Course Agenda
Schedule
Session 1 | 09:00 - 10:30 |
Break | 10:30 - 11:00 |
Session 2 | 11:00 - 12:30 |
Lunch | 12:30 - 14:00 |
Session 3 | 14:00 - 16:00 |
Break | 16:00 - 16:30 |
Session 4 | 16:30 - 17:30 |
Instructors
CT Christian Teuschel: christian.teuschel(at)ripe.net (RIPE NCC) Netherlands PR Phil Regnauld: regnauld(at)nsrc.org Network Startup Resource Center (NSRC) Denmark/France RL Richard Lamb: richard.lamb(at)icann.org (ICANN) USA
Sunday Topic Lead Presentations Exercises Session I Introduction and overview Presentation of participants -- Session II DNS refreshers CT Quick UNIX Intro PR In Preso Session III Hands-on: using dig, doc, wireshark Lab1-TXT DNS Delegation Lab1-TXT NSD-TXT Session IV DNS Delegation (cont'd) Monday Session I DNS Operations Session II DNS software overview UNBOUND-TXT Session III DNS analysis: tcpdump TXT Session IV Logging LOG-TXT Tuesday Session I Securing DNS ACL-PDF TSIG-PDF ACL-TSIG-TXT | SWATCH-TXT Session II DNS Security & Resiliency Session III Monitoring performance & availability NAGIOS-PDF
SMOKEPING-PDF
RIPE-NCC-ToolsNAGIOS-TXT
SMOKEPING-LAB CONFIG-TXTSession IV Anycast ANYCAST-TXT Session IV Introduction to DNSSEC SIGN-TXT Wednesday Session I Introduction to DNSSEC (continued) Session II DNSSEC signing BIND-SIGNING-TXT Session III Lab: Manual rollover ZSK: TXT | KSK: TXT Thursday Session I Lab: Inline signing BIND inline signing: TXT OpenDNSSEC OpenDNSSEC-TXT Session II-III DNSSEC Implementation Considerations and Risk Analysis DNSSEC - DPS Key Ceremony - Acceptance Key Ceremony - Demo Evaluation & Closing Evaluation form
Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE
Extra sessions:
Topic | Presentations | Exercises |
NSD authoritative server | NSD-TXT | |
Unbound DNSSEC validation | UNBOUND-DNSSEC-TXT |
Useful Links
CZ NIC DNSSEC Validator Chrome Plug-In | (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/) |
CZ NIC DNSSEC Validator Firefox Plug-In | (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/) |
DNSVIZ - A DNS visualization tool | (http://dnsviz.net/) |
Verisign - DNS debugger | (http://dnssec-debugger.verisignlabs.com/) |
DNSSEC Trigger | (http://www.nlnetlabs.nl/projects/dnssec-trigger/) |
DANE | (http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec) |
OpenDNSSEC keystates | https://wiki.opendnssec.org/display/DOCS/Key+States |
NLnet Labs tutorials (includes Troubleshooting slides) | http://www.dns-school.org/Slides/index.html |
Last modified 5 years ago
Last modified on Mar 27, 2014, 4:55:53 AM
Attachments (59)
- dns-operations-intermediate.pdf (164.6 KB) - added by admin 7 years ago.
- dns.pdf (425.4 KB) - added by admin 7 years ago.
- dns-dig-hands-on.txt (2.6 KB) - added by admin 7 years ago.
- dns-dig-hands-on-2.txt (11.7 KB) - added by admin 7 years ago.
- dns-software-overview.pdf (1.2 MB) - added by admin 7 years ago.
- dns-delegation.pdf (224.5 KB) - added by admin 7 years ago.
- DNS.Monitoring.Logging.pdf (4.3 MB) - added by admin 7 years ago.
- dns-bind-logging.txt (2.8 KB) - added by admin 7 years ago.
- smokeping-config.txt (3.5 KB) - added by admin 7 years ago.
- dns-enabling-ipv6.txt (3.3 KB) - added by admin 7 years ago.
- dns-enabling-ipv6-service.txt (4.0 KB) - added by admin 7 years ago.
- dns-security-resiliency.ppt.pdf (1.4 MB) - added by admin 7 years ago.
- dns-acl.pdf (1.1 MB) - added by admin 7 years ago.
- dns-tsig.pdf (1.5 MB) - added by admin 7 years ago.
- dns-ipv6.pdf (126.8 KB) - added by admin 7 years ago.
