Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Reasons why commercial VPNs record metadata and respond to legal requests.
- OpenVPN: a mature, feature-rich option with TAP/TUN versatility.
- WireGuard: a modern, streamlined solution offering high-performance cryptography.
- Selecting the optimal protocol aligned with your specific threat model.
Deploying OpenVPN
- Installing OpenVPN using the Easy-RSA PKI framework.
- Server setup: configuring ciphers, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Handling certificate revocation and CRL management.
Implementing WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Designing road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backend systems.
- Adding two-factor authentication via TOTP plugins.
- Configuring access control lists and per-user IP allocation.
Routing and Network Architecture
- Distinguishing between full-tunnel and split-tunnel routing.
- Configuring push routes, DNS, and WINS settings.
- Applying NAT and masquerading for outbound traffic.
- Managing multi-WAN setups and policy-based routing.
Performance and Scalability
- Benchmarking throughput: WireGuard vs. OpenVPN.
- Optimizing for multi-core performance and kernel bypass.
- Load balancing across multiple VPN servers.
- Implementing DDoS mitigation and connection rate limiting.
Monitoring and Maintenance
- Tracking connection logs and bandwidth usage.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Establishing disaster recovery and configuration backup procedures.
Requirements
- Proficiency in intermediate Linux networking and firewall management.
- Knowledge of PKI, digital certificates, and encryption standards.
- Experience with routing, NAT, and IP forwarding mechanisms.
Target Audience
- Network administrators aiming to replace commercial VPN offerings.
- Remote teams requiring secure, sovereign access capabilities.
- Organizations operating in regions facing VPN restrictions or surveillance.
