Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Understanding why commercial VPNs log metadata and adhere to legal demands.
- OpenVPN: Mature, feature-rich, with TAP/TUN versatility.
- WireGuard: Modern, minimal, and built for high-performance cryptography.
- Selecting the appropriate protocol based on your specific threat model.
Implementing OpenVPN
- Installing OpenVPN using Easy-RSA PKI.
- Server setup: configuring ciphers, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and CRLs.
Implementing WireGuard
- Installing kernel modules and WireGuard tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Configuring road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication via TOTP plugins.
- Defining access control lists and assigning per-user IPs.
Routing and Network Architecture
- Comparing full-tunnel vs. split-tunnel routing.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for outbound traffic.
- Implementing Multi-WAN and policy-based routing.
Performance and Scalability
- Comparing throughput benchmarks between WireGuard and OpenVPN.
- Optimizing multi-core performance and kernel bypass.
- Load balancing across multiple VPN servers.
- Implementing DDoS mitigation and connection rate limiting.
Monitoring and Maintenance
- Tracking connection logs and accounting for bandwidth.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Planning disaster recovery and configuration backups.
Requirements
- Proficiency in intermediate Linux networking and firewall management.
- Knowledge of PKI, digital certificates, and encryption standards.
- Working familiarity with routing, NAT, and IP forwarding.
Target Audience
- Network administrators seeking alternatives to commercial VPN services.
- Remote teams requiring sovereign, secure access channels.
- Organizations operating in regions facing VPN blocking or surveillance.
