Homelab Academy / Modules
Independent application with evidence.
Module: Edge Access & VPN
Activity type: Homework / independent application
Objective: Explain how WireGuard uses public keys as peer identities.
Design a three-client address plan using unique /32 IPv4 assignments and write the gateway-side Peer fields for each client without generating real keys.
Compare a split-tunnel design for 10.20.0.0/16 with a full-tunnel design. List the route, DNS, IPv6, forwarding, egress, monitoring, and rollback questions that differ.
Draw the outer and inner packet headers for a client packet sent to a private application through a gateway.
Write a key-rotation runbook that maintains administrative access and never transfers private keys between peers.
Explain how a handshake can succeed even when a destination service remains unreachable.
Submit the address plan, configuration sketches containing only invented labels rather than key material, packet-flow diagram, rotation runbook, and troubleshooting explanation.