Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Why commercial VPNs log metadata and comply with legal demands.
- OpenVPN: A mature, feature-rich solution offering TAP/TUN flexibility.
- WireGuard: A modern, minimalistic approach with high-performance cryptography.
- Selecting the appropriate protocol for your specific threat model.
Deploying OpenVPN
- Installing OpenVPN using Easy-RSA for PKI management.
- Configuring the server: settings for cipher, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing certificate revocation and CRLs.
Deploying WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Setting up road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Adding two-factor authentication via TOTP plugins.
- Configuring access control lists and per-user IP assignment.
Routing and Network Architecture
- Comparing full tunnel and split tunnel routing strategies.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for egress traffic.
- Implementing Multi-WAN and policy-based routing.
Performance and Scalability
- Benchmarking throughput: WireGuard versus OpenVPN.
- Optimizing for multi-core environments and kernel bypass techniques.
- Load balancing across multiple VPN servers.
- Implementing DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and accounting for bandwidth usage.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Planning for disaster recovery and configuration backups.
Requirements
- Intermediate proficiency in Linux networking and firewall management.
- A solid understanding of PKI, certificates, and encryption protocols.
- Familiarity with routing, NAT, and IP forwarding concepts.
Target Audience
- Network administrators seeking to replace commercial VPN services.
- Remote work teams requiring sovereign and secure access capabilities.
- Organizations operating in regions prone to VPN blocking or surveillance.
