Advanced DNS training course description
This two-day hands on DNS training course studies both the UNIX BIND and the Microsoft (MS DNS) implementations. The course follows on from our Definitive DNS for engineers course starting with best practices. The majority of the course is spent on securing DNS and in particular DNSSEC. Some parts are specific to BIND. Students choose whether to use Windows or UNIX for the hands on sessions.
What will you learn
Implement DNS best practices.
Harden DNS servers.
Install, configure, maintain and troubleshoot DNSSEC.
Advanced DNS training course details
Who will benefit:
Technical staff wanting to learn DNS including:
Network personnel.
System administrators.
Prerequisites:
Total DNS for engineers
Duration
2 days
Advanced DNS training course contents
Best practices
MX and PTR records, lame delegations,
disallowing recursion, TTLs, online testing.
Hands on Review of your DNS servers.
Split DNS
Partitioning internal and external DNS, views.
Hands on Implementing split DNS.
Hardening DNS
ACLs, recursion, queries, trusted sources, chroot
jail, secure BIND template.
Hands on Securing the
DNS server.
DNSSEC
What is DNSSEC? DNSSEC benefits, DNSSEC
RRs. DNSKEY, RRSIG, NSEC, DS.
Hands on
Creating DNSSEC keys.
Securing zone transfers
TSIG, shared secret. Securing DDNS.
Hands on
Secure file transfers.
Zone integrity
Trusted anchors, Chains of trust, Zone status,
Zone signing, Keys. ZSK, KSK, adding keys to a
zone file. Secure delegations.
Hands on Zone
signing
Maintaining Signed zones
Key rollover, pre publish, double signing, rollover
cache.