Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
VPN Sovereignty Fundamentals
- Why commercial VPNs log metadata and respond to legal demands.
- OpenVPN: A mature, feature-rich solution with TAP/TUN flexibility.
- WireGuard: A modern, minimal design with high-performance cryptography.
- Selecting the optimal protocol based on your threat model.
OpenVPN Deployment
- Installing OpenVPN utilizing Easy-RSA PKI.
- Configuring the server: cipher, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and CRL.
WireGuard Deployment
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Setting up road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Implementing two-factor authentication via TOTP plugins.
- Configuring access control lists and per-user IP allocation.
Routing and Network Design
- Comparing full tunnel vs split tunnel routing.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for egress traffic.
- Implementing Multi-WAN and policy-based routing.
Performance and Scaling
- Throughput benchmarks: WireGuard vs OpenVPN.
- Multi-core optimization and kernel bypass techniques.
- Load balancing across multiple VPN servers.
- Implementing DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and accounting for bandwidth.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Establishing disaster recovery and config backup strategies.
Requirements
- Intermediate proficiency in Linux networking and firewall administration.
- Knowledge of PKI, certificates, and encryption protocols.
- Understanding of routing, NAT, and IP forwarding.
Target Audience
- Network administrators transitioning away from commercial VPN services.
- Remote work teams requiring secure, sovereign access.
- Organizations operating in regions with VPN blocking or surveillance.
