DNS/DNSSEC Workshop Agenda
Schedule
Session 1 | 09:00 - 10:30 |
Break | 10:30 - 11:00 |
Session 2 | 11:00 - 12:30 |
Lunch | 12:30 - 14:00 |
Session 3 | 14:00 - 16:00 |
Break | 16:00 - 16:30 |
Session 4 | 16:30 - 17:30 |
Instructors
Name | Abbreviation | Organization | Country | |
Andy Linton | AL | asjl(at)nsrc.org | NSRC | New Zealand |
Champika Wijayatunga | CW | champika.wijayatunga(at)icann.org | ICANN | USA |
Yoshiaki Kasahara | YK | kasahara(at)nc.kyushu-u.ac.jp | Kyushu University | Japan |
Steve Conte | SC | steve.conte(at)icann.org | ICANN | USA |
Workshop schedule
Tuesday | Topic | Lead | Presentations | Exercises |
Session I | Introduction and overview | AL | ||
Presentation of participants | ||||
Session II | DNS refreshers | CW | ||
Quick UNIX Intro | YK | In presentation | ||
Session III | Hands-on: using dig and doc | YK | HandsOn-TXT | |
DNS Delegation | CW | BIND-TXT NSD-TXT | ||
Session IV | DNS Delegation (cont'd) | CW | ||
Wednesday | ||||
Session I | DNS Operations | AL | ||
Session II | DNS software overview | YK | UNBOUND-TXT | |
Session III | DNS analysis: tcpdump | YK | ANALYSIS-TXT | |
Session IV | Logging | SC | LOGGING-TXT | |
Thursday | ||||
Session I | Reverse DNS | CW | REVERSE-TXT | |
Securing DNS | CW | ACL-PDF TSIG-PDF | ACL-TSIG-PDF SWATCH-TXT | |
Session II | DNS Security & Resiliency | AL | ||
Session III | Monitoring performance & availability | AL | NAGIOS-TXT SMOKEPING-LAB CONFIG-TXT | |
Session IV | Anycast | SC | ||
Introduction to DNSSEC | CW | |||
Friday | ||||
Session I | Introduction to DNSSEC (continued) | CW | ||
Session II | DNSSEC signing | BIND-SIGNING-TXT | ||
Session III & IV | Lab: Manual rollover | ZSK-TXT KSK-TXT | ||
Saturday | ||||
Session I | Lab: Inline signing | BIND-inline-signing-TXT | ||
OpenDNSSEC | OpenDNSSEC-TXT | |||
Session II & III | DNSSEC Implementation Considerations and Risk Analysis | AL | ||
DNSSEC - DPS | AL | |||
Key Ceremony - Acceptance | AL | |||
Key Ceremony - Demo | AL | |||
Session IV | Evaluation & Closing | AL | ||
Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE
Extra sessions
Topic | Presentations | Exercises |
Unbound DNSSEC validation | UNBOUND-DNSSEC-TXT |
Useful Links
CZ NIC DNSSEC Validator Chrome Plug-In | (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/) |
CZ NIC DNSSEC Validator Firefox Plug-In | (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/) |
DNSVIZ - A DNS visualization tool | (http://dnsviz.net/) |
Verisign - DNS debugger | (http://dnssec-debugger.verisignlabs.com/) |
DNSSEC Trigger | (http://www.nlnetlabs.nl/projects/dnssec-trigger/) |
DANE | (http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec) |
OpenDNSSEC keystates | https://wiki.opendnssec.org/display/DOCS/Key+States |
NLnet Labs tutorials (includes Troubleshooting slides) | http://www.dns-school.org/Slides/index.html |
Last modified 6 years ago
Last modified on Feb 28, 2015, 1:37:45 AM
Attachments (51)
- 01-dns-delegation.pdf (265.0 KB) - added by 7 years ago.
- 01-dns.pdf (585.6 KB) - added by 7 years ago.
- 01-unix-minimal.pdf (230.3 KB) - added by 7 years ago.
- 01-dns-dig-hands-on.txt (2.6 KB) - added by 7 years ago.
- 02-dns-operations-intermediate.pdf (164.6 KB) - added by 7 years ago.
