Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Why commercial VPNs log metadata and respond to legal demands.
- OpenVPN: Mature, feature-rich, with TAP/TUN versatility.
- WireGuard: Modern, minimal, and high-performance cryptographic design.
- Selecting the appropriate protocol for your specific threat model.
Implementing OpenVPN
- Installing OpenVPN with Easy-RSA PKI.
- Server setup: configuring cipher, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and CRLs.
Implementing WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Designing road warrior and site-to-site mesh topologies.
Authentication and Access Control
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication via TOTP plugins.
- Configuring access control lists and per-user IP allocation.
Routing and Network Architecture
- Differences between full tunnel and split tunnel routing.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for egress traffic.
- Handling multi-WAN and policy-based routing.
Performance and Scalability
- Comparing WireGuard and OpenVPN throughput benchmarks.
- Optimizing for multi-core performance and kernel bypass.
- Distributing load across multiple VPN servers.
- Mitigating DDoS attacks and limiting connection rates.
Monitoring and Upkeep
- Logging connections and accounting for bandwidth.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Planning disaster recovery and configuration backups.
Requirements
- Intermediate knowledge of Linux networking and firewall administration.
- Grasp of PKI, certificates, and encryption protocols.
- Proficiency in routing, NAT, and IP forwarding.
Target Audience
- Network administrators looking to replace commercial VPN services.
- Remote work teams requiring sovereign secure access.
- Organizations operating in regions facing VPN blocking or surveillance.
