Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of VPN Independence
- Examining why commercial VPNs retain metadata and respond to legal demands.
- OpenVPN: A mature, feature-complete solution with TAP/TUN adaptability.
- WireGuard: A modern, lightweight protocol with superior cryptographic performance.
- Selecting the optimal protocol based on your specific threat profile.
Implementing OpenVPN
- Installing OpenVPN alongside Easy-RSA for PKI management.
- Configuring server parameters: ciphers, HMAC, TLS-auth, and network topology.
- Generating and distributing client configurations.
- Handling certificate revocation and CRL oversight.
Deploying WireGuard
- Setting up kernel modules and the WireGuard-tools package.
- Generating keys and configuring peer connections.
- Managing wg-quick and systemd services.
- Building road warrior and site-to-site mesh networks.
Identity and Access Management
- Using certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Enabling two-factor authentication via TOTP plugins.
- Defining access control lists and allocating IPs per user.
Network Architecture and Routing
- Comparing full tunnel and split tunnel routing strategies.
- Configuring push routes, DNS, and WINS settings.
- Applying NAT and masquerading for outbound traffic.
- Implementing multi-WAN setups and policy-based routing.
Optimization and Scale
- Benchmarking throughput: WireGuard versus OpenVPN.
- Optimizing for multi-core performance and kernel bypass.
- Distributing load across multiple VPN instances.
- Implementing DDoS mitigation and connection rate limits.
Oversight and Upkeep
- Logging connections and tracking bandwidth consumption.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate updates and monitoring expiration dates.
- Establishing disaster recovery and configuration backup protocols.
Requirements
- Intermediate knowledge of Linux networking and firewall management.
- Comprehension of PKI, digital certificates, and encryption standards.
- Proficiency with routing, NAT, and IP forwarding mechanisms.
Target Audience
- Network professionals transitioning away from commercial VPN providers.
- Distributed teams requiring secure, independent access control.
- Entities operating in regions characterized by VPN censorship or surveillance.
