard app?

For platforms where the native Blokada app is not yet available (such as your desktop), you have the option to use Blokada Plus with the WireGuard app instead.

To create the configuration file that WireGuard can use, go to https://app.blokada.org. After continuing with your account ID that you have a subscription for, navigate to the Devices section. Then follow these steps:

  1. Hit the New Device button.
  2. (optional) Set a name such as “Desktop”.
  3. Select which gateway you want to use.
  4. (optional) Choose a DNS server you want to use.
  5. Press Save, a configuration will now be generated.
  6. Download the generated .zip archive file or scan the QR code with the mobile WireGuard app.
  7. Download WireGuard for your supported device. Press the Add button in the application, choose “Create from file or archive” or “Create from QR code”.
  8. Activate the connection in the WireGuard app with the switch.
2 Likes

I just tried this and it took all of 10 minutes to create the Blokada configuration zip file, download and install WireGuard, then add the Blokada config file to WireGuard and activate on my Windows 10 computer. This actually improved my ping, download and upload values via the Ookla speed test vs. all previous speed tests using Private Internet Access. Looks like I’ll be cancelling my PIA account near the end of the month!

1 Like

Hi, I need a step by step introduction how to use blokada vpn with wireguard on a linux system.
I have installed wireguard with the console. There is no gui at all, as I know.

Create the configuration file that WireGuard can use, go to https://app.blokada.org . After continuing with your account ID that you have a subscription for, navigate to the Devices section. Then follow these steps:

  1. Hit the New Device button.
  2. (optional) Set a name such as “Desktop”.
  3. Select which gateway you want to use.
  4. (optional) Choose a DNS server you want to use.
  5. Press Save, a configuration will now be generated.
  6. Download the generated .zip archive file
  1. Install wireguard

What happens next for Linux?

Which distribution of Linux?

1 Like

Debian or Linux Mint

Try moving the downloaded config file (unzipped) into /etc/wireguard/blokada.conf

Then wg-quick up blokada

Thank you. This is the output:

[#] ip link add blokada type wireguard
[#] wg setconf blokada /dev/fd/63
[#] ip -4 address add xxx/32 dev blokada
[#] ip -6 address add xxx64 dev blokada
[#] ip link set mtu 1420 up dev blokada
[#] resolvconf -a blokada -m 0 -x
/usr/bin/wg-quick: line 32: resolvconf: command not found
[#] ip link delete dev blokada

Is this ok?
What’s next?

I’ve changed the IP-Adresses to xxx in this listing.

Try installing resolvconf with your package manager then run wg-quick again

This is the output I now get

root@x380debian:~# wg-quick up blokada
[#] ip link add blokada type wireguard
[#] wg setconf blokada /dev/fd/63
[#] ip -4 address add 10.143.1.254/32 dev blokada
[#] ip -6 address add fdad:b10c:a::a8f:1fe/64 dev blokada
[#] ip link set mtu 1420 up dev blokada
[#] resolvconf -a tun.blokada -m 0 -x
[#] wg set blokada fwmark 51820
[#] ip -6 route add ::/0 dev blokada table 51820
[#] ip -6 rule add not fwmark 51820 table 51820
[#] ip -6 rule add table main suppress_prefixlength 0
[#] ip6tables-restore -n
[#] ip -4 route add 0.0.0.0/0 dev blokada table 51820
[#] ip -4 rule add not fwmark 51820 table 51820
[#] ip -4 rule add table main suppress_prefixlength 0
[#] sysctl -q net.ipv4.conf.all.src_valid_mark=1
[#] iptables-restore -n

Looks like it should be up and running now then? :slight_smile:

I do not know how to use or test it.
Is there a simple how to?

You may just visit any of the “what is my ip” website, and see what location it shows you. It should be according to the Blokada Plus location you selected.

Yes it is working on the first device.
Thank you.

On another device with debian linux I’ve done the same steps.
There it is not working. I’m getting the following messages:

xxx@x260debian:~$ sudo wg-quick up blokada
[sudo] Passwort für xxx:
[#] ip link add blokada type wireguard
[#] wg setconf blokada /dev/fd/63
[#] ip -4 address add 10.143.2.154/32 dev blokada
[#] ip -6 address add fdad:b10c:a::a8f:29a/64 dev blokada
[#] ip link set mtu 1200 up dev blokada
[#] resolvconf -a tun.blokada -m 0 -x
[#] wg set blokada fwmark 51820
[#] ip -6 route add ::/0 dev blokada table 51820
RTNETLINK answers: No such device
[#] resolvconf -d tun.blokada -f
[#] ip link delete dev blokada

On the first device, now I get the same Error Message.

root@x380debian:~# wg-quick up blokada
[#] ip link add blokada type wireguard
[#] wg setconf blokada /dev/fd/63
[#] ip -4 address add 10.143.1.254/32 dev blokada
[#] ip -6 address add fdad:b10c:a::a8f:1fe/64 dev blokada
[#] ip link set mtu 1200 up dev blokada
[#] resolvconf -a tun.blokada -m 0 -x
[#] wg set blokada fwmark 51820
[#] ip -6 route add ::/0 dev blokada table 51820
RTNETLINK answers: No such device
[#] resolvconf -d tun.blokada -f
[#] ip link delete dev blokada