DNS and IPv6 Training
Duration: 1 day.
La formation est aussi disponible en français.
Other courses: Basic DNS, DNS Security, DNS and Telephony (VoIP), Advanced DNS, DNS and RPZ, DNS and Telephony (VoIP), DNS on Windows Servers, LDAP Courses, Telecommunications/SS7 courses.
The primary focus of the course is BIND which is available on Linux, UNIX and Windows platforms. The course is offered with Linux (Fedora Core), FreeBSD or Windows 7, 8 or 10 as the platform for all exercises.
Summary
Reliable, robust and secure operation of the DNS hierarchy - from the root servers to an individual domain name server - is critical to all Internet operations. With the advent of IPv6, whose address format is extremely user-hostile, it is imperative that names be used rather than physical addresses. DNS and DHCP are the vehicles by which this goal will be achieved. The course covers the configuration and operation of DNS systems used for IPv6 and IPv6 based mobile applications with particular emphasis on DHCPv6 integration. While the primary focus of the course is BIND other DNS software will be discussed.
Description
Students will review the theory behind the DNS hierarchy, the DNS protocol, forward and reverse mapping zone files. The course covers IPv6 forward mapping (AAAA RR) and reverse mapping using the PTR RRs. While the current IETF recommendation uses AAAA and PTR - the experimental A6 and DNAME RRs will be covered since they contain important principles. Dynamic DNS (DDNS), secure integration with DHCPv6, diagnostic tools and security models are also covered. The course includes a number of hands-on configuration exercises.
Audience:
The course is designed for DNS administrators, Network and System Administrators, Mobile system administrators and those who need a thorough understanding of the DNS when used for IPv6. Students should either have attended the Basic DNS course or have two years of DNS operational experience.
About the Instructor
Ron Aitchison is the author of Pro DNS and BIND (Apress ISBN: 1-59059-494-0) and Pro DNS and BIND10 (Apress ISBN-13: 978-1590594940). Ron has been involved in communications and networking for more years than he cares to admit and is president and founder of Zytrax, Inc. a company specializing in IP communications (wired and wireless), systems development and consulting in Montreal, Canada. He has been involved with Open Source for over 15 years and is the primary author of the Tech Stuff, DNS for Rocket Scientists and LDAP for Rocket Scientists available as free resources for the community.
Outline
Module 1: DNS Refresher
- The DNS hierarchy (name servers and resolvers)
- Authoritative and cached responses
- Delegation - Parent and child domains
- Forward and Reverse mapping
- DDNS, AXFR, IXFR, NOTIFY
- Zone files - best practice
- DNS types
- Diagnostic Tools - DIG, NSLOOKUP
- DNS software - options and overview
Module 2: DNS Security Basics
- Security overview
- Security threat analysis
- DNS security scope (Zone transfer, DDNS, Zone integrity)
- Stealth configurations
- Administrative security (jails, permissions, server configurations)
- BIND Logs
- BIND's server clause
- Cache Poisoning 101
- RNDC - advanced configuration
- Mail Anti-SPAM (SPF, DKIM)
- Software diversity
Module 3: IPv6 and DNS
- IPv6 hierarchical Address Structure
- IPv6 Address Notation
- IPv6 Forward mapping (AAAA/A6 RR)
- IPv6 Reverse Mapping (PTR/DNAME RRs)
- Exercise
Module 4: IPv6 and Mobile Telephony
- The mobile environment
- mobile and IPv6 (3GPP)
- Status and plans
- DNS (and DHCP) implications
Module 5: DHCPv6 and Forward Mapping
- The DHCP protocol
- IPv6 node initialisation
- Auto-updating DNS from DHCP - strategic choices
- Securing the auto-update process - TSIG/SIG(0)
- Exercise
Module 6: DHCPv6 and Reverse Mapping
- IPv6 Reverse Mapping
- Secure Auto-updating DNS from DHCPv6 - configurations
- Exercise
Module 7: Summary
Other courses: Basic DNS, DNS Security, Advanced DNS, DNS and RPZ, DNS and Telephony (VoIP), DNS on Windows Servers, LDAP Courses, Telecommunications/SS7 courses.