- dns-acl-tsig-transfer-security.txt (7.0 KB) - added by admin 7 years ago.
- dnssec-tutorial-2011.pdf (365.1 KB) - added by admin 7 years ago.
- dns-security-resiliency.ppt.2.pdf (1.4 MB) - added by admin 7 years ago.
-
menog-dnssec-design.pptx
(66.3 KB) -
added by naticklamb 7 years ago.
Demo architecture for DPS and Key Ceremony
- vnc-4_1_3-x86_win32_viewer.exe (265.3 KB) - added by admin 7 years ago.
- dns-bind-caching-setup.2.txt (4.3 KB) - added by admin 7 years ago.
- dns-bind-caching-setup.txt (4.4 KB) - added by admin 7 years ago.
- dns-security-resiliency.pdf (1.4 MB) - added by admin 7 years ago.
-
menog-dnssec-demo-dps.pdf
(384.3 KB) -
added by admin 7 years ago.
Demo DPS
- menog-dnssec-design2.pdf (1.9 MB) - added by admin 7 years ago.
-
menog-dnssec-KC-demo-acceptance.pdf
(492.5 KB) -
added by admin 7 years ago.
Demo Key Ceremony Part 1
-
menog-dnssec-KC-demo-main.pdf
(365.0 KB) -
added by admin 7 years ago.
Demo Key Ceremony Part 2
- 01-dns-welcome.pdf (382.4 KB) - added by admin 5 years ago.
- dns-delegation-exercise-inst-is-slave.txt (8.1 KB) - added by admin 5 years ago.
- dns-delegation-exercise.txt (8.4 KB) - added by admin 5 years ago.
- unix-minimal.pdf (1.1 MB) - added by admin 5 years ago.
- dns-unbound-config.txt (6.5 KB) - added by admin 5 years ago.
- dns-tcpdump-wireshark.txt (3.4 KB) - added by admin 5 years ago.
- dns-bind-logging.pdf (1.8 MB) - added by admin 5 years ago.
- dns-bind-logging-lab1.txt (3.2 KB) - added by admin 5 years ago.
- dns-swatch-zone-transfer.txt (1.7 KB) - added by admin 5 years ago.
- nagios.pdf (9.8 MB) - added by admin 5 years ago.
- dns-nagios-exercises.txt (6.1 KB) - added by admin 5 years ago.
- dns-smokeping-exercise.txt (2.2 KB) - added by admin 5 years ago.
- dnssec-tutorial.pdf (469.7 KB) - added by admin 5 years ago.
- smokeping.pdf (4.7 MB) - added by admin 5 years ago.
- dxb-dnssec-KC-demo-main.pdf (363.6 KB) - added by lamb 5 years ago.
- dxb-dnssec-KC-demo-acceptance.pdf (456.3 KB) - added by lamb 5 years ago.
- dxb-safe-log.pdf (107.5 KB) - added by lamb 5 years ago.
- dxb-signin-log.pdf (121.8 KB) - added by lamb 5 years ago.
- dxb-dnssec-KC-demo-acceptance.2.pdf (456.3 KB) - added by lamb 5 years ago.
- dnssec-bind-manual-signing-howto.txt (7.0 KB) - added by admin 5 years ago.
- dxb-dnssec-demo-dps.pdf (196.5 KB) - added by lamb 5 years ago.
-
MENOG14_DNSSEC_WS.pdf
(1.9 MB) -
added by cteuschel 5 years ago.
Short introduction slides for RIPE NCC's services: RIPEstat, RIPE Atlas and DNSMON
- dnssec-bind-manual-zsk-rollover.txt (5.9 KB) - added by admin 5 years ago.
- dnssec-bind-manual-ksk-rollover.txt (3.4 KB) - added by admin 5 years ago.
- dxb-dnssec-KC-demo-main.2.pdf (363.6 KB) - added by lamb 5 years ago.
- opendnssec-lab1.txt (10.7 KB) - added by admin 5 years ago.
- dnssec-bind-inline-signing-howto.txt (7.9 KB) - added by admin 5 years ago.
- dns-anycast.txt (6.0 KB) - added by admin 5 years ago.
- dxb-dnssec-design.2.pdf (2.6 MB) - added by lamb 5 years ago.
- dns-nsd-config.txt (3.0 KB) - added by admin 5 years ago.
- dxb-dnssec-design.pdf (2.6 MB) - added by lamb 5 years ago.
- dnssec-unbound-enable-validation.txt (1.3 KB) - added by admin 5 years ago.