DNS Training Registration System
  
 
 

 

There are no current DNS courses - please come back later

 
Courses are usually held twice a year, around i-Week time (September) and at the beginning of the year (late January to early February). Registration is open a month or so before each course. The courses are usually held in Johannesburg (Midrand) and Cape Town. There is an Intro course and an Advance course which alternate in these locations. The Intro course is the first course of any training session, followed by the Advance Course.
  
 

DNS Training Application Form

The training course starts at 09:00 and finishes at 17:00.

Documentation, refreshments and lunch will be provided.


General information

The DNS courses are presented by Johan Ihren and Mark Elkins.

The Lab exercises are conducted by using Laptops running X Windows. The student uses the Laptop to connect via SSH (Secure SHell) to their (virtual) DNS Servers which are running on a BSD (Unix) system. Students must therefore bring their own Laptops and perhaps a USB memory sticks to keep copies of their work.


DNS Introduction Training Course Outline

Description

This course covers the fundamentals of DNS and all the important terminology is covered. In the course you will learn how to design DNS structure to achieve scalability and high availability. You will learn how to install and configure DNS name servers and you will get an understanding for how zones and domains are delegated, administratively as well as in technical solutions.

Target audience

The target audience for this course is networking people, network and DNS administrators as well as managers, people working with IT strategy, consultants, security people and others that need an understanding of DNS and DNS role on the Internet.

Pre-requisites

This course requires fundamental knowledge about the Internet and TCP/IP. Experience with a Unix/Linux text editor such as vi or emacs is very helpful as is an understanding of the Unix/Linux file system.

Duration: usually 4 days

Course Outline

  • DNS Introduction
  • The Internet before DNS
  • Introduction to the concept of a Resource Record
  • Caching, TTL and scalability
  • Delegation, the key to scalability
  • Name server roles
  • Root name servers
  • Resolvers
  • Detailed message exchange walk-through
  • Lab exercise: Compilation and installation of DNS software
  • Name server implementations
  • Debugging tools
  • Fundamental types of Resource Records
  • The named.conf configuration file
  • Lab exercise: Configuration of caching only resolver
  • Private addresses, RFC1918
  • Name server terminology
  • Zones: the administrative entity of DNS
  • Lab exercise: Configuration of authoritativ server
  • Lab exercise: Delegation of sub-domain
  • IPv6 and DNS
  • Lab exercise: Configuration and delegation of a reverse zone.
  • Lab exercise: IPv6
  • TSIG
  • Lab exercise: TSIG
  • Summary


DNS Advanced Training Course Outline

Description

The advanced course covers more complex DNS topics, such as DNS in combination with Firewalls and "Split-DNS". A complete treatment of DNSSEC (signing and authentication of DNS data) as well as TSIG (DNS Transaction Signatures, EDNS(0) and Views.

There is an obvious relation between DHCP and Dynamic DNS Updates and the course covers both these topics in detail, including lab exercises on each and also on the interaction between them.

Target audience

The target audience for this course is networking people, network and DNS administrators as well as managers, people working with IT strategy, consultants, security people and others that must get a deeper understanding of both traditional DNS as well as more recent extensions.

Pre-requisites

This course requires knowledge corresponding to our DNS Introductory Course.

Duration: usually 4 days

Course Outline

  • Repetition of DNS Fundamentals
  • DNS protocol design principles
  • DNS packet format
  • DNS Vulnerabilites Overview
  • TSIG
  • TSIG Lab Exercise
  • BIND Views
  • BIND rndc
  • Firewall issues
  • Lab exercise: firewalls, views, forwarding
  • EDNS0: A framework for DNS protocol extensions
  • Introduction to DHCP
  • DHCP server configuration
  • Lab exercise: DHCP server configuration
  • DNSSEC Overview
  • DNSSEC Signature Validation
  • Lab exercise: DNSSEC validation
  • DNSSEC Zone Signing
  • Lab exercise: DNSSEC zone signing
  • DNSSEC Protocol Changes
  • DNSSEC Resolver issues
  • Lab exercise: Creating a secure delegation
  • Dynamic Update
  • Authentication Alternatives
  • Lab exercise: Manual dynamic update
  • Dynamic Update Configuration
  • Dynamic Update Design Choices and Security
  • Lab exercise: Dynamic update and DHCP
  • International outlook, root zone issues, etc.
  • Summary
 

Last modified: Wednesday, 05th March, 2025 @ 07:11am - control