Workshop

WDNS02: DNS/DNSSEC

Duration
3 days
Level of Study
Intermediate

Synopsis

The Domain Name System (DNS) is a critical part of Internet infrastructure and the largest distributed Internet directory service. DNS translates names to IP addresses, a required process for web navigation, email delivery, and other Internet functions. However, the DNS infrastructure is not secure enough unless the security mechanisms such as Transaction Signatures (TSIG) and DNS Security Extensions (DNSSEC) are implemented. To guarantee the availability and the secure Internet services, it is important for networking professionals to understand DNS Security / DNSSEC concepts, configurations, and operations.

This course will discuss the concept of DNS Security in detail, mechanisms to authenticate the communication between DNS Servers, mechanisms to establish authenticity, and integrity of DNS data and mechanisms to delegate trust to public keys of third parties. Participant will be involved in Lab exercises and do configurations based on number of scenarios.

Target audience

This course is designed for network engineers, systems administrators, and anyone who is involved in managing DNS operations.

Prerequisites

It is assumed that participants have a good understanding of networking fundamentals and a basic knowledge of Unix/Linux. It is also recommended that the participants attend WDNS01 course prior to attending this course.

Course outline

  • DNS Security concepts
  • DNS Protocol Vulnerabilities
  • Transaction Signatures (TSIG)
  • DNS Security Extensions (DNSSEC)
  • Setting up secure zones
  • DNSSEC Key management

Other requirements

Participants are advised to bring their own laptop computers for hands-on lab exercises.

Maximum number of attendees

40 participants per workshop

Please note

Certificate of participation is provided upon successful completion of the course.