- 02-dns-software-overview.pdf (198.8 KB) - added by 7 years ago.
- 02-dns-bind-logging.pdf (152.7 KB) - added by 7 years ago.
- 02-dns-tcpdump-wireshark.txt (3.4 KB) - added by 7 years ago.
- 02-dns-bind-logging-lab.txt (3.2 KB) - added by 7 years ago.
- 03-dns-bind-acl.pdf (79.3 KB) - added by 7 years ago.
- 03-dns-bind-tsig.pdf (442.9 KB) - added by 7 years ago.
- 03-dns-monitoring.pdf (553.4 KB) - added by 7 years ago.
- 03-dnssec-tutorial.pdf (639.7 KB) - added by 7 years ago.
- 03-dns-security-resiliency.pdf (1.4 MB) - added by 7 years ago.
- 03-dns-nagios-exercises.txt (6.1 KB) - added by 7 years ago.
- 03-dns-smokeping-exercise.txt (2.2 KB) - added by 7 years ago.
- 03-smokeping-config.txt (3.5 KB) - added by 7 years ago.
- 03-dns-anycast.txt (6.0 KB) - added by 7 years ago.
- 03-dns-swatch-zone-transfer.txt (1.7 KB) - added by 7 years ago.
- 05-dxb-dnssec-demo-dps.pdf (196.5 KB) - added by 7 years ago.
- 05-dxb-dnssec-design.pdf (2.6 MB) - added by 7 years ago.
- 05-dxb-dnssec-KC-demo-acceptance.pdf (456.3 KB) - added by 7 years ago.
- 05-dxb-dnssec-KC-demo-main.2.pdf (363.6 KB) - added by 7 years ago.
- 05-opendnssec-lab1.txt (10.7 KB) - added by 7 years ago.
- 04-dnssec-bind-manual-ksk-rollover.txt (6.8 KB) - added by 7 years ago.
- 04-dnssec-bind-manual-zsk-rollover.txt (5.9 KB) - added by 7 years ago.
- groups-dns.pdf (30.8 KB) - added by 7 years ago.
- dns-global-registry-template.pdf (29.8 KB) - added by 7 years ago.
- 02-dns-unbound-config.txt (6.6 KB) - added by 7 years ago.
- 01-dns-welcome.pdf (134.3 KB) - added by 7 years ago.
- dnsseccheck.txt (509 bytes) - added by 7 years ago.
- dnscheck.txt (1.5 KB) - added by 7 years ago.
- unix-minimal-v2.pdf (124.4 KB) - added by 7 years ago.
- 01-unix-minimal-v2.pdf (124.4 KB) - added by 7 years ago.
- 01-dns-dig-hands-on-v2.txt (4.2 KB) - added by 7 years ago.
- freebsdref-1up.pdf (107.8 KB) - added by 7 years ago.
- freebsdref-2up-a4.pdf (108.6 KB) - added by 7 years ago.
- vi-in-class-reference.pdf (26.9 KB) - added by 7 years ago.
- vi-reference.pdf (36.7 KB) - added by 7 years ago.
- 01-dns-delegation-exercise.txt (7.6 KB) - added by 6 years ago.
- 02-dns-tcpdump-wireshark-v2.txt (3.7 KB) - added by 6 years ago.
- 02-dns-tcpdump-wireshark-v2.2.txt (3.7 KB) - added by 6 years ago.
- 01-dns-nsd-config.txt (3.3 KB) - added by 6 years ago.
- 03-dns-reverse-delegation.txt (4.1 KB) - added by 6 years ago.
- 03-dns-anycast.pdf (693.2 KB) - added by 6 years ago.
- 03-dns-acl-tsig-transfer-security.txt (8.2 KB) - added by 6 years ago.
- 05-dnssec-bind-inline-signing-howto.txt (7.9 KB) - added by 6 years ago.
- 04-dnssec-bind-manual-signing-howto.txt (7.0 KB) - added by 6 years ago.
- dnssec-unbound-enable-validation.txt (1022 bytes) - added by 6 years ago.
- kasp.html (2.9 KB) - added by 6 years ago.
-
Reverse-DNS.pdf (324.9 KB) - added by 6 years ago.
Reverse-DNS