Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
VPN Sovereignty Fundamentals
- Reasons why commercial VPNs log metadata and comply with legal requests.
- OpenVPN: mature, feature-rich, offering TAP/TUN flexibility.
- WireGuard: modern, minimal, providing high-performance cryptography.
- Selecting the appropriate protocol for your specific threat model.
OpenVPN Deployment
- Installing OpenVPN with Easy-RSA PKI.
- Server configuration: cipher, HMAC, TLS-auth, and topology.
- Generating and distributing client configuration.
- Revocation and CRL management.
WireGuard Deployment
- Kernel module installation and WireGuard-tools.
- Key generation and peer configuration.
- Using wg-quick and systemd for unit management.
- Implementing road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication via TOTP plugins.
- Configuring access control lists and per-user IP allocation.
Routing and Network Design
- Differentiating between full tunnel and split tunnel routing.
- Configuring pushed routes, DNS, and WINS.
- Utilising NAT and masquerading for egress traffic.
- Implementing Multi-WAN and policy-based routing.
Performance and Scaling
- Comparing throughput benchmarks between WireGuard and OpenVPN.
- Optimising for multi-core systems and achieving kernel bypass.
- Balancing loads across multiple VPN servers.
- Implementing DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Recording connection logs and accounting for bandwidth.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Managing disaster recovery and configuration backups.
Requirements
- Intermediate knowledge of Linux networking and firewall administration.
- Understanding of PKI, certificates, and encryption protocols.
- Familiarity with routing, NAT, and IP forwarding.
Audience
- Network administrators replacing commercial VPN services.
- Remote work teams requiring sovereign and secure access.
- Organisations located in regions experiencing VPN blocking or surveillance.
14 Hours
Testimonials (2)
How trainer deliver knowledge so effectively
Vu Thoai Le - Reply Polska sp. z o. o.
Course - Certified Kubernetes Administrator (CKA) - exam preparation
Interesting labs, help from trainer
