# Guide: Enabling UDP (WireGuard / Pangolin) on Oracle Cloud Free Tier VPS **URL:** \ **Category:** Networking\ **Tags:** firewall, oracle-cloud, pangolin\ **Created:** [October 3, 2025, 12:17pm UTC](https://forum.hhf.technology/t/guide-enabling-udp-wireguard-pangolin-on-oracle-cloud-free-tier-vps/3837 "2025-10-03T12:17:13Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![hhf.technoloy](https://forum.hhf.technology/user_avatar/forum.hhf.technology/hhf.technoloy/32/68_2.png) [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Post date:** [October 3, 2025, 12:17pm UTC](https://forum.hhf.technology/t/guide-enabling-udp-wireguard-pangolin-on-oracle-cloud-free-tier-vps/3837/1 "2025-10-03T12:17:13Z")
# Guide: Enabling UDP (WireGuard / Pangolin) on Oracle Cloud Free Tier VPS This walkthrough is based on Ubuntu running on Oracle Cloud Free Tier. The key issue many hit is that **UDP port 51820 is blocked by default** — so even if WireGuard or Pangolin is installed correctly, nothing works until you fix the networking rules. * * * ## Enable IP Forwarding Edit the sysctl config: ```bash sudo nano /etc/sysctl.conf ``` Uncomment (remove `#`) or add these lines: ```auto net.ipv4.ip_forward = 1 net.ipv6.conf.all.forwarding = 1 ``` Save (`CTRL+X`, then `Y`, then `Enter`) and apply: ```bash sudo sysctl -p ``` * * * ## Open UDP Port 51820 in Oracle Cloud Console ![image](https://forum-cdn.hhf.technology/original/2X/b/bc1605f18dc6d12236d8d02dc448a825058c027d.png) Oracle uses **VCN Security Lists** instead of a traditional firewall. You must allow UDP traffic explicitly: 1. Log in to Oracle Cloud Console. 2. Go to **Networking → Virtual Cloud Networks (VCN)**. 3. Select your VCN (usually only one if you’re on Free Tier). 4. Open the **Default Security List**. 5. Add an **Ingress Rule** : 👉 For Pangolin’s web UI, ensure TCP ports **80** and **443** are also open (these are often allowed by default). * * * ## Install Pangolin + Docker Use the official quick‑install script from [Pangolin Docs](https://docs.fossorial.io/Getting%20Started/quick-install): ```bash curl -fsSL https://get.pangolin.run | sudo bash ``` The installer will: - Install Docker if missing - Set up Pangolin containers - Optionally ask about CrowdSec (skip for now unless you want to manage it manually) * * * ## Configure Pangolin + Newt - Access the Pangolin dashboard at your domain (with Let’s Encrypt SSL auto‑configured). - Create your admin account and organization. - Add applications and configure Newt clients as needed. * * * ## ⚠ Important Notes - **Do not enable UFW** on Oracle Cloud Ubuntu images. It conflicts with Oracle’s iptables rules and can lock you out of SSH. - If UDP still seems blocked, test with netcat: - Remember: sometimes it’s not the water’s fault if you can’t swim 😉 — the port really has to be open. * * * ✅ With these steps, UDP on port 51820 should be working, and Pangolin + Newt should connect without issues. * * * Ref- [Wireguard Oracle Cloud step by step : r/WireGuard](https://www.reddit.com/r/WireGuard/comments/1baeuyx/wireguard_oracle_cloud_step_by_step/) ---
**Author:** ![zorglups](https://forum.hhf.technology/letter_avatar_proxy/v4/letter/z/f0a364/32.png) [@zorglups](https://forum.hhf.technology/u/zorglups)\ **Post date:** [October 5, 2025, 9:50pm UTC](https://forum.hhf.technology/t/guide-enabling-udp-wireguard-pangolin-on-oracle-cloud-free-tier-vps/3837/2 "2025-10-05T21:50:09Z")
I installed Pangolin on an Oracle VPS a few month ago. Sure, I had to add the Ingress Rule for 51820. But I did not have to touch the /etc/sysctl.conf and Pangolin is working perfectly. I connected to the VPS and all lines in the /etc/sysctl.conf are commented. Maybe enabling ip forwarding is only needed if you want to setup a wiregard gateway (not sure this is the right term by the way), like setting up wg-easy to allow a wireguard client to connect to the VPS and be able to reach resources running on a pangolin site ? ---
**Author:** ![hhf.technoloy](https://forum.hhf.technology/user_avatar/forum.hhf.technology/hhf.technoloy/32/68_2.png) [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Post date:** [October 6, 2025, 9:14am UTC](https://forum.hhf.technology/t/guide-enabling-udp-wireguard-pangolin-on-oracle-cloud-free-tier-vps/3837/3 "2025-10-06T09:14:39Z")
Depends on the images. I haven’t done this setup on my vps at all and all is well. UDP just works right out of the box. No need to fiddle with anything. Oracle has weird things with their custom images. So all depends on your region and data centre. I have a similar vm on the same region I had to follow the above steps. So ya !!! 😅 ---
**Author:** ![zorglups](https://forum.hhf.technology/letter_avatar_proxy/v4/letter/z/f0a364/32.png) [@zorglups](https://forum.hhf.technology/u/zorglups)\ **Post date:** [October 6, 2025, 11:08am UTC](https://forum.hhf.technology/t/guide-enabling-udp-wireguard-pangolin-on-oracle-cloud-free-tier-vps/3837/4 "2025-10-06T11:08:31Z")
Ah. So the ymmv applies… As far as I understand though, Pangolin alone does not need the ip\_forwarding except when trying the olm vpn client : [Add Client - Pangolin Docs](https://docs.digpangolin.com/manage/clients/add-client#required-configuration)