Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Understanding why commercial providers record metadata and respond to legal demands.
- OpenVPN: A mature, feature-dense solution offering TAP/TUN flexibility.
- WireGuard: A modern, minimalist approach with high-performance encryption.
- Selecting the optimal protocol for your specific threat model.
Implementing OpenVPN
- Setting up OpenVPN with Easy-RSA PKI.
- Configuring the server: ciphers, HMAC, TLS-auth, and network topology.
- Generating and distributing client configurations.
- Handling revocation and CRL administration.
Implementing WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Designing road warrior and site-to-site mesh architectures.
Authentication and Authorization
- Using certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Implementing two-factor authentication via TOTP plugins.
- Managing access control lists and per-user IP assignments.
Network Design and Routing
- Comparing full tunnel versus split tunnel routing.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for outbound traffic.
- Utilizing multi-WAN and policy-based routing.
Performance and Scalability
- Benchmarking WireGuard versus OpenVPN throughput.
- Optimizing for multi-core performance and kernel bypass.
- Load balancing between multiple VPN servers.
- Implementing DDoS defenses and connection rate limits.
Maintenance and Monitoring
- Logging connections and accounting for bandwidth.
- Connecting Syslog and Prometheus exporters.
- Automating certificate renewal and expiration alerts.
- Planning disaster recovery and configuration backups.
Requirements
- Intermediate knowledge of Linux networking and firewall management.
- Grasping of PKI, certificates, and encryption protocols.
- Experience with routing, NAT, and IP forwarding.
Target Audience
- Network administrators transitioning from commercial VPN services.
- Remote teams requiring sovereign, secure access.
- Organizations operating in areas with VPN restrictions or surveillance.