Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Core Principles of VPN Sovereignty
- The rationale behind commercial VPN metadata logging and legal compliance.
- OpenVPN: A mature, versatile solution offering TAP/TUN flexibility.
- WireGuard: A modern, streamlined approach with high-performance cryptography.
- Selecting the optimal protocol for your specific security context.
Deploying OpenVPN
- Installing OpenVPN alongside Easy-RSA for PKI management.
- Configuring server settings, including ciphers, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing certificate revocation and CRLs.
Setting Up WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peer connections.
- Managing services via wg-quick and systemd units.
- Designing road warrior and site-to-site mesh architectures.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backend services.
- Adding two-factor authentication using TOTP plugins.
- Configuring access control lists and individual IP assignments.
Network Design and Routing
- Comparing full-tunnel versus split-tunnel routing strategies.
- Configuring pushed routes, DNS, and WINS settings.
- Applying NAT and masquerading for outbound traffic.
- Implementing multi-WAN setups and policy-based routing.
Optimizing Performance and Scalability
- Benchmarking throughput between WireGuard and OpenVPN.
- Optimizing multi-core performance and kernel bypass techniques.
- Distributing load across multiple VPN servers.
- Implementing DDoS protection and connection rate limits.
Ongoing Monitoring and Maintenance
- Recording connection logs and tracking bandwidth usage.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Establishing disaster recovery plans and configuration backups.
Requirements
- Intermediate proficiency in Linux networking and firewall management.
- Knowledge of PKI, digital certificates, and encryption standards.
- Understanding of routing, NAT, and IP forwarding concepts.
Target Audience
- Network professionals replacing commercial VPN subscriptions.
- Remote teams requiring secure, independent access to resources.
- Organizations operating in regions facing VPN restrictions or enhanced surveillance.
