Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
VPN Sovereignty Fundamentals
- Reasons why commercial VPNs log metadata and comply with legal requests.
- OpenVPN: mature, feature-rich, offering TAP/TUN flexibility.
- WireGuard: modern, minimal, with high-performance cryptography.
- Selecting the appropriate protocol for your specific threat model.
OpenVPN Deployment
- Installing OpenVPN with Easy-RSA PKI.
- Server configuration: cipher, HMAC, TLS-auth, and topology.
- Generation and distribution of client configurations.
- Revocation and CRL management.
WireGuard Deployment
- Installing the kernel module and WireGuard-tools.
- Key generation and peer configuration.
- wg-quick and systemd unit management.
- Road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Certificate-based authentication with OpenVPN.
- LDAP and RADIUS backend integration.
- Two-factor authentication using TOTP plugins.
- Access control lists and per-user IP allocation.
Routing and Network Design
- Full tunnel versus split tunnel routing strategies.
- Configuration of push routes, DNS, and WINS.
- NAT and masquerading for egress traffic.
- Multi-WAN and policy-based routing.
Performance and Scaling
- Throughput benchmarks comparing WireGuard and OpenVPN.
- Multi-core optimization and kernel bypass techniques.
- Load balancing across multiple VPN servers.
- DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Connection logging and bandwidth accounting.
- Syslog and Prometheus exporter integration.
- Automated certificate renewal and expiration alerts.
- Disaster recovery and configuration backup.
Requirements
- Intermediate knowledge of Linux networking and firewall administration.
- Understanding of PKI, certificates, and encryption protocols.
- Familiarity with routing, NAT, and IP forwarding.
Audience
- Network administrators replacing commercial VPN services.
- Remote work teams requiring sovereign secure access.
- Organizations located in regions subject to VPN blocking or surveillance.
14 Hours