Provision a VM somewhere, then buy two cheap routers, flash OpenWRT on them, and try to setup a Wireguard VPN so that devices connected to each router can all ping each other, and you can ping each device from the VM. It's a seemingly simple task that will force you to learn how to solve a lot of practical problems.