Hands-On DNSSEC with DNSViz
DNSSEC enables the authentication of DNS responses. Despite this benefit, expert DNS operators have observed that there are challenges in understanding, deploying, …
Talk Title | Hands-On DNSSEC with DNSViz |
Speakers | Casey Deccio (Brigham Young University) |
Conference | NANOG69 |
Conf Tag | |
Location | Washington, D.C. |
Date | Feb 6 2017 - Feb 8 2017 |
URL | Talk Page |
Slides | Talk Slides |
Video | Talk Video |
DNSSEC enables the authentication of DNS responses. Despite this benefit, expert DNS operators have observed that there are challenges in understanding, deploying, monitoring and troubleshooting DNSSEC. DNSViz was developed to address these challenges by adding a suite to the existing DNS analysis tools in order to retrieve and analyze relevant DNS and DNSSEC information and present it to the user in graphical and programmatic formats. This tutorial will get hands-on with DNSSEC concepts by performing some DNSSEC signing, validation and manipulation, and using DNSViz to analyze and monitor the configurations. Prerequisites: The tutorial seeks to both instruct the DNSSEC novice and provide additional perspective to the DNSSEC experts. Some familiarity with DNS and Linux OS-based tools are helpful but not required. Please come prepared to participate with:
- Laptop computer (power adapter recommended)
- Internet access
- VirtualBox installed on your laptop, preferably version 5.0 (latest)
- The tutorial demo VM image, downloaded, unzipped, and installed, following the instructions at: http://dnsviz.net/demo/