Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Why commercial VPNs log metadata and respond to legal demands.
- OpenVPN: Mature, feature-rich, with TAP/TUN flexibility.
- WireGuard: Modern, minimal, and high-performance cryptography.
- Selecting the optimal protocol for your specific threat model.
OpenVPN Implementation
- Installing OpenVPN using Easy-RSA PKI.
- Server setup: cipher, HMAC, TLS-auth, and topology configuration.
- Generating and distributing client configurations.
- Managing revocation and CRLs.
WireGuard Implementation
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Setting up road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Implementing two-factor authentication using TOTP plugins.
- Configuring access control lists and per-user IP allocation.
Routing and Network Architecture
- Comparing full tunnel vs split tunnel routing.
- Configuring push routes, DNS, and WINS.
- NAT and masquerading for outbound traffic.
- Multi-WAN and policy-based routing strategies.
Performance and Scalability
- Throughput benchmarks: WireGuard vs OpenVPN.
- Multi-core optimization and kernel bypass techniques.
- Load balancing across multiple VPN servers.
- DDoS mitigation and connection rate limiting.
Monitoring and Maintenance
- Logging connections and tracking bandwidth usage.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Disaster recovery and configuration backup strategies.
Requirements
- Intermediate knowledge of Linux networking and firewall administration.
- Understanding of PKI, certificates, and encryption protocols.
- Familiarity with routing, NAT, and IP forwarding.
Target Audience
- Network administrators seeking to replace commercial VPN services.
- Remote work teams requiring sovereign secure access.
- Organizations operating in regions with VPN blocking or surveillance.
