Get in Touch
 Duration 14 hours

Course Outline

Foundations of VPN Sovereignty

  • Understanding why commercial providers record metadata and respond to legal demands.
  • OpenVPN: A mature, feature-dense solution offering TAP/TUN flexibility.
  • WireGuard: A modern, minimalist approach with high-performance encryption.
  • Selecting the optimal protocol for your specific threat model.

Implementing OpenVPN

  • Setting up OpenVPN with Easy-RSA PKI.
  • Configuring the server: ciphers, HMAC, TLS-auth, and network topology.
  • Generating and distributing client configurations.
  • Handling revocation and CRL administration.

Implementing WireGuard

  • Installing kernel modules and WireGuard-tools.
  • Generating keys and configuring peers.
  • Managing wg-quick and systemd units.
  • Designing road warrior and site-to-site mesh architectures.

Authentication and Authorization

  • Using certificate-based authentication with OpenVPN.
  • Integrating LDAP and RADIUS backends.
  • Implementing two-factor authentication via TOTP plugins.
  • Managing access control lists and per-user IP assignments.

Network Design and Routing

  • Comparing full tunnel versus split tunnel routing.
  • Configuring push routes, DNS, and WINS.
  • Applying NAT and masquerading for outbound traffic.
  • Utilizing multi-WAN and policy-based routing.

Performance and Scalability

  • Benchmarking WireGuard versus OpenVPN throughput.
  • Optimizing for multi-core performance and kernel bypass.
  • Load balancing between multiple VPN servers.
  • Implementing DDoS defenses and connection rate limits.

Maintenance and Monitoring

  • Logging connections and accounting for bandwidth.
  • Connecting Syslog and Prometheus exporters.
  • Automating certificate renewal and expiration alerts.
  • Planning disaster recovery and configuration backups.

Requirements

  • Intermediate knowledge of Linux networking and firewall management.
  • Grasping of PKI, certificates, and encryption protocols.
  • Experience with routing, NAT, and IP forwarding.

Target Audience

  • Network administrators transitioning from commercial VPN services.
  • Remote teams requiring sovereign, secure access.
  • Organizations operating in areas with VPN restrictions or surveillance.

Number of participants


Price per participant (excl. VAT)

Upcoming Courses

Related Categories