Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Principles of VPN Sovereignty
- Explaining how commercial providers log data and respond to legal inquiries.
- OpenVPN: a robust option with extensive features and TAP/TUN adaptability.
- WireGuard: a contemporary, lightweight solution with superior cryptographic performance.
- Selecting the optimal protocol aligned with your specific risk profile.
Setting Up OpenVPN
- Installing OpenVPN alongside Easy-RSA for key management.
- Tuning server settings: encryption ciphers, HMAC, TLS authentication, and network topology.
- Creating and delivering client configuration files.
- Managing certificate revocation and CRLs.
Implementing WireGuard
- Adding kernel modules and installing WireGuard utilities.
- Generating keys and setting up peer connections.
- Managing services via wg-quick and systemd units.
- Configuring remote user and site-to-site mesh networks.
Identity Verification and Permissions
- Using certificate-based authentication in OpenVPN.
- Connecting LDAP and RADIUS servers for backend verification.
- Enabling two-factor authentication using TOTP plugins.
- Applying access control lists and assigning individual IP addresses.
Network Architecture and Routing
- Comparing full tunnel versus split tunnel routing methods.
- Setting up push routes, DNS, and WINS parameters.
- Applying NAT and masquerading for outbound traffic.
- Handling multi-WAN setups and policy-based routing.
Optimizing Speed and Scale
- Benchmarking data throughput between WireGuard and OpenVPN.
- Optimizing multi-core performance and utilizing kernel bypass techniques.
- Distributing load among several VPN nodes.
- Mitigating DDoS attacks and limiting connection rates.
Ongoing Oversight and Upkeep
- Tracking connection logs and measuring bandwidth usage.
- Connecting Syslog and Prometheus exporters for metrics.
- Automating certificate updates and setting expiry warnings.
- Planning disaster recovery and securing configuration backups.
Requirements
- Moderate proficiency in Linux networking and firewall management.
- Basic grasp of PKI, digital certificates, and encryption methods.
- Knowledge of routing, NAT, and IP packet forwarding.
Target Audience
- IT staff seeking to replace commercial VPN services.
- Teams requiring independent, secure remote connectivity.
- Businesses in areas facing network censorship or surveillance.
