Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Understanding why commercial VPNs log metadata and respond to legal mandates.
- OpenVPN: A mature solution with rich features and TAP/TUN versatility.
- WireGuard: A modern, minimalist approach to high-performance cryptography.
- Selecting the appropriate protocol based on your security threat model.
Implementing OpenVPN
- Installing OpenVPN alongside the Easy-RSA PKI suite.
- Configuring server parameters including cipher, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing certificate revocation and CRLs.
Implementing WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing services via wg-quick and systemd units.
- Setting up road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication using TOTP plugins.
- Defining access control lists and allocating per-user IPs.
Routing and Network Architecture
- Comparing full tunnel versus split tunnel routing strategies.
- Configuring push routes, DNS, and WINS settings.
- Implementing NAT and masquerading for egress traffic.
- Configuring Multi-WAN and policy-based routing.
Performance Optimization and Scaling
- Benchmarking throughput: WireGuard vs. OpenVPN.
- Optimizing for multi-core performance and kernel bypass.
- Load balancing across multiple VPN servers.
- Implementing DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and tracking bandwidth accounting.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and expiration alerts.
- Planning disaster recovery and configuration backups.
Requirements
- Intermediate proficiency in Linux networking and firewall management.
- Foundational understanding of PKI, digital certificates, and encryption protocols.
- Knowledge of routing, NAT, and IP forwarding concepts.
Target Audience
- Network administrators seeking to migrate from commercial VPN providers.
- Teams requiring secure, sovereign remote access capabilities.
- Organizations operating in regions subject to VPN restrictions or surveillance.
