Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Sovereignty
- Reasons why commercial VPNs log metadata and respond to legal demands.
- OpenVPN: A mature, feature-rich option with TAP/TUN flexibility.
- WireGuard: A modern, minimalist approach with high-performance cryptography.
- Selecting the optimal protocol for your specific threat model.
Implementing OpenVPN
- Setting up OpenVPN with Easy-RSA PKI.
- Server configuration: ciphers, HMAC, TLS-auth, and topology.
- Generating and distributing client configurations.
- Managing revocation and CRL.
Implementing WireGuard
- Installing kernel modules and WireGuard-tools.
- Key generation and peer setup.
- Managing wg-quick and systemd units.
- Road warrior and site-to-site mesh topologies.
Authentication and Authorisation
- Certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Two-factor authentication using TOTP plugins.
- Access control lists and per-user IP allocation.
Routing and Network Architecture
- Full tunnel versus split tunnel routing.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for egress traffic.
- Multi-WAN and policy-based routing.
Performance and Scalability
- Throughput benchmarks comparing WireGuard and OpenVPN.
- Multi-core optimisation and kernel bypass.
- Load balancing across multiple VPN servers.
- DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and accounting for bandwidth.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and expiry alerts.
- Disaster recovery and configuration backup.
Requirements
- Intermediate proficiency in Linux networking and firewall management.
- A solid grasp of PKI, certificates, and encryption protocols.
- Knowledge of routing, NAT, and IP forwarding.
Target Audience
- Network administrators looking to replace commercial VPN services.
- Remote teams requiring sovereign, secure access.
- Organisations in regions subject to VPN blocking or surveillance.
