DNS and BIND Advanced

Expand all

Course Description

This Advanced DNS training course focuses on critical topics. These include security topics that are critical in today's Internet. DNS has exotic, out-dated, and rarely implemented features. Those are not covered. This course mixes in-depth lectures and practical hands-on labs, which each student runs on his or her own server, which we provide.

 

Material Requirements

A participant must bring a computer with an Ethernet port, a keyboard, and an SSH client. (PuTTY is an example of an SSH client for Windows). The laptop must be able to get an IPv4 address with DHCP over the port. Please note the Ethernet port requirement, as some laptops require an adapter for Ethernet.

Course Outline

• Dynamic DNS (DDNS), NOTIFY, & Incremental Zone Transfers
• Extended DNS (EDNS)
• dnstap (Advanced Query & Response Logging)
• Catalog Zones(Automatic Zone Provisioning)
• Security: DNS Threats, Risks, Attacks, and Mitigation
• (e.g. Spoofed Responses, Spoofed IPs, Reflection, Amplification, DDoS, Cache Poisoning, Hijacking, etc)
• Security: Cryptography in DNS (Symmetric / Asymmetric)
• Security: Response Policy Zones (RPZ)
• Security: Response Rate Limiting
• Security: DNS Cookies
• Security: Transaction Signatures
• Security: Address Match Lists & Access Control Lists (ACLs)
• Security: Implementing a DNSSEC Validating BIND Resolving Server
• Security: Proper Firewall Configuration for DNS
• Security: Minimal ANY
• Security: DNSSEC (DNS SECurity) Introduction
• Views (Split-DNS)
• DNAME
• RDNS: Empty Zones (Preventing Unanswerable Queries)
• RDNS: BIND Authoritative Selection
• RDNS: BIND Prefetch
• The CHAOS Class & its Practical Uses
• Common DNS Misunderstandings
• BIND Configuration for Course Topics

Learning Path

• Please contact us for further details

Ways to Attend

• Attend a public course, if there is one available. Please check our schedule, or register your interest in joining a course in your area.
• Private onsite Team training also available, please contact us to discuss. We can customise this course to suit your business requirements.