Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- The rationale behind commercial VPNs logging metadata and complying with legal requests.
- OpenVPN: A mature, feature-rich option with TAP/TUN flexibility.
- WireGuard: A modern, minimalist approach with high-performance cryptography.
- Selecting the appropriate protocol based on your specific threat model.
OpenVPN Deployment
- Installing OpenVPN alongside Easy-RSA PKI.
- Server configuration covering ciphers, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and Certificate Revocation Lists (CRL).
WireGuard Deployment
- Installing kernel modules and WireGuard-tools.
- Key generation and peer configuration processes.
- Managing wg-quick and systemd units.
- Implementing road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication via TOTP plugins.
- Configuring Access Control Lists (ACL) and per-user IP allocation.
Routing and Network Design
- Distinguishing between full tunnel and split tunnel routing.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for egress traffic.
- Implementing Multi-WAN and policy-based routing.
Performance and Scalability
- Benchmarking throughput: WireGuard vs. OpenVPN.
- Multi-core optimization and kernel bypass techniques.
- Load balancing across multiple VPN servers.
- Implementing DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and accounting for bandwidth.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewal and expiration alerts.
- Establishing disaster recovery and configuration backup strategies.
Requirements
- Intermediate proficiency in Linux networking and firewall administration.
- Solid understanding of PKI, certificates, and encryption protocols.
- Familiarity with routing, NAT, and IP forwarding concepts.
Target Audience
- Network administrators looking to replace commercial VPN services.
- Remote work teams requiring sovereign secure access.
- Organizations operating in regions with VPN blocking or surveillance concerns.
