Course Agenda

Schedule

Session 1 09:00 - 10:30
Break 10:30 - 11:00
Session 2 11:00 - 12:30
Lunch 12:30 - 14:00
Session 3 14:00 - 16:00
Break 16:00 - 16:30
Session 4 16:30 - 17:30

Instructors

PRPhil Regnauld: regnauld(at)nsrc.orgNetwork Startup Resource Center (NSRC) Denmark/France
RLRichard Lamb: richard.lamb(at)icann.org (ICANN) USA

Monday pre-workshop session

Monday morning Topic LeadPresentations
8:00 - 8:30 Participants reception
8:30 - 8:40 Words from Leda Muñoz Garcia. Executive Director, Fundación Omar Dengo
8:40 - 8:50 Words from Gabriel Macaya Trejos, President of Academia Nacional de Ciencias (NIC Costa Rica)
8:50 - 10:00 Inicio de la Charla Importancia de la implementación de DNSSEC, Richard Lamb DNSSEC Senior Program Manager
y Phil Regnauld - Network Startup Resource Center (NSRC)
10:30 - 12:30 Continuación de Charla Importancia de la implementación de DNSSEC

Introduction to DNSSEC PDF

Workshop schedule

Monday aft. Topic LeadPresentations Exercises
Session I Introduction to DNSSEC PR (continued from previous session)
Session II Intro to environment PR Introduction | PDF In Preso
Tuesday
Session I Hands-on: using dig, doc, wireshark Lab1-TXT
DNS Delegation PDF Lab1-TXT
Session II DNS Delegation (cont'd)
Session III DNS Operations PDF
Session IV DNS software overview PDF UNBOUND-TXT
DNSSEC validation UNBOUND-DNSSEC-TXT
Wednesday
Session I Logging PDF LOG-TXT
Session II DNSSEC signing PDF BIND-SIGNING-TXT
Session III+IV Lab: Manual rollover ZSK: TXT | KSK: TXT
Thurday
Session I Lab: Inline signing BIND inline signing: TXT
Session II OpenDNSSEC OpenDNSSEC-TXT
Session III Securing DNS ACL-PDF TSIG-PDF ACL-TSIG-TXT | SWATCH-TXT
Session IV Monitoring performance & availability NAGIOS-PDF
SMOKEPING-PDF
NAGIOS-TXT NAGIOS-DNSSEC-TXT
SMOKEPING-LAB CONFIG-TXT
Friday
Session I-II DNSSEC Implementation Considerations and Risk Analysis PDF
DNSSEC - DPS PDF
Key Ceremony - Acceptance PDF
Key Ceremony - Demo PDF
Evaluation & Closing Evaluation form

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Extra sessions:

Topic Presentations Exercises
DNS refreshers PDF
Crypto refresher PDF
DNS analysis: tcpdump TXT
NSD authoritative server NSD-TXT
NSD NSD-TXT
Anycast ANYCAST-TXT
DNS Security & Resiliency PDF

Useful Links

CZ NIC DNSSEC Validator Chrome Plug-In (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/)
CZ NIC DNSSEC Validator Firefox Plug-In (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/)
DNSVIZ - A DNS visualization tool (http://dnsviz.net/)
Verisign - DNS debugger (http://dnssec-debugger.verisignlabs.com/)
DNSSEC Trigger (http://www.nlnetlabs.nl/projects/dnssec-trigger/)
DANE (http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec)
OpenDNSSEC keystates https://wiki.opendnssec.org/display/DOCS/Key+States
NLnet Labs tutorials (includes Troubleshooting slides) http://www.dns-school.org/Slides/index.html
Last modified 5 years ago Last modified on Apr 25, 2014, 1:29:24 PM

Attachments (52)