Wireguard

apt install wireguard -y

wg genkey | tee privatekey | wg pubkey > publickey

# Server
[Interface]
ListenPort = 1079
PrivateKey = <server privatekey>
Address = 192.168.0.2/24, fd23:23:23::2/64
# iptables 网关模式
PostUp = iptables -t nat -A POSTROUTING -j MASQUERADE; ip6tables -t nat -A POSTROUTING -j MASQUERADE
PostDown = iptables -t nat -D POSTROUTING -j MASQUERADE; ip6tables -t nat -D POSTROUTING -j MASQUERADE
 
[Peer]
PublicKey = <client publickey>
AllowedIPs = 192.168.0.3/32, fd23:23:23::3/128
#Endpoint = <IP>:[PORT] # optional

# Client
[Interface]
ListenPort = 1079
PrivateKey = <client privatekey>
Address = 192.168.0.3/24, fd23:23:23::3/64
 
[Peer]
PublicKey = <server publickey>
AllowedIPs = 192.168.0.2/32, ::/0
Endpoint = <IP>:[PORT]

wg-quick up wg0

wg-quick down wg0

git clone --branch linux-msft-wsl-5.15.y --depth 1 https://github.com/microsoft/WSL2-Linux-Kernel.git
cd WSL2-Linux-Kernel

zcat /proc/config.gz > .config

sed -i 's/# CONFIG_NFT_FIB_IPV6 is not set/CONFIG_NFT_FIB_IPV6=y/g' .config
sed -i 's/# CONFIG_NFT_FIB_IPV4 is not set/CONFIG_NFT_FIB_IPV4=y/g' .config
sed -i 's/# CONFIG_NETFILTER_XT_MATCH_CONNMARK is not set/CONFIG_NETFILTER_XT_MATCH_CONNMARK=y/g' .config
sed -i 's/# CONFIG_CRYPTO_STREEBOG is not set/CONFIG_CRYPTO_STREEBOG=y/g' .config
sed -i 's/# CONFIG_CRYPTO_ECRDSA is not set/CONFIG_CRYPTO_ECRDSA=y/g' .config
 
yes "" | make -j 4

cp arch/x86_64/boot/bzImage /mnt/c/Users/<user>/bzImage

[wsl2]
kernel=C:\\Users\\<user>\\bzImage

wsl.exe --shutdown