Course Agenda

Schedule

Session 1 09:00 - 10:30
Break 10:30 - 11:00
Session 2 11:00 - 12:30
Lunch 12:30 - 14:00
Session 3 14:00 - 16:00
Break 16:00 - 16:30
Session 4 16:30 - 17:30

Instructors

CTChristian Teuschel: christian.teuschel(at)ripe.net (RIPE NCC) Netherlands
PRPhil Regnauld: regnauld(at)nsrc.orgNetwork Startup Resource Center (NSRC) Denmark/France
RLRichard Lamb: richard.lamb(at)icann.org (ICANN) USA
Sunday Topic LeadPresentations Exercises
Session I Introduction and overview PDF
Presentation of participants --
Session II DNS refreshers CT PDF
Quick UNIX Intro PR PDF In Preso
Session III Hands-on: using dig, doc, wireshark Lab1-TXT
DNS Delegation PDF Lab1-TXT NSD-TXT
Session IV DNS Delegation (cont'd)
Monday
Session I DNS Operations PDF
Session II DNS software overview PDF UNBOUND-TXT
Session III DNS analysis: tcpdump TXT
Session IV Logging PDF LOG-TXT
Tuesday
Session I Securing DNS ACL-PDF TSIG-PDF ACL-TSIG-TXT | SWATCH-TXT
Session II DNS Security & Resiliency PDF
Session III Monitoring performance & availability NAGIOS-PDF
SMOKEPING-PDF
RIPE-NCC-Tools
NAGIOS-TXT
SMOKEPING-LAB CONFIG-TXT
Session IV Anycast ANYCAST-TXT
Session IV Introduction to DNSSEC PDF SIGN-TXT
Wednesday
Session I Introduction to DNSSEC (continued)
Session II DNSSEC signing BIND-SIGNING-TXT
Session III Lab: Manual rollover ZSK: TXT | KSK: TXT
Thursday
Session I Lab: Inline signing BIND inline signing: TXT
OpenDNSSEC OpenDNSSEC-TXT
Session II-III DNSSEC Implementation Considerations and Risk Analysis PDF
DNSSEC - DPS PDF
Key Ceremony - Acceptance PDF
Key Ceremony - Demo PDF
Evaluation & Closing Evaluation form

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Extra sessions:

Topic Presentations Exercises
NSD authoritative server NSD-TXT
Unbound DNSSEC validation UNBOUND-DNSSEC-TXT

Useful Links

CZ NIC DNSSEC Validator Chrome Plug-In (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/)
CZ NIC DNSSEC Validator Firefox Plug-In (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/)
DNSVIZ - A DNS visualization tool (http://dnsviz.net/)
Verisign - DNS debugger (http://dnssec-debugger.verisignlabs.com/)
DNSSEC Trigger (http://www.nlnetlabs.nl/projects/dnssec-trigger/)
DANE (http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec)
OpenDNSSEC keystates https://wiki.opendnssec.org/display/DOCS/Key+States
NLnet Labs tutorials (includes Troubleshooting slides) http://www.dns-school.org/Slides/index.html
Last modified 5 years ago Last modified on Mar 27, 2014, 4:55:53 AM

Attachments (59)