Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Essentials of VPN Sovereignty
- Understanding why commercial VPNs record metadata and respond to legal demands.
- OpenVPN: A mature, feature-rich option with TAP/TUN flexibility.
- WireGuard: A modern, minimalist approach with high-performance cryptography.
- Selecting the appropriate protocol for your specific threat landscape.
Deploying OpenVPN
- Setting up OpenVPN utilizing Easy-RSA PKI.
- Server setup: defining ciphers, HMAC, TLS-auth, and topology.
- Creating and distributing client configurations.
- Managing revocation and CRLs.
Deploying WireGuard
- Installing the kernel module and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Designing road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Adding two-factor authentication via TOTP plugins.
- Configuring access control lists and per-user IP assignment.
Routing and Network Architecture
- Comparing full tunnel versus split tunnel routing strategies.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for outbound traffic.
- Implementing multi-WAN and policy-based routing.
Performance and Scalability
- Benchmarking WireGuard against OpenVPN for throughput.
- Optimizing for multi-core performance and kernel bypass.
- Distributing load across multiple VPN servers.
- Implementing DDoS mitigation and connection rate limits.
Monitoring and Upkeep
- Logging connections and tracking bandwidth usage.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewals and setting expiration alerts.
- Planning disaster recovery and configuration backups.
Requirements
- Proficiency in intermediate Linux networking and firewall management.
- A solid grasp of PKI, certificates, and encryption standards.
- Knowledge of routing, NAT, and IP forwarding.
Target Audience
- Network administrators transitioning away from commercial VPN providers.
- Remote teams requiring secure, sovereign access.
- Organizations operating in regions where VPNs are blocked or monitored.
