Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
VPN Sovereignty Fundamentals
- Why commercial VPNs log metadata and comply with legal requests.
- OpenVPN: A mature, feature-rich solution with TAP/TUN flexibility.
- WireGuard: Modern, minimal, and high-performance cryptography.
- Selecting the appropriate protocol for your specific threat model.
OpenVPN Deployment
- Installing OpenVPN using Easy-RSA PKI.
- Server configuration: cipher, HMAC, TLS-auth, and topology settings.
- Generating and distributing client configurations.
- Managing revocation and CRLs.
WireGuard Deployment
- Installing kernel modules and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Setting up road warrior and site-to-site mesh topologies.
Authentication and Authorisation
- Certificate-based authentication with OpenVPN.
- Integration with LDAP and RADIUS backends.
- Implementing two-factor authentication via TOTP plugins.
- Managing access control lists and per-user IP allocation.
Routing and Network Design
- Comparing full tunnel vs split tunnel routing.
- Configuring push routes, DNS, and WINS.
- Using NAT and masquerading for egress traffic.
- Implementing Multi-WAN and policy-based routing.
Performance and Scaling
- Benchmarking WireGuard vs OpenVPN throughput.
- Multi-core optimisation and kernel bypass techniques.
- Load balancing across multiple VPN servers.
- DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Connection logging and bandwidth accounting.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewal and setting up expiration alerts.
- Disaster recovery and configuration backup strategies.
Requirements
- Intermediate Linux networking and firewall administration skills.
- Understanding of PKI, certificates, and encryption protocols.
- Familiarity with routing, NAT, and IP forwarding.
Target Audience
- Network administrators seeking to replace commercial VPN services.
- Remote work teams requiring sovereign secure access.
- Organisations located in regions facing VPN blocking or surveillance.
