wiki:Track2Agenda

DNS/DNSSEC Workshop Agenda

Schedule

Session 1 09:00 - 10:30
Break 10:30 - 11:00
Session 2 11:00 - 12:30
Lunch 12:30 - 14:00
Session 3 14:00 - 16:00
Break 16:00 - 16:30
Session 4 16:30 - 17:30

Instructors

Name Abbreviation Email Organization Country
Andy Linton AL asjl(at)nsrc.org NSRC New Zealand
Champika Wijayatunga CW champika.wijayatunga(at)icann.org ICANN USA
Yoshiaki Kasahara YK kasahara(at)nc.kyushu-u.ac.jp Kyushu University Japan
Steve Conte SC steve.conte(at)icann.org ICANN USA

Workshop schedule

Tuesday Topic LeadPresentations Exercises
Session I Introduction and overview AL PDF
Presentation of participants
Session II DNS refreshers CW PDF
Quick UNIX Intro YK PDF In presentation
Session III Hands-on: using dig and doc YK HandsOn-TXT
DNS Delegation CW PDF BIND-TXT
NSD-TXT
Session IV DNS Delegation (cont'd) CW
Wednesday
Session I DNS Operations AL PDF
Session II DNS software overview YK PDF UNBOUND-TXT
Session III DNS analysis: tcpdump YK ANALYSIS-TXT
Session IV Logging SC PDF LOGGING-TXT
Thursday
Session I Reverse DNS CW PDF REVERSE-TXT
Securing DNS CW ACL-PDF
TSIG-PDF
ACL-TSIG-PDF
SWATCH-TXT
Session II DNS Security & Resiliency AL PDF
Session III Monitoring performance & availability AL PDF NAGIOS-TXT
SMOKEPING-LAB
CONFIG-TXT
Session IV Anycast SC PDF
Introduction to DNSSEC CW PDF
Friday
Session I Introduction to DNSSEC (continued) CW
Session II DNSSEC signing BIND-SIGNING-TXT
Session III & IV Lab: Manual rollover ZSK-TXT
KSK-TXT
Saturday
Session I Lab: Inline signing BIND-inline-signing-TXT
OpenDNSSEC OpenDNSSEC-TXT
Session II & III DNSSEC Implementation Considerations and Risk Analysis AL PDF
DNSSEC - DPS AL PDF
Key Ceremony - Acceptance AL PDF
Key Ceremony - Demo AL PDF
Session IV Evaluation & Closing AL

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Extra sessions

Topic Presentations Exercises
Unbound DNSSEC validation UNBOUND-DNSSEC-TXT
CZ NIC DNSSEC Validator Chrome Plug-In (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/)
CZ NIC DNSSEC Validator Firefox Plug-In (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/)
DNSVIZ - A DNS visualization tool (http://dnsviz.net/)
Verisign - DNS debugger (http://dnssec-debugger.verisignlabs.com/)
DNSSEC Trigger (http://www.nlnetlabs.nl/projects/dnssec-trigger/)
DANE (http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec)
OpenDNSSEC keystates https://wiki.opendnssec.org/display/DOCS/Key+States
NLnet Labs tutorials (includes Troubleshooting slides) http://www.dns-school.org/Slides/index.html
Last modified 3 years ago Last modified on Feb 27, 2015, 5:37:45 PM

Attachments (51)