Monitoring DNS software behavior (recursive or authoritative) is shifting from PCAP-style observation to more robust collection with the dnstap protocol. Consuming large volumes of dnstap data and making into something meaningful is a challenge. Vector is a tool that consumes dnstap messages and allows highly flexible receipt, manipulation, enrichment, aggregation, and re-transmission - it is...
Why send queries to the DNS root servers when you can answer them yourself? Most DNS resolver implementations now support the concept of "LocalRoot", which increases local privacy, zeros latency to the root zone, and protections against network outages. In this session users will be shown how to turn this support on in various resolver software.
Bring a linux or other laptop supporting...
Want to better understand the crazy traffic arriving at your network? Then this session is for you. Session participants will actively learn how to use the traffic-taffy tool that was developed at USC/ISI DNS root server operators analyzing the many random spikes in traffic seen at our B-Root infrastructure.
If possible, bring a laptop that has python installed (> 3.7) and be prepared to...
Synopsis:
This session will provide a focused tutorial on Merkle Tree Ladders (MTL) and how MTL can help address challenges with adopting post-quantum cryptographic algorithms for DNSSEC. We will walk through examples of how MTL works in practice; the benefits it can provide to operators for storage, memory, computation, and bandwidth compared to other PQ-DNSSEC approaches; and have an open...
