ollamawg
Reach your Ollama server from your laptop and phone without exposing it to the internet.
ollamawg puts a WireGuard tunnel in front of Ollama and adds per-device access control. It gives you a dashboard on the host that shows who is connected, what they run, and who is knocking on the port, and a ChatGPT-style chat page for phones. You can block a device or an IP with one click.
It is a single Go binary. WireGuard runs in user space through wireguard-go and gVisor's network stack, so the server needs no root, no kernel module and no TUN device. Computers connect with ollamawg connect, which needs no admin rights either. Phones use the official WireGuard app, because the keys and protocol are standard WireGuard.
Website: https://himanshu-mamgain.github.io/ollamawg/
[!IMPORTANT]
ollamawg has not had an independent security audit. Treat it as an evolving security tool, not an independently verified security product. The cryptography comes from wireguard-go and gVisor, which are widely deployed. ollamawg's own policy, proxy and dashboard code is small and covered by end-to-end tests, but nobody outside the project has reviewed it. Read the Security model before you rely on it, and report problems as described there.
Screenshot taken with simulated devices and traffic.
How it works
devices machine running Ollama
┌──────────────────────────┐ ┌────────────────────────────────────────────────┐
│ laptop │ UDP 51820 │ │
│ app → 127.0.0.1:11434 │ WireGuard │ firewall → WireGuard → proxy → 127.0.0.1:11434 │
│ ollamawg connect ─┼──(encrypted)──►│ (IP rules) (keys) (roles, Ollama │
├──────────────────────────┤ │ models, │
│ phone │ │ rate, │
│ browser → 10.77.0.1/chat │ │ log, │
│ WireGuard app ─┼──(encrypted)──►│ /chat) │
└──────────────────────────┘ │ dashboard on 127.0.0.1:8088 │
└────────────────────────────────────────────────┘
- Firewall. Every UDP packet hitting the WireGuard port is checked against your IP and CIDR rules before WireGuard sees it. Every source is counted, including scanners that never complete a handshake.
- WireGuard. Only devices whose public key you registered can complete a handshake. Each device gets one tunnel IP, and WireGuard guarantees that traffic from that IP really comes from that key.
- Proxy. Inside the tunnel, a reverse proxy enforces each device's role, model allowlist and rate limit. It logs every request with its token counts, then streams the request to Ollama on loopback. It also serves the chat page at
/chat.
Ollama itself stays on 127.0.0.1. Nothing outside the tunnel can talk to it.
Requirements
- Ollama on the server, listening on
127.0.0.1:11434, which is its default. Pull at least one model, for example ollama pull llama3.2.
- A UDP port that devices can reach. By default this is 51820.
- At home, forward UDP 51820 on your router to the server.
- On a cloud VM, open it in the security group.
- Behind CGNAT? Use a relay. Many home and mobile ISPs put customers behind carrier-grade NAT, where the router's WAN address is private (
10.x, 100.64.x) and no port can be forwarded. Run ollamawg relay on any machine with a public IP, for example a free or $5 cloud VM. Your server dials out to it, and devices connect from anywhere, with no port forwarding. The relay only forwards encrypted packets it can't read. See Relay.
Install
No npm or Go needed: these scripts download the binary for your platform from GitHub Releases, check it against the release's SHA256SUMS, and install it without admin rights.
# Windows (PowerShell): installs to %LOCALAPPDATA%\Programs\ollamawg and adds it to PATH
irm https://himanshu-mamgain.github.io/ollamawg/install.ps1 | iex
# macOS, Linux, FreeBSD: installs to /usr/local/bin if writable, else ~/.local/bin (never uses sudo)
curl -fsSL https://himanshu-mamgain.github.io/ollamawg/install.sh | sh
You can read the scripts first: install.ps1, install.sh. Set OLLAMAWG_VERSION=0.4.0 to pin a version, or OLLAMAWG_INSTALL_DIR to choose where it goes.
Or use a package manager:
npm install -g @ollamawg/cli # prebuilt binary for Linux, macOS, Windows and FreeBSD
npx @ollamawg/cli version # or run it without installing
go install github.com/himanshu-mamgain/ollamawg/cmd/ollamawg@latest
You can also download a binary from any GitHub Release yourself, or use the Docker image ghcr.io/himanshu-mamgain/ollamawg (amd64 and arm64). See Running as a service.
Quickstart
On the machine running Ollama:
ollamawg init --endpoint your-public-ip-or-dns:51820
ollamawg serve
init writes server.yaml and prints the dashboard password. Open http://127.0.0.1:8088 on the server, or reach it over SSH with ssh -L 8088:127.0.0.1:8088 server.
On Windows, init also lets devices through Windows Firewall: click Yes when Windows asks for permission. If you skip it or pass --no-firewall, run ollamawg firewall later.
Add a laptop
ollamawg add-peer --name laptop # writes laptop.yaml
Copy laptop.yaml to the laptop, then run:
ollamawg connect --config laptop.yaml
curl http://127.0.0.1:11434/api/tags # any Ollama client works unchanged
여기까지가 README 앞부분입니다. 나머지는 원문에서 읽을 수 있습니다. README 전문 보기 ↗
