Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Why commercial VPNs often log metadata and comply with legal demands.
- OpenVPN: A mature, feature-rich option offering TAP/TUN flexibility.
- WireGuard: A modern, minimal protocol with high-performance cryptography.
- Selecting the optimal protocol for your specific threat model.
Deploying OpenVPN
- Installing OpenVPN alongside the Easy-RSA PKI system.
- Server configuration details: cipher, HMAC, TLS-auth, and topology settings.
- Generating and distributing client configurations.
- Managing revocation and CRL.
Deploying WireGuard
- Installing the kernel module and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Setting up road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Adding two-factor authentication using TOTP plugins.
- Configuring access control lists and per-user IP allocation.
Routing and Network Architecture
- Distinguishing between full tunnel and split tunnel routing.
- Configuring pushed routes, DNS, and WINS settings.
- Applying NAT and masquerading for egress traffic.
- Implementing Multi-WAN and policy-based routing.
Performance and Scalability
- Benchmarking throughput: WireGuard vs. OpenVPN.
- Optimizing for multi-core environments and kernel bypass.
- Load balancing across multiple VPN servers.
- Mitigating DDoS attacks and enforcing connection rate limits.
Monitoring and Maintenance
- Logging connections and accounting for bandwidth usage.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Planning disaster recovery and backing up configurations.
Requirements
- Intermediate proficiency in Linux networking and firewall administration.
- A solid understanding of PKI, digital certificates, and encryption protocols.
- Familiarity with routing concepts, NAT, and IP forwarding.
Target Audience
- Network administrators transitioning away from commercial VPN services.
- Remote work teams requiring sovereign and secure access capabilities.
- Organizations operating in regions where VPN blocking or surveillance is a concern.
