DNS/DNSSEC Hands-On Training 8-10 July 2015 Midrand, South Africa

and thanks to

for courseware

DNS/DNSSEC Hands-On Training 8-10 July 2015 Midrand, South Africa

This is a 3-day, hands-on workshop. The participants will:
Learn to design, deploy, and operate authoritative and recursive DNS architectures
Understand the risks surrounding the DNS, and the role of DNSSEC (DNS security extensions)
Learn how to deploy DNSSEC, including zone signature and key management

Workshop Requirements:

Some understanding of DNS and netowrk basics
Some knowledge of Linux/UNIX command line
Participants need to bring a computer that can acess WiFi and capable of running "ssh". Tablet computers will not work.

DNS/DNSSEC Workshop Agenda

Schedule

Session 1	0900-1030
Break	1030-1100
Session 2	1100-1230
Lunch	1230-1400
Session 3	1400-1530
Break	1530-1600
Session 4	1600-1730

Instructors

Name	Email	Organization
Alain Aina	aalain(at)trstech.net	NSRC
Mark Elkins	mje(at)posix.co.za	Domain Name Systems
Dr. Richard Lamb	richard.lamb(at)icann.org	ICANN

Workshop Schedule

Day 1 0830-1730

Registration - 0830
DNSSEC for Decision Makers:
Welcome Address: Gabriel Ramokotjo / President Internet Society Gauteng Chapter - 0900
The case for DNSSEC
Presentation from ZA Central Registry
Experiences from the region
Panel Discussion: Why DNSSEC?
DNS Refresher - 1400
Intro to Lab Environment. Class Network Diagram
Minimal Unix
Lab: DNS "dig"
DNS Operations, Delegation
Lab: Create a zone and delegate it

Day 2 0900-1730

Day 3 0900-1730

Lab: Manual Key (ZSK) Rollover
Lab: Manual Key (KSK) Rollover
Lab: Exercise - Bind in-line signing
Implementation Considerations and Risk Analysis
Live Key Ceremony Script DNSSEC Practice Statement (DPS) Sign-In Log Safe Log
Lab: Group Debug any outstanding labs
Q+A, Way Forward, and Group Photo!

Resources

This ia a collaborative effort between ISOC Gauteng Chapter, ZACR, ICANN and NSRC. Thanks to Phil Regnauld, Jakob Schlyter, Luis Diego Espinoza, Francisco Arias, Fredik Lundgren, David Miller and many others for contributing to this effort.