# DNS & DNSSEC workshop- 5 days: Agenda # ## Time schedule ## | Session | Time | |--------|------| | Class and demos | 09:30 - 12:30 | | Lunch |12:30 - 13:30 | | Labs |13:30 - 16:30 | Time is in Ankara local time: UTC+3.
Morning sessions will start with a day - 1 Q/R.
## Instructors ## | | Name | Organization | Country | |--|------|--------------|---------| | YA | Yazid Akanho | ICANN | Bénin | | PR | Phil Regnauld | NSRC | Denmark | Phil will be on remote. ## Sessions ## | Session | Topic | Inst | Materials | |------------|--------|---------|-------------------| | **Day 1** | | | | | Session 1 | Introduction to the workshop | YA && PR| Introduction to the workshop [[PDF](dns/materials/presos/en/dnssec-welcome.pdf)]| | Session 2 | DNS 101 | YA && PR | DNS Refresh (En) [[PDF](dns/materials/presos/en/dns-refresher.pdf)]
DNS software overview (En) [[PDF](dns/materials/presos/en/dns-software-overview.pdf)]
KINDNS: promote DNS operational Best Practices (En) [[PDF](dns/materials/presos/en/KINDNS.pdf)]

Additionnal optional resources:
Intro DNS: DNS 101 for beginners (En) [[PDF](dns/materials/presos/en/DNS101.pdf)]| | Session 3 | Group Photo | All | A good photographer
Make sure we are all part of the photo :-)| | Lab exercice 1 | Zone delegation | -- | Access the virtual Lab Platform [[HTML](virtual-lab-platform.html)]
Configure DNS Zone [[HTML](dns/materials/labs/en/New-lab-setup-configure-zone.html)] | | **Day 2** | | | | | Session 1 | Day -1 review & Q/R | | | | Session 2 | DNS Ops & debugging | YA && PR | DNS Operations [[PDF](dns/materials/presos/en/dns-operations.pdf)]
DNS Debugging [[PDF](dns/materials/presos/en/dns-debugging.pdf)]
Using ACLs [[PDF](dns/materials/presos/en/ACLs.pdf)]
Using TSIG keys [[PDF](dns/materials/presos/en/TSIG.pdf)]| | Lab exercice 2 | Improve your zone Ops | -- | TSIG for your zone [[PDF](dns/materials/labs/en/New-lab-setup-configure-TSIG.html)]| | **Day 3** | | | | | Session 1 | Day -1 review & Q/R | | | | Session 2 | DNSSEC 101 | YA && PR | Crypto refresher [[PDF](dns/materials/presos/en/crypto-refresher.pdf)]
DNSSEC Extensions to DNS (en) [[PDF](dns/materials/presos/en/dnssec-extensions.pdf)]
DNSSEC 101 (En) [[PDF](dns/materials/presos/en/DNSSEC101.pdf)] | | Lab exercice 3 | Sign your zone | | Zone signing [[HTML](dns/materials/labs/en/New-lab-setup-sign-zone.html)]
Upload DS to root [[HTML](dns/materials/labs/en/New-lab-setup-send-DS.html)] | | Lab exercice 4 | DNSSEC validation | | DNSSEC Validation (En) [[HTML](dns/materials/labs/en/New-lab-setup-DNSSEC-validation.html)] | | **Day 4** | | | | | Session 1 | Day -1 review & Q/R | | | | Session 2 | DNSSEC in Action | PR | Effects of Zone Tampering | | Session 3 | DNSSEC Operations | YA | DNSSEC ops [[PDF](dns/materials/presos/en/dnssec-operations.pdf)]
Monitoring
Signature Validity
Signing Parameters [[PDF](dns/materials/presos/en/dnssec-signing-parameters.pdf)]
Domain Name Transfers [[PPTX](dns/materials/presos/en/dnssec-domain-transfer.pptx), [PDF](dns/materials/presos/en/dnssec-domain-transfer.pdf)] | | Lab exercice 5 | Key rollover | | ZSK Rollover with BIND9 [[HTML](dns/materials/labs/en/New-lab-setup-ZSK-rollover.html)]
Then try a KSK rollover | | Lab exercice 6 | Algorithm rollover | | Prepare and execute an algorithm Rollover with BIND9 | | **Day 5** | | | | | Session 1 | Day -1 review & Q/R | | | | Session 2 | DNSSEC Operations | YA && PR | [DNSViz](https://dnsviz.net)
DNSSEC Timers [[PDF](dns/materials/presos/en/dnssec-timers.pdf)]
[OpenDNSSEC](https://www.opendnssec.org/)
HSM Demonstration
Root KSK Management | | Lab pratique 4.5 | Zone signing with OpenDNSSEC | | OpenDNSSEC Lab 1 [[HTML](dns/materials/labs/en/New-lab-setup-OpenDNSSEC.html)] | | Session 3 | Wrap-Up; Discussion; Q&A | | | ## Archives ## - [ZSK rollover manuel](dns/materials/labs/en/dnssec-bind-manual-zsk-rollover.html) - [KSK rollover manuel](dns/materials/labs/en/dnssec-bind-manual-ksk-rollover.html) - [DPS Demo (DNSSEC Practice Statement)](dns/materials/presos/en/dnssec-demo-dps.pdf)