Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Understanding why commercial VPNs record metadata and adhere to legal mandates.
- OpenVPN: A mature, feature-rich solution offering TAP/TUN flexibility.
- WireGuard: A modern, lightweight approach with high-performance cryptography.
- Selecting the appropriate protocol based on your specific threat model.
Deploying OpenVPN
- Setting up OpenVPN using Easy-RSA for PKI.
- Configuring the server: ciphers, HMAC, TLS-auth, and topology settings.
- Generating and distributing client configurations.
- Handling revocation and CRL management.
Deploying WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Designing road warrior and site-to-site mesh topologies.
Authentication and Access Control
- Implementing certificate-based authentication in OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication via TOTP plugins.
- Applying ACLs and allocating IP addresses per user.
Routing and Network Architecture
- Comparing full tunnel versus split tunnel routing strategies.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading to egress traffic.
- Implementing multi-WAN and policy-based routing.
Performance Optimization and Scaling
- Benchmarking throughput between WireGuard and OpenVPN.
- Optimizing multi-core performance and kernel bypass techniques.
- Distributing load across multiple VPN servers.
- Implementing DDoS mitigation and connection rate limits.
Monitoring and Upkeep
- Tracking connection logs and accounting for bandwidth usage.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewals and setting expiration alerts.
- Establishing disaster recovery and configuration backup protocols.
Requirements
- Proficiency in intermediate Linux networking and firewall management.
- Knowledge of PKI, certificates, and encryption standards.
- Experience with routing, NAT, and IP forwarding.
Target Audience
- Network admins looking to swap out commercial VPN providers.
- Remote teams requiring sovereign and secure access capabilities.
- Organizations operating in regions facing VPN restrictions or surveillance.
