dns

Dispatches from the DNS Frontier

Dispatches from the DNS Frontier

January 2, 2020

DNS-OARC regularly co-locates its Domain Name Systems Operations Workshops with NANOG, and is doing so again in Dallas immediately before NANOG68. The impact of DN …
Partially FIBing

Partially FIBing

January 2, 2020

High-capacity attachment at large Internet exchange points would traditionally be done on a device capable of absorbing the fully available selection of routes. No …
Decoding Performance Data from Large-Scale Internet Outages

Decoding Performance Data from Large-Scale Internet Outages

January 1, 2020

Large-scale Internet events create complex, and often confounding data. This talk will explore three recent events–the June 2016 DNS root server DDoS, the May 201 …
KubeCon: A Story of Two Service Discoveries: Bringing Legacy to Kubernetes

KubeCon: A Story of Two Service Discoveries: Bringing Legacy to Kubernetes

January 1, 2020

Many companies have a service discovery solution whether it is home grown, purchased, or something in-between. Kubernetes will have to inter-operate with those systems as it begins to move into existi …
Lightning Talk - Introducing CoreDNS Kubernetes Integration

Lightning Talk - Introducing CoreDNS Kubernetes Integration

January 1, 2020

CoreDNS is a flexible new DNS server from the original author of SkyDNS, Miek Gieben. CoreDNS offers more functionality than SkyDNS, and is easy to extend with its middleware-based request processing …
Security Track

Security Track

January 1, 2020

The NANOG security track explores the latest in current network security threats, defenses and research. Contact the track coordinator to reserve some time to lead …
Rolling the Root Zone DNSSEC Key Signing Key

Rolling the Root Zone DNSSEC Key Signing Key

December 30, 2019

IANA/ICANN/PTI has prepared a plan to change the Root Zone DNSSEC KSK. This talk will present highlights of the plan to explain what will be happening, why this is …
DNS Track

DNS Track

December 29, 2019

The DNS track at NANOG provides a forum for attendees to present and discuss recent and relevant topics in DNS, including: operational experience and advice, secur …
Elliptic curves to the rescue: tackling availability and attack potential in DNSSEC

Elliptic curves to the rescue: tackling availability and attack potential in DNSSEC

December 29, 2019

Over the past decade, we have seen the gradual rollout of DNSSEC across the name space, with adoption growing slowly but steadily. While DNSSEC was introduced to s …
Migrating Legacy Infrastructure to Kubernetes: Olarks Lessons From the Trenches

Migrating Legacy Infrastructure to Kubernetes: Olarks Lessons From the Trenches

December 29, 2019

When you start building new infrastructure from scratch, its relatively easy to take into account the constraints that Docker and Kubernetes impose. Unfortunately most of us arent starting brand new …
DNS-based censorship: theory and measurements

DNS-based censorship: theory and measurements

December 28, 2019

As explained in RFC 7754, "Technical Considerations for Internet Service Blocking and Filtering", it is tempting for a censor to attack, not the direct traffic or …
DNSSEC Tutorial

DNSSEC Tutorial

December 28, 2019

Eddie Winstead from ISC would give a 90 minute tutorial on DNSSEC. It would be an expanded version of what was presented at NANOG on the Road. …
TCP over IP Anycast - Pipe dream or Reality?

TCP over IP Anycast - Pipe dream or Reality?

December 28, 2019

The talk will focus on how to route our end users to the closest location serving content – i.e. to the closest PoP. Traditionally LinkedIn used geo-location base …
Post IPv4 Depletion Trends

Post IPv4 Depletion Trends

December 27, 2019

ARIN will update the community about recent trends we are seeing in the registry now that ARIN has depleted its supply of available IPv4 address space. Areas of fo …
Hands-on DNSSEC with DNSViz

Hands-on DNSSEC with DNSViz

December 26, 2019

DNSSEC enables the authentication of DNS responses. Despite this benefit, expert DNS operators have observed that there are challenges in understanding, deploying, …
Addressing Challenges in an Anycast CDN

Addressing Challenges in an Anycast CDN

December 25, 2019

Performance of online applications directly impacts user satisfaction. A major component of the user-perceived performance of the application is the time spent in …
Mapping adversary infrastructure using DNS

Mapping adversary infrastructure using DNS

December 25, 2019

Nothing good or bad can happen on the Internet without involving the Domain Name System (DNS), which provides visibility of the global Internet and unparalleled intelligence on cybercriminals and attack methods. Merike Ko discusses the value of DNS to cyber investigations and explores how real-time DNS observations can improve accuracy and response time to cyberattacks.
Nudge theory: Influencing empowered teams to do the things that matter to you

Nudge theory: Influencing empowered teams to do the things that matter to you

December 21, 2019

Successful DevOps means empowering teams. But you still have things you want all teams to do, and you need to balance the benefits of the right technologies against the costs of running multiple data stores, deployment platforms, languages, etc. Sarah Wells offers a brief overview of nudge theory and explores its possibilities for influencing disparate teams to do things for the common good.
The promise of Push

The promise of Push

December 20, 2019

HTTP/2 Push is the next frontier of web performance. Colin Bendell explores Push's possibilities and pitfalls as well as new metrics to measure the Push opportunity. Colin discusses when and how to use Push, testing, and several advanced techniques, reviews real-world experimentation, and shares recommendations on how to prepare for the future with Push support.
Rebuilding the airplane in flight. . .safely

Rebuilding the airplane in flight. . .safely

November 29, 2019

Rewriting the key software component of your platform from scratch is always intimidating. Shannon Weyrick and James Royalty discuss NS1's recent DNS server rewrite and outline the steps the company took to roll it out across its globally distributed network with no downtime.
Revisiting HTTP/2

Revisiting HTTP/2

November 29, 2019

Now that adoption is ramped up and HTTP/2 is being regularly used on the internet, it's a good time to revisit the protocol and its deployment. Hooman Beheshti reviews protocol basics and digs into core features such as interaction with TCP, server push, priorities and dependencies, and HPACK.
Test, measure, iterate: Balancing good enough and perfect in the critical path (sponsored by NS1)

Test, measure, iterate: Balancing good enough and perfect in the critical path (sponsored by NS1)

November 28, 2019

In critical path services such as DNS, stability is imperative above all else. Kris Beevers examines the trade-offs between risk and velocity faced by any high-growth, critical path technology business.
Modern infrastructure with Terraform

Modern infrastructure with Terraform

November 25, 2019

Seth Vargo offers a comprehensive, engineer-led overview of two of HashiCorp's tools: Terraform and Atlas.
Performance is about more than time series charts

Performance is about more than time series charts

November 24, 2019

When most people think of performance monitoring tools, they think of things like time series charts, page load times, DNS resolution times, and backend service response times. Buddy Brewer explores alternative ways of visualizing performance data and explains how changing your perspective can sometimes lead you to surprising discoveries.
Think outside the container

Think outside the container

November 3, 2019

There is much more to Docker than just deploying your flagship application. Carolyn VanSlyck, Ash Wilson, and Nick Silkey look at three use cases for Docker that go beyond the typical software development pipeline. You'll leave knowing how you can use Docker on the side, even if you haven't tackled Dockerizing your application.