Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
VPN Sovereignty Foundations
- Why commercial providers log metadata and adhere to legal compulsion.
- OpenVPN: Mature, feature-robust, with TAP/TUN versatility.
- WireGuard: Contemporary, streamlined, and high-performance cryptographic design.
- Selecting the optimal protocol based on your specific threat profile.
OpenVPN Implementation
- Installing OpenVPN alongside Easy-RSA PKI.
- Server setup: cipher selection, HMAC, TLS-auth, and network topology.
- Generating and distributing client configurations.
- Handling revocation and CRL oversight.
WireGuard Implementation
- Installing kernel modules and WireGuard-tools.
- Creating keys and configuring peers.
- Managing wg-quick and systemd units.
- Configuring road warrior and site-to-site mesh architectures.
Authentication and Access Control
- Utilising certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Implementing two-factor authentication via TOTP plugins.
- Managing ACLs and individual IP address allocation.
Routing and Network Architecture
- Distinguishing between full tunnel and split tunnel routing.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for outbound traffic.
- Handling multi-WAN setups and policy-based routing.
Performance and Scalability
- Benchmarking throughput between WireGuard and OpenVPN.
- Optimising multi-core performance and kernel bypass techniques.
- Distributing load across multiple VPN servers.
- Implementing DDoS mitigation and connection rate controls.
Monitoring and Upkeep
- Logging connections and tracking bandwidth consumption.
- Integrating with Syslog and Prometheus exporters.
- Automating certificate renewal and expiration notifications.
- Establishing disaster recovery and configuration backup protocols.
Requirements
- Proficiency in intermediate Linux networking and firewall management.
- Knowledge of PKI, digital certificates, and encryption standards.
- Understanding of routing, NAT, and IP forwarding mechanisms.
Target Audience
- Network administrators seeking to migrate from commercial VPN solutions.
- Remote teams requiring independent, secure network access.
- Entities operating in regions subject to VPN restrictions or monitoring.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 2600 € + VAT*
Contact us for an exact quote and to hear our latest promotions
