Course Agenda
Schedule
| Session 1 | 09:00 - 10:30 |
| Break | 10:30 - 11:00 |
| Session 2 | 11:00 - 12:30 |
| Lunch | 12:30 - 14:00 |
| Session 3 | 14:00 - 16:00 |
| Break | 16:00 - 16:30 |
| Session 4 | 16:30 - 17:30 |
Instructors
PR Phil Regnauld: regnauld(at)nsrc.org Network Startup Resource Center (NSRC) Denmark/France RL Richard Lamb: richard.lamb(at)icann.org (ICANN) USA
Monday pre-workshop session
Monday morning Topic Lead Presentations 8:00 - 8:30 Participants reception 8:30 - 8:40 Words from Leda Muñoz Garcia. Executive Director, Fundación Omar Dengo 8:40 - 8:50 Words from Gabriel Macaya Trejos, President of Academia Nacional de Ciencias (NIC Costa Rica) 8:50 - 10:00 Inicio de la Charla Importancia de la implementación de DNSSEC, Richard Lamb DNSSEC Senior Program Manager
y Phil Regnauld - Network Startup Resource Center (NSRC) 10:30 - 12:30 Continuación de Charla Importancia de la implementación de DNSSEC
Workshop schedule
Monday aft. Topic Lead Presentations Exercises Session I Introduction to DNSSEC PR (continued from previous session) Session II Intro to environment PR Introduction | PDF In Preso Tuesday Session I Hands-on: using dig, doc, wireshark Lab1-TXT DNS Delegation Lab1-TXT Session II DNS Delegation (cont'd) Session III DNS Operations Session IV DNS software overview UNBOUND-TXT DNSSEC validation UNBOUND-DNSSEC-TXT Wednesday Session I Logging LOG-TXT Session II DNSSEC signing BIND-SIGNING-TXT Session III+IV Lab: Manual rollover ZSK: TXT | KSK: TXT Thurday Session I Lab: Inline signing BIND inline signing: TXT Session II OpenDNSSEC OpenDNSSEC-TXT Session III Securing DNS ACL-PDF TSIG-PDF ACL-TSIG-TXT | SWATCH-TXT Session IV Monitoring performance & availability NAGIOS-PDF
SMOKEPING-PDFNAGIOS-TXT NAGIOS-DNSSEC-TXT
SMOKEPING-LAB CONFIG-TXTFriday Session I-II DNSSEC Implementation Considerations and Risk Analysis DNSSEC - DPS Key Ceremony - Acceptance Key Ceremony - Demo Evaluation & Closing Evaluation form
Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE
Extra sessions:
| Topic | Presentations | Exercises |
| DNS refreshers | ||
| Crypto refresher | ||
| DNS analysis: tcpdump | TXT | |
| NSD authoritative server | NSD-TXT | |
| NSD | NSD-TXT | |
| Anycast | ANYCAST-TXT |
DNS Security & Resiliency
Useful Links
| CZ NIC DNSSEC Validator Chrome Plug-In | (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/) |
| CZ NIC DNSSEC Validator Firefox Plug-In | (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/) |
| DNSVIZ - A DNS visualization tool | (http://dnsviz.net/) |
| Verisign - DNS debugger | (http://dnssec-debugger.verisignlabs.com/) |
| DNSSEC Trigger | (http://www.nlnetlabs.nl/projects/dnssec-trigger/) |
| DANE | (http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec) |
| OpenDNSSEC keystates | https://wiki.opendnssec.org/display/DOCS/Key+States |
| NLnet Labs tutorials (includes Troubleshooting slides) | http://www.dns-school.org/Slides/index.html |
Last modified 5 years ago
Last modified on Apr 25, 2014, 1:29:24 PM
Attachments (52)
- dns-operations-intermediate.pdf (164.6 KB) - added by admin 7 years ago.
- dns.pdf (425.4 KB) - added by admin 7 years ago.
- dns-dig-hands-on-2.txt (11.7 KB) - added by admin 7 years ago.
- dns-software-overview.pdf (1.2 MB) - added by admin 7 years ago.
- dns-delegation.pdf (224.5 KB) - added by admin 7 years ago.
- DNS.Monitoring.Logging.pdf (4.3 MB) - added by admin 7 years ago.
