DNS and BIND Week

Expand all

Course Description

DNS & BIND Week is very popular course. It is ideal for anyone starting out. It is most commonly attended by those with previous DNS knowledge, and by administrators with BIND experience.

Nothing is taken for granted, and the labs begin by downloading, compiling, and installing BIND. Each student creates BIND configuration from scratch for authoritative and recursive servers. They create zone files from scratch for an authoritative masters. DNS tools such as, dig,rndc, named-checkconf, & named-checkzone, are taught in depth and used extensively in the labs. Those with previous DNS and BIND skills report that the start of the course, which assumes nothing, fills in knowledge gaps, corrects misconceptions, and that it moves on to unknown topics and new material. This DNS & BIND Week training course is hands-on, full of laboratory exercises.

 

Material Requirements

A participant must bring a computer with an Ethernet port, a keyboard, and an SSH client. (PuTTY is an example of an SSH client for Windows). The laptop must be able to get an IPv4 address with DHCP over the port. Please note the Ethernet port requirement, as some laptops require an adapter for Ethernet.

Course Outline

•     The DNS Namespace (Basic DNS Theory)
•     Domain Names, Labels and Nodes
•     The root, TLDs, and Lower Level Domains
•     Zones and Zone Types
•     Delegation
•     Name Resolution and Referrals
•     The DNS Message (DNS Data)
•     Name Servers: Authoritative Masters, Authoritative Slaves, RDNS (Recursive Resolvers)
•     Caching & Negative-Caching
•     Stub Resolvers
•     Forwarding, Forward Zones, and Stub Zones
•     Master File Format, Shortcuts, & Directives
•     Registrants, Registrars, Registries, Registry Operators
•     Classes, Resource Record Types, & Resource Records
•     (minimally, the following are covered in detail: SOA, NS, A, AAAA, MX, SRV, TXT, PTR, CNAME)
•     Pseudo Resource Records (e.g. ANY, AXFR, IXFR, OPT, TSIG, etc)
•     Setting Up & Accessing Remote Name Servers
•     Downloading, Compiling and Installing BIND
•     BIND Configuration Files (minimally):
•     named.conf, rndc.conf, rndc.keys, bind.keys
•     BIND Management Tools (minimally):
•     named-checkconf,named-checkzone, rndc, nsupdate, rndc-confgen, tsig-keygen
•     Generating & Reading BIND Log Files
•     dig, its Output, & the problems with nslookup
•     DNS Debugging & BIND Debugging
•     Dynamic DNS (DDNS), NOTIFY, & Incremental Zone Transfers
•     Extended DNS (EDNS)
•     dnstap (Advanced Query & Response Logging)
•     Catalog Zones(Automatic Zone Provisioning)
•     Security: DNS Threats, Risks, Attacks, and Mitigation
•     (e.g. Spoofed Responses, Spoofed IPs, Reflection, Amplification, DDoS, Cache Poisoning, Hijacking, etc)
•     Security: Cryptography in DNS (Symmetric / Asymmetric)
•     Security: Response Policy Zones (RPZ)
•     Security: Response Rate Limiting
•     Security: DNS Cookies
•     Security: Transaction Signatures
•     Security: Address Match Lists & Access Control Lists (ACLs)
•     Security: Implementing a DNSSEC Validating BIND Resolving Server
•     Security: Proper Firewall Configuration for DNS
•     Security: Minimal ANY
•     Security: DNSSEC (DNS SECurity) Introduction
•     Views (Split-DNS)
•     DNAME
•     RDNS: Empty Zones (Preventing Unanswerable Queries)
•     RDNS: BIND Authoritative Selection
•     RDNS: BIND Prefetch
•     The CHAOS Class & its Practical Uses
•     Common DNS Misunderstandings
•     BIND Configuration for Course Topics

Learning Path

• Please contact us for further details

Ways to Attend

• Attend a public course, if there is one available. Please check our schedule, or register your interest in joining a course in your area.
• Private onsite Team training also available, please contact us to discuss. We can customise this course to suit your business requirements.