Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
VPN Sovereignty Fundamentals
- Why commercial VPNs log metadata and comply with legal requests.
- OpenVPN: Mature, feature-rich, offering TAP/TUN flexibility.
- WireGuard: Modern, minimal, with high-performance cryptography.
- Selecting the appropriate protocol for your specific threat model.
OpenVPN Deployment
- Installing OpenVPN with Easy-RSA PKI.
- Server setup: configuring cipher, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and CRLs.
WireGuard Deployment
- Installing the kernel module and WireGuard-tools.
- Key generation and peer configuration.
- Managing wg-quick and systemd units.
- Configuring road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Implementing two-factor authentication using TOTP plugins.
- Setting up access control lists and per-user IP allocation.
Routing and Network Design
- Routing strategies for full tunnel vs split tunnel.
- Configuring push routes, DNS, and WINS.
- NAT and masquerading for egress traffic.
- Implementing Multi-WAN and policy-based routing.
Performance and Scaling
- Comparing WireGuard and OpenVPN throughput benchmarks.
- Optimizing for multi-core performance and kernel bypass.
- Load balancing across multiple VPN servers.
- Applying DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and accounting for bandwidth.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Planning for disaster recovery and config backups.
Requirements
- Intermediate proficiency in Linux networking and firewall administration.
- A solid understanding of PKI, certificates, and encryption protocols.
- Knowledge of routing, NAT, and IP forwarding.
Target Audience
- Network administrators aiming to replace commercial VPN services.
- Remote teams requiring secure, sovereign access.
- Organizations in regions experiencing VPN blocking or surveillance.