Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
VPN Sovereignty Fundamentals
- Understanding why commercial VPNs log metadata and comply with legal requests.
- OpenVPN: mature, feature-rich, with TAP/TUN flexibility.
- WireGuard: modern, minimal, offering high-performance cryptography.
- Selecting the appropriate protocol for your specific threat model.
OpenVPN Deployment
- Installing OpenVPN with Easy-RSA PKI.
- Server configuration: cipher, HMAC, TLS-auth, and topology.
- Client configuration generation and distribution.
- Revocation and CRL management.
WireGuard Deployment
- Kernel module installation and WireGuard-tools setup.
- Key generation and peer configuration.
- wg-quick and systemd unit management.
- Road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Certificate-based authentication with OpenVPN.
- LDAP and RADIUS backend integration.
- Two-factor authentication using TOTP plugins.
- Access control lists and per-user IP allocation.
Routing and Network Design
- Full tunnel vs. split-tunnel routing strategies.
- Push routes, DNS, and WINS configuration.
- NAT and masquerading for egress traffic.
- Multi-WAN and policy-based routing.
Performance and Scaling
- Throughput benchmarks comparing WireGuard vs. OpenVPN.
- Multi-core optimization and kernel bypass techniques.
- Load balancing across multiple VPN servers.
- DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Connection logging and bandwidth accounting.
- Syslog and Prometheus exporter integration.
- Automated certificate renewal and expiration alerts.
- Disaster recovery and configuration backup procedures.
Requirements
- Intermediate knowledge of Linux networking and firewall administration.
- Understanding of PKI, certificates, and encryption protocols.
- Familiarity with routing, NAT, and IP forwarding.
Audience
- Network administrators replacing commercial VPN services.
- Remote work teams requiring sovereign and secure access.
- Organizations located in regions with VPN blocking or surveillance.
14 Hours
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 3200 € + VAT*
Contact us for an exact quote and to hear our latest promotions