- dns-bind-logging.txt (2.8 KB) - added by admin 7 years ago.
- smokeping-config.txt (3.5 KB) - added by admin 7 years ago.
- dns-enabling-ipv6.txt (3.3 KB) - added by admin 7 years ago.
- dns-enabling-ipv6-service.txt (4.0 KB) - added by admin 7 years ago.
- dns-security-resiliency.ppt.pdf (1.4 MB) - added by admin 7 years ago.
- dns-acl.pdf (1.1 MB) - added by admin 7 years ago.
- dns-tsig.pdf (1.5 MB) - added by admin 7 years ago.
- dns-ipv6.pdf (126.8 KB) - added by admin 7 years ago.
- dns-acl-tsig-transfer-security.txt (7.0 KB) - added by admin 7 years ago.
- dnssec-tutorial-2011.pdf (365.1 KB) - added by admin 7 years ago.
- dns-security-resiliency.ppt.2.pdf (1.4 MB) - added by admin 7 years ago.
- vnc-4_1_3-x86_win32_viewer.exe (265.3 KB) - added by admin 7 years ago.
- dns-bind-caching-setup.2.txt (4.3 KB) - added by admin 7 years ago.
- dns-bind-caching-setup.txt (4.4 KB) - added by admin 7 years ago.
- dns-security-resiliency.pdf (1.4 MB) - added by admin 7 years ago.
- dns-delegation-exercise-inst-is-slave.txt (8.1 KB) - added by admin 5 years ago.
- unix-minimal.pdf (1.1 MB) - added by admin 5 years ago.
- dns-tcpdump-wireshark.txt (3.4 KB) - added by admin 5 years ago.
- dns-bind-logging.pdf (1.8 MB) - added by admin 5 years ago.
- dns-swatch-zone-transfer.txt (1.7 KB) - added by admin 5 years ago.
- nagios.pdf (9.8 MB) - added by admin 5 years ago.
- smokeping.pdf (4.7 MB) - added by admin 5 years ago.
- dns-anycast.txt (6.0 KB) - added by admin 5 years ago.
- dns-nsd-config.txt (3.0 KB) - added by admin 5 years ago.
- sjo-dnssec-design.pdf (2.6 MB) - added by lamb 5 years ago.
- sjo-dnssec-KC-demo-acceptance.pdf (455.9 KB) - added by lamb 5 years ago.
- sjo-dnssec-KC-demo-main.pdf (360.8 KB) - added by lamb 5 years ago.
- sjo-signin-log.pdf (121.4 KB) - added by lamb 5 years ago.
- sjo-safe-log.pdf (107.2 KB) - added by lamb 5 years ago.
- sjo-dnssec-demo-dps.pdf (235.4 KB) - added by lamb 5 years ago.
- 01-dnssec-welcome.pdf (198.6 KB) - added by admin 5 years ago.
- dns-dig-hands-on.txt (3.9 KB) - added by admin 5 years ago.
- dnssec-tutorial-crypto-defs.pdf (347.4 KB) - added by admin 5 years ago.
- dns-delegation-exercise.txt (8.4 KB) - added by admin 5 years ago.
- dns-unbound-config.txt (6.5 KB) - added by admin 5 years ago.
- dnssec-unbound-enable-validation.txt (1.3 KB) - added by admin 5 years ago.
- dns-bind-logging-lab1.txt (3.2 KB) - added by admin 5 years ago.
- dnssec-bind-manual-signing-howto.txt (7.0 KB) - added by admin 5 years ago.
- dnssec-tutorial.pdf (649.4 KB) - added by admin 5 years ago.
- dnssec-bind-manual-zsk-rollover.txt (5.9 KB) - added by admin 5 years ago.
- dnssec-bind-manual-ksk-rollover.txt (3.4 KB) - added by admin 5 years ago.
- dnssec-bind-inline-signing-howto.txt (7.9 KB) - added by admin 5 years ago.
- opendnssec-lab1.txt (10.7 KB) - added by admin 5 years ago.
- dns-nagios-exercises.txt (6.4 KB) - added by admin 5 years ago.
- dns-smokeping-exercise.txt (2.2 KB) - added by admin 5 years ago.
- dnssec-nagios-sig-check.txt (2.2 KB) - added by admin 5 years ago.