Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
VPN Sovereignty Fundamentals
- Understanding why commercial VPNs log metadata and comply with legal requests.
- OpenVPN: A mature, feature-rich solution offering TAP/TUN flexibility.
- WireGuard: A modern, minimalistic approach with high-performance cryptography.
- Selecting the appropriate protocol based on your specific threat model.
OpenVPN Deployment
- Installing OpenVPN with Easy-RSA PKI.
- Configuring the server: ciphers, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and CRLs.
WireGuard Deployment
- Installing the kernel module and WireGuard-tools.
- Generating keys and configuring peers.
- Managing via wg-quick and systemd units.
- Implementing road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication with TOTP plugins.
- Configuring access control lists and per-user IP allocation.
Routing and Network Design
- Comparing full tunnel vs. split tunnel routing.
- Setting up push routes, DNS, and WINS.
- Applying NAT and masquerading for egress traffic.
- Utilizing multi-WAN and policy-based routing.
Performance and Scaling
- Benchmarking WireGuard vs. OpenVPN throughput.
- Optimizing for multi-core environments and kernel bypass.
- Load balancing across multiple VPN servers.
- Implementing DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and accounting for bandwidth.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Planning disaster recovery and configuration backups.
Requirements
- Intermediate proficiency in Linux networking and firewall administration.
- Solid understanding of PKI, certificates, and encryption protocols.
- Familiarity with routing, NAT, and IP forwarding.
Audience
- Network administrators seeking to replace commercial VPN solutions.
- Remote teams requiring sovereign and secure access capabilities.
- Organizations operating in regions with VPN blocking or surveillance concerns.