Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
VPN Sovereignty Fundamentals
- Understanding why commercial VPNs log metadata and comply with legal demands.
- OpenVPN: A mature, feature-rich solution offering TAP and TUN flexibility.
- WireGuard: A modern, minimal framework utilizing high-performance cryptography.
- Selecting the appropriate protocol based on your specific threat model.
OpenVPN Deployment
- Installing OpenVPN utilizing the Easy-RSA PKI framework.
- Configuring the server: ciphers, HMAC, TLS-auth, and topology settings.
- Generating and distributing client configurations.
- Managing certificate revocation and CRLs.
WireGuard Deployment
- Installing kernel modules and the WireGuard-tools suite.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Implementing road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication using TOTP plugins.
- Configuring access control lists and per-user IP allocation.
Routing and Network Design
- Comparing full tunnel versus split tunnel routing strategies.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for egress traffic.
- Utilizing multi-WAN and policy-based routing.
Performance and Scaling
- Benchmarking the throughput of WireGuard against OpenVPN.
- Optimizing for multi-core processing and kernel bypass.
- Load balancing traffic across multiple VPN servers.
- Implementing DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and tracking bandwidth usage.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Establishing disaster recovery and configuration backup protocols.
Requirements
- Intermediate proficiency in Linux networking and firewall administration.
- Comprehensive understanding of PKI, certificates, and encryption protocols.
- Knowledge of routing, NAT, and IP forwarding concepts.
Target Audience
- Network administrators looking to substitute commercial VPN services.
- Remote work teams requiring sovereign and secure access.
- Organizations operating in regions where VPN blocking or surveillance is prevalent.
