Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Understanding why commercial VPNs log metadata and comply with legal requests.
- OpenVPN: A mature solution with rich features and TAP/TUN flexibility.
- WireGuard: A modern, minimalistic approach with high-performance cryptography.
- Selecting the appropriate protocol for your specific threat model.
Deploying OpenVPN
- Installing OpenVPN using Easy-RSA PKI.
- Server configuration: setting ciphers, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and Certificate Revocation Lists (CRL).
Deploying WireGuard
- Installing the kernel module and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Implementing road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Adding two-factor authentication via TOTP plugins.
- Defining access control lists and per-user IP allocation.
Routing and Network Design
- Comparing full tunnel vs. split tunnel routing strategies.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for egress traffic.
- Handling multi-WAN setups and policy-based routing.
Performance and Scaling
- Benchmarking throughput between WireGuard and OpenVPN.
- Optimizing for multi-core performance and kernel bypass.
- Load balancing across multiple VPN servers.
- Implementing DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and accounting for bandwidth usage.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Establishing disaster recovery plans and config backups.
Requirements
- Intermediate knowledge of Linux networking and firewall administration.
- A solid understanding of PKI, digital certificates, and encryption protocols.
- Familiarity with routing, NAT, and IP forwarding concepts.
Target Audience
- Network administrators looking to replace commercial VPN services.
- Remote work teams requiring sovereign, secure access solutions.
- Organizations operating in regions facing VPN blocking or surveillance issues.
