Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
VPN Sovereignty Foundations
- Why commercial VPNs may log metadata and respond to legal demands.
- OpenVPN: A mature, feature-rich option with TAP/TUN flexibility.
- WireGuard: A modern, minimalist approach with high-performance cryptography.
- Selecting the appropriate protocol for your specific threat model.
Implementing OpenVPN
- Installing OpenVPN using the Easy-RSA PKI system.
- Configuring the server: ciphers, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and Certificate Revocation Lists (CRL).
Implementing WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Setting up road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Using certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Implementing two-factor authentication via TOTP plugins.
- Defining access control lists and assigning per-user IPs.
Routing and Network Architecture
- Differentiating between full tunnel and split tunnel routing.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for egress traffic.
- Utilizing Multi-WAN and policy-based routing.
Performance and Scalability
- Benchmarking WireGuard versus OpenVPN throughput.
- Optimizing for multi-core performance and kernel bypass.
- Load balancing across multiple VPN servers.
- Implementing DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and accounting for bandwidth.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Planning disaster recovery and configuration backups.
Requirements
- Proficiency in intermediate Linux networking and firewall management.
- Solid understanding of PKI, digital certificates, and encryption standards.
- Knowledge of routing, NAT, and IP forwarding concepts.
Target Audience
- Network administrators looking to phase out commercial VPN solutions.
- Remote teams requiring secure, sovereign access control.
- Organizations operating in regions subject to VPN blocking or surveillance.
