Building resilient DNS Infrastructure and Introduction to DNSSEC

Africa/Ouagadougou
Salle NCRI (Ouagadougou, Burkina Faso)

Salle NCRI

Ouagadougou, Burkina Faso

Université de Ouaga 1
Description

5-day DNSSEC awareness and hands on-training workshop on resilient DNS infrastructure which includes a refresher on guiding principles and best practices for building campus networks.

Objectives
Participants will:

  • revisit requirements for building highly available and reliable campus networks with the hierarchical network model and best current practices.
  • be able to explain and demonstrate concept of DNS as critical part of Internet infrastructure, configure nameservers and manage forward and reverse zones
  • be able to explain DNS protocol vulnerabilities, DNS Security and DNSSEC concepts
  • acquire hands-on experience with DNSSEC and plan for deployment


Target Audience
Network/systems administrators and engineers from campus networks and NRENs

 

 

 

 

 

Requirements: A laptop with wireless capability, understanding of network design concepts and a knowledge of UNIX/Linux and the Domain Name System

Language:  Conducted in English with bilingual trainers

Logistics:

  • All participants will have to secure funds for their travel, including visa fees where applicable.
  • International participants will be provided with free accommodation (from 9 October to 14 October 2016)
  • Lunches and coffee breaks will be provided for all participants for the duration of the workshop.
Participants
    • 09:00 10:30
      Opening and Welcome

      Welcome from FasoREN
      Welcome from WACREN
      Greetings from Ministry of Higher Education and Research
      Greetings from Ministry of ICT
      FasoREN update

    • 10:30 11:00
      Coffee Break 30m
    • 11:00 12:30
      WACREN and Campus Network Updates
      • 11:00
        WACREN Update 30m
        Speaker: Mr Omo Oaiya (WACREN)
        Slides
      • 11:30
        NREN and Campus Network presentations 1h
    • 12:30 13:30
      Lunch 1h
    • 13:30 15:00
      Campus Network IP Address Planning and Clinic
      • 13:30
        NREN and Campus IP Addressing 30m
        Speaker: Mr Alain Patrick AINA (WACREN)
        Slides
      • 14:00
        Exercise: IP Address Planning 30m
    • 15:00 15:30
      Coffee 30m
    • 15:30 16:30
      The Internet Naming Ecosystem

      The DNS Ecosystem

      • 15:30
        The DNS Ecosystem 30m
        Speaker: Mrs Khoudia GUEYE (snRER)
        Slides
      • 16:00
        Accessibility of ccTLD name servers in the WACREN region 30m
        Speaker: Didier Bassole (Université de Ouagadougou)
        Slides
    • 09:00 10:30
      DNS Essentials

      Concept, hierarchy, components and roles
, forward and reverse zones and delegation

      • 09:00
        Plain "old" DNS 45m
        Speaker: Mrs Khoudia GUEYE (snRER)
        Slides
      • 09:45
        Labs 45m
        zones setup, master/slave, delegation with BIND, tests and validation
        Exercises
        Overview of the lab network architecture
    • 10:30 11:00
      Coffee Break 30m
    • 11:00 12:30
      DNS Essentials

      DNS Resolvers, Name Server Control, DNS Service Logging

      Convener: Mr Alain Patrick AINA (WACREN)
      Exercises
      slides
    • 12:30 13:30
      Lunch 1h
    • 13:30 15:00
      DNS service monitoring
      • 13:30
        DNS Server and Service Monitoring 30m
        Speaker: Mrs Khoudia GUEYE (snRER)
        Exercises
    • 15:00 15:30
      Coffee Break 30m
    • 15:30 17:00
      DNS Service Monitoring: Labs

      Use of Nagios and Smokeping for DNS monitoring

      Exercises
    • 09:00 10:30
      DNS - Other Security

      Access Control, Securing Host-Host communication, DNS Anycast, DNS data confidentiality

      • 09:00
        DNS Security and Resiliency 30m
        Speaker: Mr Alain Patrick AINA (WACREN)
        Slides
    • 10:30 11:00
      Coffee Break 30m
    • 11:00 12:30
      DNS - Other Security: Labs
      Exercises
    • 12:30 13:30
      Lunch 1h
    • 13:30 15:00
      Labs continued
    • 15:00 15:30
      Coffee Break 30m
    • 15:30 17:00
      Labs continued
    • 09:00 10:30
      DNSSEC Labs Continued

      Delegation of signing authority, DS exchanges and chain of trust

    • 10:30 11:00
      Coffee Break 30m
    • 11:00 12:30
      DNSSEC troubleshooting

      dig and dnsviz.net

    • 12:30 13:30
      Lunch 1h
    • 13:30 15:00
      Discussion

      Key management, HSM discussions, DNSSEC deployment experiences, Root KSK rollovers project, Discussions on DNS privacy, Q&A

      Information
    • 15:00 15:30
      Coffee Break 30m
    • 15:30 17:00
      Wrap-up and closing

      Evaluation and Certificate Presentation