wiki:Agenda

Course Agenda

Schedule

Session 1 09:00 - 10:30
Break 10:30 - 11:00
Session 2 11:00 - 12:30
Lunch 12:30 - 14:00
Session 3 14:00 - 16:00
Break 16:00 - 16:30
Session 4 16:30 - 17:30

Instructors

PRPhil Regnauld: regnauld(at)nsrc.orgNetwork Startup Resource Center (NSRC) Denmark/France
RLRichard Lamb: richard.lamb(at)icann.org (ICANN) USA

Workshop schedule

Monday Topic LeadPresentations Exercises
Session I-II Registration, welcome
Awareness session: DNSSEC DNSSEC Why? | PDF
Panel discussion : DNSSEC
Session III Intro to environment PR Introduction | PDF In Preso
Session IV Hands-on: using dig, doc, wireshark Lab1-TXT
Tuesday
Session I DNS Delegation PDF Lab1-TXT
Session II DNS Delegation (cont'd)
Session III DNS Operations PDF
Session IV DNS software overview PDF UNBOUND-TXT
Logging PDF LOG-TXT
Securing DNS ACL-PDF TSIG-PDF ACL-TSIG-TXT | SWATCH-TXT
Wednesday
Session I DNSSEC signing PDF BIND-SIGNING-TXT
DNSSEC validation UNBOUND-DNSSEC-TXT
Session II+III Lab: Manual rollover ZSK: TXT | KSK: TXT
Session IV Lab: Inline signing BIND inline signing: TXT
Thursday
Session I OpenDNSSEC OpenDNSSEC-TXT
Session II Monitoring performance & availability NAGIOS-PDF
SMOKEPING-PDF
NAGIOS-TXT NAGIOS-DNSSEC-TXT
SMOKEPING-LAB CONFIG-TXT
Session III-IV DNSSEC Implementation Considerations and Risk Analysis PDF
DNSSEC - DPS PDF
Key Ceremony - Acceptance PDF
Key Ceremony - Demo PDF
Evaluation & Closing Evaluation form

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Extra sessions:

Topic Presentations Exercises
DNS refreshers PDF
Crypto refresher PDF
DNS analysis: tcpdump TXT
DNS Security & Resiliency PDF

Useful Links

CZ NIC DNSSEC Validator Chrome Plug-In (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/)
CZ NIC DNSSEC Validator Firefox Plug-In (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/)
DNSVIZ - A DNS visualization tool (http://dnsviz.net/)
Verisign - DNS debugger (http://dnssec-debugger.verisignlabs.com/)
DNSSEC Trigger (http://www.nlnetlabs.nl/projects/dnssec-trigger/)
DANE (http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec)
OpenDNSSEC keystates https://wiki.opendnssec.org/display/DOCS/Key+States
NLnet Labs tutorials (includes Troubleshooting slides) http://www.dns-school.org/Slides/index.html
Last modified 4 years ago Last modified on May 15, 2014, 2:40:03 AM

Attachments (58)