Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Why commercial VPNs may log metadata and respond to legal demands.
- OpenVPN: A mature, feature-rich solution with flexible TAP/TUN capabilities.
- WireGuard: A modern, minimalistic approach with high-performance cryptography.
- Selecting the optimal protocol for your specific threat model.
Implementing OpenVPN
- Installing OpenVPN utilizing the Easy-RSA PKI framework.
- Configuring the server: ciphers, HMAC, TLS-auth, and topology settings.
- Generating and distributing client configurations efficiently.
- Managing revocation and Certificate Revocation Lists (CRLs).
Implementing WireGuard
- Installing the kernel module and WireGuard-tools suite.
- Generating keys and configuring peer connections.
- Managing wg-quick and systemd units for service control.
- Setting up road warrior and site-to-site mesh topologies.
Authentication & Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends for centralized access control.
- Enhancing security with Two-Factor Authentication (2FA) via TOTP plugins.
- Defining Access Control Lists (ACLs) and per-user IP allocations.
Routing & Network Design
- Comparing full tunnel vs. split tunnel routing strategies.
- Configuring push routes, DNS, and WINS settings.
- Applying NAT and masquerading for egress traffic management.
- Implementing Multi-WAN and policy-based routing techniques.
Performance & Scalability
- Benchmarking throughput: WireGuard vs. OpenVPN.
- Optimizing for multi-core environments and kernel bypass.
- Distributing load across multiple VPN servers.
- Implementing DDoS protection and connection rate limiting.
Monitoring & Maintenance
- Logging connections and accounting for bandwidth usage.
- Integrating Syslog and Prometheus exporters for observability.
- Automating certificate renewal and setting expiration alerts.
- Establishing disaster recovery plans and configuration backups.
Requirements
- Intermediate proficiency in Linux networking and firewall administration.
- Solid understanding of PKI, digital certificates, and encryption protocols.
- Working knowledge of routing, NAT, and IP forwarding concepts.
Target Audience
- Network administrators aiming to replace commercial VPN providers.
- Remote work teams requiring sovereign, secure access capabilities.
- Organizations operating in regions where VPNs are blocked or subject to surveillance.
