DNS/DNSSEC Workshop Agenda

Schedule

Session 1	09:00 - 10:30
Break	10:30 - 11:00
Session 2	11:00 - 12:30
Lunch	12:30 - 14:00
Session 3	14:00 - 16:00
Break	16:00 - 16:30
Session 4	16:30 - 17:30

Instructors

Name	Abbreviation	Email	Organization	Country
Andy Linton	AL	asjl(at)nsrc.org	​NSRC	New Zealand
Champika Wijayatunga	CW	champika.wijayatunga(at)icann.org	​ICANN	USA
Yoshiaki Kasahara	YK	kasahara(at)nc.kyushu-u.ac.jp	​Kyushu University	Japan
Steve Conte	SC	steve.conte(at)icann.org	​ICANN	USA

Workshop schedule

Tuesday	Topic	Lead	Presentations	Exercises
Session I	Introduction and overview	AL	PDF
	Presentation of participants
Session II	DNS refreshers	CW	PDF
	Quick UNIX Intro	YK	PDF	In presentation
Session III	Hands-on: using dig and doc	YK		HandsOn-TXT
	DNS Delegation	CW	PDF	BIND-TXT NSD-TXT
Session IV	DNS Delegation (cont'd)	CW
Wednesday
Session I	DNS Operations	AL	PDF
Session II	DNS software overview	YK	PDF	UNBOUND-TXT
Session III	DNS analysis: tcpdump	YK		ANALYSIS-TXT
Session IV	Logging	SC	PDF	LOGGING-TXT
Thursday
Session I	Reverse DNS	CW	PDF	REVERSE-TXT
	Securing DNS	CW	ACL-PDF TSIG-PDF	ACL-TSIG-PDF SWATCH-TXT
Session II	DNS Security & Resiliency	AL	PDF
Session III	Monitoring performance & availability	AL	PDF	NAGIOS-TXT SMOKEPING-LAB CONFIG-TXT
Session IV	Anycast	SC	PDF
	Introduction to DNSSEC	CW	PDF
Friday
Session I	Introduction to DNSSEC (continued)	CW
Session II	DNSSEC signing			BIND-SIGNING-TXT
Session III & IV	Lab: Manual rollover			ZSK-TXT KSK-TXT
Saturday
Session I	Lab: Inline signing			BIND-inline-signing-TXT
	OpenDNSSEC			OpenDNSSEC-TXT
Session II & III	DNSSEC Implementation Considerations and Risk Analysis	AL	PDF
	DNSSEC - DPS	AL	PDF
	Key Ceremony - Acceptance	AL	PDF
	Key Ceremony - Demo	AL	PDF
Session IV	Evaluation & Closing	AL

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Extra sessions

Topic	Presentations	Exercises
Unbound DNSSEC validation		UNBOUND-DNSSEC-TXT

Useful Links

CZ NIC DNSSEC Validator Chrome Plug-In	(​http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/)
CZ NIC DNSSEC Validator Firefox Plug-In	(​http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/)
DNSVIZ - A DNS visualization tool	(​http://dnsviz.net/)
Verisign - DNS debugger	(​http://dnssec-debugger.verisignlabs.com/)
DNSSEC Trigger	(​http://www.nlnetlabs.nl/projects/dnssec-trigger/)
DANE	(​http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec)
OpenDNSSEC keystates	​https://wiki.opendnssec.org/display/DOCS/Key+States
NLnet Labs tutorials (includes Troubleshooting slides)	​http://www.dns-school.org/Slides/index.html