Dark Network & VPN Analysis
An academic cybersecurity project that implements a secure mesh VPN architecture using WireGuard, Rosenpass, and Single Packet Authorization (SPA). The project explores post-quantum cryptography (PQC), secure remote communication, and network monitoring through a layered security approach.
About the Project
This project focuses on designing and implementing a secure Dark Network Mesh architecture for a financial technology environment. By integrating WireGuard, Rosenpass, and Single Packet Authorization (SPA), the system provides encrypted communication, post-quantum key exchange, and protection against unauthorized network access.
The project was developed to strengthen secure remote connectivity while addressing future cybersecurity challenges posed by quantum computing and modern network attacks.
Project Objectives
The primary objective was to design a layered VPN infrastructure that improves communication security, minimizes attack surfaces, and prepares network communication for future quantum-resistant cryptography. The project also evaluates secure deployment, monitoring, and testing in a simulated enterprise environment.
Note: The monitoring dashboard is hosted on a private VPS and may be temporarily unavailable when the server is offline.
System Architecture
The infrastructure was designed using a mesh VPN topology that enables secure peer-to-peer communication between multiple network nodes. WireGuard provides encrypted VPN tunnels, Rosenpass enhances key exchange using post-quantum cryptography, and fwknop implements Single Packet Authorization to hide exposed services from unauthorized access.
Technologies Used
WireGuard
Rosenpass
fwknop (Single Packet Authorization)
Ubuntu Server
VPS Deployment
Web Dashboard
Networking Fundamentals
Post-Quantum Cryptography (PQC)
Implementation & Testing
The project included VPN deployment, dashboard implementation, connectivity testing, security validation, and monitoring to verify secure communication between network nodes while maintaining performance and reliability.
My Contribution
As the Backend & Reliability Engineer for this team project, I was responsible for setting up a dummy API for testing, configuring Prometheus Exporter for system monitoring, developing benchmarking and load testing scenarios, and supporting system reliability analysis. My role focused on evaluating system performance and ensuring the monitoring infrastructure could effectively capture operational metrics during testing.
Project Outcome
The implementation successfully demonstrated a secure mesh VPN architecture enhanced with post-quantum cryptography and Single Packet Authorization. The system achieved secure communication, improved network protection, and centralized monitoring through a web-based dashboard.
What I Learned
This project strengthened my understanding of secure network architecture, VPN deployment, post-quantum cryptography, system monitoring, and enterprise cybersecurity practices. It also improved my ability to design, implement, and evaluate layered security solutions in a collaborative team environment.
