Get in Touch
 Duration 14 hours

Course Outline

VPN Sovereignty Fundamentals

  • Understanding why commercial VPNs log metadata and comply with legal requests.
  • OpenVPN: A mature, feature-rich solution offering TAP/TUN flexibility.
  • WireGuard: A modern, minimalistic approach with high-performance cryptography.
  • Selecting the appropriate protocol based on your specific threat model.

OpenVPN Deployment

  • Installing OpenVPN with Easy-RSA PKI.
  • Configuring the server: ciphers, HMAC, TLS-auth, and topology.
  • Generating and distributing client configurations.
  • Managing revocation and CRLs.

WireGuard Deployment

  • Installing the kernel module and WireGuard-tools.
  • Generating keys and configuring peers.
  • Managing via wg-quick and systemd units.
  • Implementing road warrior and site-to-site mesh topologies.

Authentication and Authorization

  • Implementing certificate-based authentication with OpenVPN.
  • Integrating LDAP and RADIUS backends.
  • Enabling two-factor authentication with TOTP plugins.
  • Configuring access control lists and per-user IP allocation.

Routing and Network Design

  • Comparing full tunnel vs. split tunnel routing.
  • Setting up push routes, DNS, and WINS.
  • Applying NAT and masquerading for egress traffic.
  • Utilizing multi-WAN and policy-based routing.

Performance and Scaling

  • Benchmarking WireGuard vs. OpenVPN throughput.
  • Optimizing for multi-core environments and kernel bypass.
  • Load balancing across multiple VPN servers.
  • Implementing DDoS protection and connection rate limiting.

Monitoring and Maintenance

  • Logging connections and accounting for bandwidth.
  • Integrating Syslog and Prometheus exporters.
  • Automating certificate renewal and setting expiration alerts.
  • Planning disaster recovery and configuration backups.

Requirements

  • Intermediate proficiency in Linux networking and firewall administration.
  • Solid understanding of PKI, certificates, and encryption protocols.
  • Familiarity with routing, NAT, and IP forwarding.

Audience

  • Network administrators seeking to replace commercial VPN solutions.
  • Remote teams requiring sovereign and secure access capabilities.
  • Organizations operating in regions with VPN blocking or surveillance concerns.

Number of participants


Price per participant

Upcoming Courses

Related Categories