La formation est aussi disponible en français.
Reliable, robust and secure operation of the DNS hierarchy - from the root servers to an individual domain name server - is critical to all Internet operations. The courses offered provide a range of training from novice through to established DNS professionals who need to brush up their skills or require specialised knowledge such as DNSSEC or Telephony. Courses are offered in both BIND and Windows DNS and can be delivered on either a Linux/UNIX (BIND courses only) or Windows (BIND or Windows DNS courses) platform
| Course |
Overview |
| Basic DNS |
Basic DNS is a 2 day course but may be combined with Advanced DNS to create a 3 day course. BIND specific. Students will learn the theory behind the DNS hierarchy, the DNS protocol, forward and reverse mapping zone files. The major Zone file Resource Records (SOA, NS, MX, CNAME, A, PTR, TXT, SRV and NAPTR) are described and explained in detail. A number of DNS types are introduced - including Master/Slave, Caching Only, Authoritative Only, Forwarding and Stealth - and the detailed zone files and BIND configuration files (named.conf) to control operational behavior are presented. Dynamic DNS, (DDNS), integration with DHCP, Zone Transfer, Diagnostic tools and simple security models are also covered. The course includes a number of hands on configuration exercises. |
| Advanced DNS |
Advanced DNS is a 1 day course but may be combined with Basic DNS to create a 3 day course. BIND specific. Students will review the theory behind the DNS hierarchy, the DNS protocol, forward and reverse mapping zone files. The DNS can be used for a number of purposes each of which is covered in detail: Stealth (DMZ) Configuration; Load-balancing and failover (strategies and limitations); securely auto-updating the DNS by integration with DHCP; administrative security and best-practices; SPF(TXT) RRs; Advanced Diagnostics and debugging. The course includes a number of hands on configuration exercises. |
| DNS and RPZ
|
DNS and RPZ is a 1 day course. BIND specific. Response Policy Zones (RPZ) is a powerful feature of BIND 9.10+. RPZ files may be used to block, filter or trigger specific responses to domain names. The course covers all the RPZ Policy Action and Triggers and distribution of RPZ files using zone transfer. Attendees will construct an example RPZ. Attendees should be familiar with the basic concepts of DNS, master and slave operation and zone file construction. For those not familar or comfortable with these concepts a 1 ½ day version is available. |
| DNS Security |
DNS Security is a 2 day course. BIND specific. Students will review the theory behind the DNS hierarchy, the DNS protocol, forward and reverse mapping zone files. DNS (DNSSEC) security is based on modern cryptographic techniques and processes. The student will learn the underlying principles without requiring mathematical knowledge. Specific implementation of shared-secret (symmetric) and public-key (asymmetric) implementations will be detailed covering Zone Transfer, Dynamic DNS (DDNS) and Zone Integrity. Secure DDNS integration with DHCP is covered and procedures and requirements for key management and key-rollover are illustrated. The course includes a number of hands on configuration exercises. |
