Course Agenda

Schedule

Session 1	09:00 - 10:30
Break	10:30 - 11:00
Session 2	11:00 - 12:30
Lunch	12:30 - 14:00
Session 3	14:00 - 16:00
Break	16:00 - 16:30
Session 4	16:30 - 17:30

Instructors

CT	Christian Teuschel: christian.teuschel(at)ripe.net	(​RIPE NCC)	Netherlands
PR	Phil Regnauld: regnauld(at)nsrc.org	Network Startup Resource Center (​NSRC)	Denmark/France
RL	Richard Lamb: richard.lamb(at)icann.org	(​ICANN)	USA

Sunday	Topic	Lead	Presentations	Exercises
Session I	Introduction and overview		PDF
	Presentation of participants	--
Session II	DNS refreshers	CT	PDF
	Quick UNIX Intro	PR	PDF	In Preso
Session III	Hands-on: using dig, doc, wireshark			Lab1-TXT
	DNS Delegation		PDF	Lab1-TXT NSD-TXT
Session IV	DNS Delegation (cont'd)
Monday
Session I	DNS Operations		PDF
Session II	DNS software overview		PDF	UNBOUND-TXT
Session III	DNS analysis: tcpdump			TXT
Session IV	Logging		PDF	LOG-TXT
Tuesday
Session I	Securing DNS		ACL-PDF TSIG-PDF	ACL-TSIG-TXT | SWATCH-TXT
Session II	DNS Security & Resiliency		PDF
Session III	Monitoring performance & availability		NAGIOS-PDF SMOKEPING-PDF RIPE-NCC-Tools	NAGIOS-TXT SMOKEPING-LAB CONFIG-TXT
Session IV	Anycast			ANYCAST-TXT
Session IV	Introduction to DNSSEC		PDF	SIGN-TXT
Wednesday
Session I	Introduction to DNSSEC		(continued)
Session II	DNSSEC signing			BIND-SIGNING-TXT
Session III	Lab: Manual rollover			ZSK: TXT | KSK: TXT
Thursday
Session I	Lab: Inline signing			BIND inline signing: TXT
	OpenDNSSEC			OpenDNSSEC-TXT
Session II-III	DNSSEC Implementation Considerations and Risk Analysis		PDF
	DNSSEC - DPS		PDF
	Key Ceremony - Acceptance		PDF
	Key Ceremony - Demo		PDF
	Evaluation & Closing		​Evaluation form

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Extra sessions:

Topic	Presentations	Exercises
NSD authoritative server		NSD-TXT
Unbound DNSSEC validation		UNBOUND-DNSSEC-TXT

Useful Links

CZ NIC DNSSEC Validator Chrome Plug-In	(​http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/)
CZ NIC DNSSEC Validator Firefox Plug-In	(​http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/)
DNSVIZ - A DNS visualization tool	(​http://dnsviz.net/)
Verisign - DNS debugger	(​http://dnssec-debugger.verisignlabs.com/)
DNSSEC Trigger	(​http://www.nlnetlabs.nl/projects/dnssec-trigger/)
DANE	(​http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec)
OpenDNSSEC keystates	​https://wiki.opendnssec.org/display/DOCS/Key+States
NLnet Labs tutorials (includes Troubleshooting slides)	​http://www.dns-school.org/Slides/index.html