Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Learn OpenVPN and Wireguard
Rating: 4.4 out of 5(75 ratings)
678 students

Learn OpenVPN and Wireguard

Desiging and deploying VPN networks
Created byBartosz Drogosiewicz
Last updated 10/2023
English
English

What you'll learn

  • Design VPN networks
  • Implement firewall security for your VPN
  • X.509, SSL and Certificate Authority
  • Managing users within OpenVPN and Wireguard

Course content

2 sections • 15 lectures • 2h 46m total length

  • Introduction1:44

    Install, configure, and maintain OpenVPN and WireGuard, comparing their strengths and differences. Understand network design, certificates, transport layer VPNs, ciphers, sample configs, and security best practices.

  • Differences between OpenVPN and Wireguard5:02

    Analyze how OpenVPN supports TCP and UDP, uses asymmetric cryptography, and can use tun or tap, while WireGuard uses UDP, symmetric cryptography, and is stateless and tun-only, guiding your choice.

  • Design principles, High-Availability13:07

    Learn design principles for VPN topology and high availability, from single-server setups to two-server high-availability deployments, addressing NAT and firewall complexities and planning stable IP schemes for internal resources.

  • Certificate chain, Certificate Authority15:03

    Explore certificate chains and certificate authorities in OpenVPN, including X.509 fields, private/public keys, certificate signing requests, revocation lists, and chain validation, with a practical setup using EasyRSA.

  • TUN and TAP network interfaces5:37

    Explore tun and tap interfaces: tun carries 3 IP packets with no MAC, while tap carries 2 Ethernet frames with MAC; Open VPN supports both, Wireguard uses tun only.

  • Transport protocols, TCP vs UDP5:56

    compare transport protocols: tcp is connection-based and stateful with reliability and latency, while udp is connectionless and stateless with lower bandwidth; openvpn can run on both, wireguard uses udp only.

  • Ciphers and hardware considerations5:08

    Explore current cipher choices for OpenVPN and WireGuard, including AES-256-GCM and ChaCha20, and assess hardware support and CPU AES instructions for optimal performance.

  • Custom scripting and option pushing6:58

    Learn how OpenVPN pushes options and scripts, enabling server-side per-client IP assignments and gateway routing. Compare WireGuard’s event scripts and lack of IP pushing with allowed IPs.

  • An overview of sample OpenVPN config file14:40

    Learn to configure a basic OpenVPN server and client with listen settings, topology, and client address pools. Explore TLS options, certificates, push routes, and per-client configs.

  • An overview of sample WireGuard config file9:19

    Review wireguard server and client configuration basics, including minimal server setup, per-client peers with public and pre shared keys, and allowed ips.

  • Quick quiz

Requirements

  • Basic knowledge about Linux operating system
  • Familiarity with command-line interface in Linux
  • Basic computer network knowledge

Description

Today's world often requires us to share resources like servers and websites, preferably with secure channels that block the access to wide Internet. This course aims to first and foremost teach you fundamental knowledge about most popular and free VPN solutions (OpenVPN, WireGuard), not only on how to deploy them, but also how they work and what are their best use-case scenarios. Whether you need to setup something quick, or gain knowledge on how to set up corporate-grade VPN: this course is for you.

You will be taught key differences between OpenVPN and Wireguard, that may impact your decision on which software to use in your own environment.

Lectures include information about certificate-based authentication, especially useful in business deployments. You will have knowledge on how to deploy your own Certificate Authority for use with OpenVPN. Most importantly, x.509 extensions will be laid out in simple terms.

Finally course includes an example on how to set up and plan your firewall.


Who this course is for:

  • You want to learn fundamental knowledge behind OpenVPN and WireGuard

  • You want to learn about basic design principles with VPN networks

  • You want to learn how to quickly deploy VPNs

  • You want to learn how certificate based authentication and authorization works

  • You want to learn how to deploy OpenVPN or WireGuard via CLI on Linux server

Who this course is for:

  • Begginer DevOps and Administrators, developers wanting to expand their knowledge about VPNs

Report abuse