Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
VPN Sovereignty Fundamentals
- The reasons commercial VPNs log metadata and comply with legal demands.
- OpenVPN: A mature, feature-rich option with TAP/TUN flexibility.
- WireGuard: A modern, minimal approach with high-performance cryptography.
- Selecting the optimal protocol for your specific threat model.
OpenVPN Deployment
- Installing OpenVPN alongside Easy-RSA PKI.
- Server configuration covering cipher, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and CRLs.
WireGuard Deployment
- Installing the kernel module and WireGuard-tools.
- Key generation and peer setup.
- Managing wg-quick and systemd units.
- Implementing road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Two-factor authentication using TOTP plugins.
- Access control lists and per-user IP allocation.
Routing and Network Design
- Comparing full tunnel and split tunnel routing.
- Configuring push routes, DNS, and WINS.
- NAT and masquerading for egress traffic.
- Multi-WAN setups and policy-based routing.
Performance and Scaling
- Throughput benchmarks: WireGuard versus OpenVPN.
- Multi-core optimization and kernel bypass techniques.
- Load balancing across multiple VPN servers.
- DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Connection logging and bandwidth accounting.
- Integration with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Disaster recovery strategies and configuration backups.
Requirements
- Intermediate knowledge of Linux networking and firewall administration.
- Familiarity with PKI, certificates, and encryption protocols.
- Understanding of routing, NAT, and IP forwarding concepts.
Target Audience
- Network administrators seeking to replace commercial VPN services.
- Remote work teams requiring sovereign and secure access.
- Organizations operating in regions where VPNs are blocked or under surveillance.
