Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Why commercial VPNs record metadata and respond to legal demands.
- OpenVPN: Established, versatile, with TAP/TUN adaptability.
- WireGuard: Modern, lightweight, and cryptographically efficient.
- Selecting the appropriate protocol for your specific threat profile.
Deploying OpenVPN
- Installing OpenVPN alongside Easy-RSA PKI.
- Configuring the server: cipher selection, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and Certificate Revocation Lists (CRL).
Deploying WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Setting up road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Adding two-factor authentication via TOTP plugins.
- Defining access control lists and assigning per-user IPs.
Routing and Network Architecture
- Comparing full tunnel versus split tunnel routing.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for outbound traffic.
- Implementing Multi-WAN and policy-based routing.
Performance and Scalability
- Benchmarking WireGuard versus OpenVPN throughput.
- Optimizing for multi-core performance and kernel bypass.
- Load balancing across multiple VPN servers.
- Protecting against DDoS attacks and limiting connection rates.
Monitoring and Upkeep
- Logging connections and tracking bandwidth.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Planning disaster recovery and configuration backups.
Requirements
- Intermediate skills in Linux networking and firewall administration.
- Knowledge of PKI, certificates, and encryption standards.
- Experience with routing, NAT, and IP forwarding.
Target Audience
- Network professionals looking to replace commercial VPN solutions.
- Teams requiring sovereign secure access for remote work.
- Organizations operating in regions facing VPN blocking or surveillance.
