Hands-on DNSSEC with DNSViz
DNSSEC enables the authentication of DNS responses. Despite this benefit, expert DNS operators have observed that there are challenges in understanding, deploying, …
| Talk Title | Hands-on DNSSEC with DNSViz |
| Speakers | Casey Deccio (Verisign Labs) |
| Conference | NANOG66 |
| Conf Tag | |
| Location | San Diego, California |
| Date | Feb 8 2016 - Feb 10 2016 |
| URL | Talk Page |
| Slides | Talk Slides |
| Video | Talk Video |
DNSSEC enables the authentication of DNS responses. Despite this benefit, expert DNS operators have observed that there are challenges in understanding, deploying, monitoring and troubleshooting DNSSEC. DNSViz was developed to address these challenges by adding a suite to the existing DNS analysis tools in order to retrieve and analyze relevant DNS and DNSSEC information and present it to the user in graphical and programmatic formats. This tutorial will get hands-on with DNSSEC concepts by performing some DNSSEC signing, validation and manipulation, and using DNSViz to analyze and monitor the configurations. Prerequisites: The tutorial seeks to both instruct the DNSSEC novice and provide additional perspective to the DNSSEC experts. Some familiarity with DNS and Linux OS-based tools are helpful but not required. Please come prepared to participate with: Laptop computer Laptop power adapter Internet access VirtualBox installed on your laptop, preferably version 5.0 (latest) The tutorial demo VM image, downloaded, unzipped, and installed, following the instructions at: http://dnsviz.net/demo/
