2006 DNS Operations Workshop (San Jose)

Contribution List

8. An Automated Incident Response System Using BIND Query Logs

Mr John Kristoff

At Northwestern University we built on top of an existing network status and incident management system by incorporating the use of BIND query logs as an input source of data. Using a blacklist of domain names that have been identified as servicing botnets as the locator for a command and control point, we setup a process to monitor queries on the institution's primary name servers to...

12. Anatomy of Recent DNS Reflector Attacks From the Victim and Reflector Points of View

Mr Matt Larson

In the last several months there have been a number of significant DDoS attacks using open recursive DNS servers to reflect and amplify the attack. In the last several weeks these attacks have begun to be picked up by the media. This presentation looks at the anatomy of these attacks from the victim point of view, as well as from the reflector point of view. The presentation looks at a...

2. Building Global Content-Distribution Networks

Mr Bill Woodcock (PCH)

Bill Woodcock will discuss his experiences and architectural principles in building several generations of global-scale content-delivery networks, in the DNS, file-sharing, web content, and streaming media spaces. This talk will emphasize anycast and topological load-distribution techniques, and address physical infrastructure deployment issues.

11. Challenges of deploying anycast servers

Mr Sebastian E. Castro Avila

This talk will cover the challenges of deploying anycast on a incorrectly organized national network (we've deployed anycast for .CL and a F-root replica, and we suffered trying to get it right) as well as the right placement for anycast servers. It will include a methodology used to find the right place (topologically speaking) for .CL anycasted nameservers along with some data and some...

0. CoDoNS and DHT round table

Mr David Ulevitch (EveryDNS)

Where do groups like ICANN then fit in? What about the root-servers and the TLDs? There is a lot to discuss and more questions than answers. While the CoDoNS emails a week or two back spawned most of this discussion the focus will be more general about the impending changes to the DNS and what they could mean.

1. Community Response to Inter-network Abuse

Mr Rick Wesson

Identifying abuse on your network is hard. It frequently involves another another network, and most customers are unaware they are compromised. The talk will cover ways to address these issues.

6. DNS monitoring tools

Mr David Ulevitch, Mr Sebastian E. Castro Avila

A demo and overview of some tools for monitoring authoritative DNS servers and discovering trends. Includes an overview of tools used by .CL for real-time DNS monitoring: dnstop+RRD

14. DNSSEC deployment

Mr Russ Mundy

A discussion of the issues around DNSSEC deployment.

9. Finding Open Resolvers

Duane Wessels (Verisign)

Open DNS resolvers may be considered a threat to Internet security because they increase the possibility of cache poisoning, and have been used in large-scale DDoS attacks. This talk explains our technique for probing DNS resolvers for openness, how we find resolvers to probe, and what our probes have uncovered.

7. Netperf4

Mr Rick Jones

Netperf4 is the synchronized, multiple system, multiple connection, multiple thread version of the venerable netperf (aka netperf2) benchmark. If you like, you can think of netperf4 as the "eierlegende wollmilchsau" netperf :) With the multiple-mumble design philosophy leaning more towards system-level benchmarking, netperf4 is intended as a complement to, rather than a replacement for netperf2.

5. NSD, Version 3

Mr Olaf Kolkman

NSD is an authoritative only, high performance, simple and open source name server. This presentation features and overview of the history, the design philosophy, the architecture and a peek under the hood of the forthcoming version 3.

10. Placement of TLD name servers and DNS reliability

Mr Steve Gibbard

The domain name system, without which most Internet applications don't work, depends on reliable access to DNS information. Failure scenarios therefore exist where two Internet hosts may have connectivity to each other, but can't communicate because they lack a path to a DNS server in another location. A talk at last May's NANOG touched on this problem in the general case. This talk will...

3. The IDN Experience

Mr Sebastian E. Castro Avila

Last september, .CL enabled IDN domain registration. This talk will cover the load, the pattern of registration, use of IDN at the DNS level and other details.

13. What's going on with DLV?

Mr Peter Losher (ISC)

4. What's new in BIND 9.4.0?

Mr Peter Losher (ISC)