# LsNIC - NSRC - DNSSEC Workshop agenda # ## Time Schedule ## |Session |Time |Notes | |------------------|----------------|----------------| |Session 1 |09:00 - 10:30 | | |Break |10:30 - 11:00 |Tea and coffee provided | |Session 2 |11:00 - 12:30 | | |Lunch |12:30 - 13:00 |Lunch provided | |Session 3 |13:00 - 14:30 | | |Break |14:30 - 15:00 |Tea and coffee provided | |Session 4 |15:00 - 16:30 | | ## Trainers ## | FL | Name | Email | Organization | Country | |----|----------------------|----------------------------|---------------------------------|-----------------| | JA | Joe Abley | jabley@nsrc.org | Network Startup Resource Center | New Zealand / Canada / UK | | PR | Phil Regnauld | regnauld@nsrc.org | Network Startup Resource Center | France / Denmark | ## Sessions ## | Session | Topic | Inst | Presentations | Labs | |----------------|---------------------------|---------|---------------------------------------|----------------------------------------| | **MONDAY** | | | | | | Session 1.1 | Introduction | PR, JA | Welcome [PDF](presos/110-dnssec-welcome.pdf)
Why DNSSEC? [PDF](presos/111-dnssec-why.pdf) [PPT](presos/111-dnssec-why.pptx) [KEY](presos/111-dnssec-why.key) | | | Session 1.2 | DNSSEC basics & terminology | JA | Crypto refresher [PDF](presos/120-crypto-refresher.pdf)
DNS Refresher [PDF](presos/121-dns-refresher.pdf) | | | Session 1.3 | Introduction to classroom environment | PR | Network topology [PDF](class-net.pdf)
Intro UNIX [PDF](presos/131-unix-minimal.pdf) | Login and kick the tyres [Lab](labs/tyrekick.txt) | | Session 1.4 | Hands on with DNS | PR, JA | Software overview [PDF](presos/dns-software-overview.pdf) | Zone delegation [Lab](labs/dns-delegation-exercise.txt)
Logging [Lab](labs/dns-bind-logging.txt) | | **TUESDAY** | | | | | | Session 2.1 | Zone signing: Lab | | | Manual Signing [Lab](labs/dnssec-bind-manual-signing-howto.txt) | | | Resolver validation | | | Resolver validation [Lab](labs/02-dns-unbound-val-config.txt) | | | | | | Resolver trust anchor [Lab](labs/trust-anchor.txt) | | Session 2.2 | DNSSEC Tutorial | | DNSSEC Tutorial [PDF](presos/122-dnssec-tutorial.pdf) | | | | Zone signing walkthrough | | | | | Session 2.3 | DNSSEC inline signing | | | Inline Signing [Lab](labs/dnssec-bind-inline-signing-howto.txt) | | Session 2.4 | OpenDNSSEC | | | OpenDNSSEC [Lab](labs/opendnssec-lab1.txt) | | **WEDNESDAY** | | | | | | Session 3.1 | DNSSEC design | | DNSSEC deployment [PDF](presos/dnssec-design.pdf)
Sample [PDF](presos/vnnic-dnssecdeployment.vn-apricot2017-v2_1488016343.pdf) | | | Session 3.2 | Roundtable | | | DNSSEC Monitoring [Lab](labs/dnssec-nagios-lab.txt) | | Session 3.3 | HSMs (smartcard): demo | | | | | Session 3.4 | DNSSEC Practice Statement (DPS) | | | | ## Optional material | **ADDITIONAL** | | |----------------|-| | Lab | Manual ZSK rollover [Lab](labs/dnssec-bind-manual-zsk-rollover.txt) | | Lab | Manual KSK rollover [Lab](labs/dnssec-bind-manual-ksk-rollover.txt) | ## Survey [Survey](https://nsrc.org/limesurvey/index.php/633828?lang=en)