Course Agenda

Schedule

Session 1	09:00 - 10:30
Break	10:30 - 11:00
Session 2	11:00 - 12:30
Lunch	12:30 - 14:00
Session 3	14:00 - 16:00
Break	16:00 - 16:30
Session 4	16:30 - 17:30

Instructors

PR	Phil Regnauld: regnauld(at)nsrc.org	Network Startup Resource Center (​NSRC)	Denmark/France
RL	Richard Lamb: richard.lamb(at)icann.org	(​ICANN)	USA

Workshop schedule

Monday	Topic	Lead	Presentations	Exercises
Session I-II	Registration, welcome
	Awareness session: DNSSEC		DNSSEC Why? | PDF
	Panel discussion : DNSSEC
Session III	Intro to environment	PR	Introduction | PDF	In Preso
Session IV	Hands-on: using dig, doc, wireshark			Lab1-TXT
Tuesday
Session I	DNS Delegation		PDF	Lab1-TXT
Session II	DNS Delegation (cont'd)
Session III	DNS Operations		PDF
Session IV	DNS software overview		PDF	UNBOUND-TXT
	Logging		PDF	LOG-TXT
	Securing DNS		ACL-PDF TSIG-PDF	ACL-TSIG-TXT | SWATCH-TXT
Wednesday
Session I	DNSSEC signing		PDF	BIND-SIGNING-TXT
	DNSSEC validation			UNBOUND-DNSSEC-TXT
Session II+III	Lab: Manual rollover			ZSK: TXT | KSK: TXT
Session IV	Lab: Inline signing			BIND inline signing: TXT
Thursday
Session I	OpenDNSSEC			OpenDNSSEC-TXT
Session II	Monitoring performance & availability		NAGIOS-PDF SMOKEPING-PDF	NAGIOS-TXT NAGIOS-DNSSEC-TXT SMOKEPING-LAB CONFIG-TXT
Session III-IV	DNSSEC Implementation Considerations and Risk Analysis		PDF
	DNSSEC - DPS		PDF
	Key Ceremony - Acceptance		PDF
	Key Ceremony - Demo		PDF
	Evaluation & Closing		​Evaluation form

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Extra sessions:

Topic	Presentations	Exercises
DNS refreshers	PDF
Crypto refresher	PDF
DNS analysis: tcpdump		TXT
DNS Security & Resiliency	PDF

Useful Links

CZ NIC DNSSEC Validator Chrome Plug-In	(​http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/)
CZ NIC DNSSEC Validator Firefox Plug-In	(​http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/)
DNSVIZ - A DNS visualization tool	(​http://dnsviz.net/)
Verisign - DNS debugger	(​http://dnssec-debugger.verisignlabs.com/)
DNSSEC Trigger	(​http://www.nlnetlabs.nl/projects/dnssec-trigger/)
DANE	(​http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec)
OpenDNSSEC keystates	​https://wiki.opendnssec.org/display/DOCS/Key+States
NLnet Labs tutorials (includes Troubleshooting slides)	​http://www.dns-school.org/Slides/index.html