Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
VPN Sovereignty Basics
- Why commercial VPNs often log metadata and respond to legal demands.
- OpenVPN: A mature, feature-rich option with TAP/TUN versatility.
- WireGuard: A modern, minimalist solution with high-performance cryptography.
- Selecting the appropriate protocol for your specific threat model.
OpenVPN Setup
- Installing OpenVPN using Easy-RSA PKI.
- Server setup: configuring ciphers, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and CRLs.
WireGuard Setup
- Installing the kernel module and WireGuard tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Implementing road warrior and site-to-site mesh topologies.
Auth and Access Control
- Certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Implementing two-factor authentication via TOTP plugins.
- Defining access control lists and per-user IP assignments.
Routing & Network Architecture
- Differences between full tunnel and split tunnel routing.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for outbound traffic.
- Utilizing multi-WAN and policy-based routing.
Performance & Scaling
- Throughput benchmarks: WireGuard vs OpenVPN.
- Optimizing for multi-core environments and kernel bypass.
- Load balancing across multiple VPN servers.
- Mitigating DDoS attacks and limiting connection rates.
Monitoring & Upkeep
- Tracking connection logs and accounting for bandwidth.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewals and setting expiration alerts.
- Establishing disaster recovery and configuration backups.
Requirements
- Intermediate skills in Linux networking and firewall management.
- Knowledge of PKI, certificates, and encryption protocols.
- Proficiency with routing, NAT, and IP forwarding.
Target Audience
- Network administrators transitioning from commercial VPN services.
- Remote teams requiring sovereign, secure access.
- Organizations in regions facing VPN blocking or surveillance concerns.
