Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Why commercial VPNs often log metadata and respond to legal inquiries.
- OpenVPN: A mature, feature-rich option offering TAP/TUN versatility.
- WireGuard: A modern, streamlined protocol delivering high-performance encryption.
- Selecting the optimal protocol based on your specific threat model.
Implementing OpenVPN
- Installing OpenVPN alongside Easy-RSA PKI.
- Server setup: Configuring ciphers, HMAC, TLS-auth, and network topology.
- Generating and distributing client configurations.
- Managing certificate revocation and CRLs.
Implementing WireGuard
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Utilising wg-quick and managing systemd units.
- Designing road warrior and site-to-site mesh architectures.
Authentication and Authorization
- Employing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication via TOTP plugins.
- Defining access control lists and assigning per-user IP addresses.
Routing and Network Architecture
- Comparing full tunnel versus split tunnel routing strategies.
- Configuring pushed routes, DNS, and WINS.
- Applying NAT and masquerading for outbound traffic.
- Implementing multi-WAN and policy-based routing.
Performance and Scalability
- Benchmarking throughput between WireGuard and OpenVPN.
- Optimising for multi-core processing and kernel bypass.
- Load balancing across multiple VPN servers.
- Implementing DDoS mitigation and connection rate limiting.
Monitoring and Maintenance
- Tracking connection logs and accounting for bandwidth usage.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and setting expiration alerts.
- Managing disaster recovery and configuration backups.
Requirements
- Intermediate proficiency in Linux networking and firewall management.
- Knowledge of PKI, digital certificates, and encryption standards.
- Working understanding of routing, NAT, and IP forwarding.
Intended Audience
- Network administrators looking to phase out commercial VPN providers.
- Remote teams requiring secure, independent access capabilities.
- Organisations operating in regions subject to VPN restrictions or surveillance.
