Edit an Endpoint

To modify the properties of an existing endpoint, follow these steps:

  1. Click the Hosts link in the app header.

  2. Find the host containing the endpoint’s interface in the list, and click the host’s name to view the host’s main status page.

  3. Find the endpoint in the Endpoints panel, and click its name to view the endpoint’s main status page.

  4. Click the “pencil” icon on the right side of the Endpoint panel to modify the endpoint’s properties.

Allowed IPs

Enter the individual IP addresses or CIDR blocks that this interface can access through the endpoint, like “10.0.0.0/24, fd00::/64”, in the Allowed IPs field. Separate multiple addresses or blocks with commas, newlines, or other whitespace.

Hostname

Optionally enter the remote hostname or IP address to which this interface should connect, like “vpn.example.com” or “192.0.2.1”, in the Hostname field (this corresponds to the hostname portion of the “Endpoint” setting in a wg-quick-style configuration file). Blank to remove the static hostname or IP address from the endpoint.

You only need to set the hostname on one side of a WireGuard connection — either on the endpoint from this host to the remote host, or the corresponding endpoint from the remote host to this host. If the remote host has a static DNS name or IP address, enter it here.

Port

If you entered a new hostname or IP address in the Hostname field, enter the destination UDP port on that remote host, like “51820”, in the Port field (this corresponds to the port portion of the “Endpoint” setting in a wg-quick-style configuration file). Otherwise, skip this field.

Persistent Keepalive

Optionally enter the number of seconds between keepalive packets to send to the endpoint, like “25”, in the Persistent Keepalive field. Blank to not send keepalive packets.

If there is a stateful firewall that doesn’t allow new inbound connections to this host (such as a firewall doing NAT, Network Address Translation) sitting between this host and the remote endpoint, and you want to allow the remote endpoint to initiate new inbound connections to this host (for example, to SSH from the remote endpoint into the host), you will need Persistent Keepalive. A value of “25” (seconds) usually works well for this purpose.

Form Submit

Click the Update button to submit the form and queue the changes for the endpoint.

The next time the Pro Custodibus agent on the host pings the Pro Custodibus servers, the agent will receive the information about the endpoint update, and execute it.