Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
VPN Sovereignty Fundamentals
- Understanding why commercial VPNs log metadata and comply with legal requests.
- OpenVPN: a mature, feature-rich solution with TAP/TUN flexibility.
- WireGuard: a modern, minimal, and high-performance cryptographic protocol.
- Selecting the appropriate protocol for your specific threat model.
OpenVPN Deployment
- Installing OpenVPN with Easy-RSA PKI.
- Configuring the server: cipher, HMAC, TLS-auth, and topology settings.
- Generating and distributing client configurations.
- Managing revocation and CRLs.
WireGuard Deployment
- Installing the kernel module and WireGuard-tools.
- Generating keys and configuring peers.
- Managing wg-quick and systemd units.
- Setting up road warrior and site-to-site mesh topologies.
Authentication and Authorization
- Implementing certificate-based authentication with OpenVPN.
- Integrating LDAP and RADIUS backends.
- Configuring two-factor authentication using TOTP plugins.
- Defining access control lists and per-user IP allocation.
Routing and Network Design
- Routing strategies for full tunnel versus split tunnel.
- Configuring push routes, DNS, and WINS.
- Applying NAT and masquerading for egress traffic.
- Implementing Multi-WAN and policy-based routing.
Performance and Scaling
- Throughput benchmarks comparing WireGuard and OpenVPN.
- Multi-core optimization and kernel bypass techniques.
- Load balancing across multiple VPN servers.
- DDoS protection and connection rate limiting.
Monitoring and Maintenance
- Logging connections and accounting for bandwidth.
- Integrating Syslog and Prometheus exporters.
- Automating certificate renewal and expiration alerts.
- Disaster recovery and configuration backup strategies.
Requirements
- Intermediate knowledge of Linux networking and firewall administration.
- Understanding of PKI, certificates, and encryption protocols.
- Familiarity with routing, NAT, and IP forwarding.
Audience
- Network administrators replacing commercial VPN services.
- Remote work teams requiring sovereign secure access.
- Organizations in regions facing VPN blocking or surveillance.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 3200 € + VAT*
Contact us for an exact quote and to hear our latest promotions
