Get in Touch
 Duration 14 hours

Course Outline

Foundations of VPN Sovereignty

  • Why commercial VPNs log metadata and respond to legal requests.
  • OpenVPN: A mature, feature-rich solution with TAP/TUN flexibility.
  • WireGuard: A modern, minimal approach with high-performance cryptography.
  • Selecting the appropriate protocol for your specific threat model.

Implementing OpenVPN

  • Installing OpenVPN using Easy-RSA PKI.
  • Server setup: ciphers, HMAC, TLS-auth, and topology.
  • Generating and distributing client configurations.
  • Managing revocation and CRLs.

Implementing WireGuard

  • Installing kernel modules and WireGuard-tools.
  • Generating keys and configuring peers.
  • Managing wg-quick and systemd units.
  • Road warrior and site-to-site mesh topologies.

Authentication and Authorization

  • Certificate-based authentication with OpenVPN.
  • Integrating LDAP and RADIUS backends.
  • Implementing two-factor authentication with TOTP plugins.
  • Configuring access control lists and per-user IP allocation.

Routing and Network Architecture

  • Comparing full tunnel versus split tunnel routing.
  • Configuring push routes, DNS, and WINS.
  • NAT and masquerading for egress traffic.
  • Multi-WAN and policy-based routing.

Performance and Scalability

  • Throughput benchmarks: WireGuard vs OpenVPN.
  • Multi-core optimization and kernel bypass.
  • Load balancing across multiple VPN servers.
  • DDoS protection and connection rate limiting.

Monitoring and Maintenance

  • Connection logging and bandwidth accounting.
  • Integrating Syslog and Prometheus exporters.
  • Automating certificate renewal and expiration alerts.
  • Disaster recovery and configuration backups.

Requirements

  • Intermediate knowledge of Linux networking and firewall administration.
  • Understanding of PKI, certificates, and encryption protocols.
  • Familiarity with routing, NAT, and IP forwarding.

Target Audience

  • Network administrators transitioning away from commercial VPN services.
  • Remote work teams requiring sovereign secure access.
  • Organizations operating in regions subject to VPN blocking or surveillance.

Number of participants


Price per participant

Upcoming Courses

Related Categories