Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Understanding why commercial providers often log metadata and must adhere to legal data requests.
- OpenVPN: A mature, feature-rich option offering flexible TAP/TUN capabilities.
- WireGuard: A modern, minimalistic solution delivering high-performance cryptography.
- Selecting the optimal protocol aligned with specific threat models.
Implementing OpenVPN
- Setting up OpenVPN using Easy-RSA for PKI management.
- Configuring server parameters including cipher, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing certificate revocation and CRLs.
Implementing WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing services via wg-quick and systemd units.
- Setting up road warrior and site-to-site mesh topologies.
Managing Authentication and Access Control
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication through TOTP plugins.
- Defining access control lists and allocating per-user IPs.
Routing and Network Architecture
- Comparing full-tunnel versus split-tunnel routing strategies.
- Configuring pushed routes, DNS, and WINS settings.
- Applying NAT and masquerading for outbound traffic.
- Implementing multi-WAN setups and policy-based routing.
Optimizing Performance and Scale
- Comparing throughput benchmarks between WireGuard and OpenVPN.
- Optimizing for multi-core performance and kernel bypass.
- Distributing load across multiple VPN servers.
- Implementing DDoS protection and connection rate limits.
Ongoing Monitoring and Maintenance
- Tracking connection logs and accounting for bandwidth usage.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Planning disaster recovery and configuration backups.
Requirements
- Proficiency in intermediate Linux networking and firewall management.
- Knowledge of PKI, digital certificates, and encryption standards.
- Experience with routing, NAT, and IP forwarding.
Target Audience
- Network administrators seeking to replace commercial VPN vendors.
- Remote teams requiring secure, independent access capabilities.
- Organizations operating in regions subject to VPN restrictions or surveillance.
