During the last two months of 2024, Dr Guillaume-Jean Herbiet, technical manager of the .lu service, will teach on five occasions at the Digital Learning Hub (DLH) - a continuing professional education structure in Luxembourg. He aims to train students, professionals and IT enthusiasts willing to:
- Discover the DNS (Domain Name System) and understand its principles and functioning;
- Understand the principles and functioning of DNSSEC (Domain Name System Security Extensions);
- Know how to administer your domain name
- Know how to avoid caveats in DNS operations;
- Know how to operate an authoritative DNS server and be able to publish your own DNS zone;
- Know how to use a DNS resolver and be able to provide a name resolution service to your personal, corporate or institutional network;
- Know how to sign and publish a signed zone and be able to publish your own DNS zone
- Be able to sign and publish a signed zone and avoid or resolve DNSSEC-related problems;
- Be able to implement a more advanced DNSSEC signing infrastructure using open-source software.
All courses will be given in English and are aimed at an experienced or not experienced audience. For a full understanding of the issues surrounding DNS and DNSSEC, attendance at all courses is strongly encouraged.
DNSSEC (Domain Name System Security Extensions) technology authenticates DNS records using cryptographic keys to ensure that each domain fits perfectly into a trusted chain within the tree of the Internet-based naming system.
In November 2024, three courses about DNS
INTRODUCTION TO THE DOMAIN NAME SYSTEM (15 November 2024, 9:00 - 17:00)
Level: Beginner
On 15 November 2024, within the ‘Introduction to the Domain Name System’, the participants will learn about:
- Historical perspective.
- Understanding the domain space and DNS technical. infrastructure, including anycast.
- Introduction to the DNS protocol, DNS resource records types.
- Domain names economical importance, market and lifecycle.
- Domain names registration and administration procedure and best practices.
- Troubleshooting domain name registration and administration.
OPERATING A DNS AUTHORITATIVE SERVICE (22 November 2024, 9:00 - 17:00)
Level: Intermediate
On 22 November 2024, within the ‘Operating a DNS authoritative service’, the participants will learn about:
- Review of the DNS technical infrastructure, with a focus on DNS authoritative servers.
- DNS authoritative servers landscape, advantages and drawbacks.
- Installation and configuration of DNS authoritative servers.
- Zone file contents and edition.
- Dynamic DNS zone content.
- Primaries and secondaries authoritative servers, zone transfers, secure zone transfers.
- Catalog zones.
- Troubleshooting DNS authoritative server operation
OPERATING A DNS RESOLUTION SERVICE (29 November 2024, 9:00 - 17:00)
Level: Intermediate
On 29 November 2024, within the ‘Operating a DNS resolution service’ training course, the participants will learn about:
- Review of the DNS technical infrastructure, with a focus on DNS resolution and recursive resolvers.
- DNS recursive resolvers servers landscape, advantages and drawbacks.
- Installation and configuration of DNS recursive resolvers servers.
- Recursive resolvers servers cache management.
- Split-horizon DNS resolution.
- DNSSEC validation during recursive resolution.
- Secure DNS resolution services (DNS-over-TLS, DNS-over-HTTPS).
- DNS filtering (or “DNS firewall”) with Response Policy Zones (RPZ).
- Advanced resolution infrastructure (cache sharing, resolution proxy).
- Troubleshooting DNS recursive resolver server operation.
→ Registration and information on dlh.lu
DNSSEC (Domain Name System Security Extensions) technology authenticates DNS records using cryptographic keys to ensure that each domain fits perfectly into a trusted chain within the tree of the Internet-based naming system.
In December 2024, two courses about DNSSEC
DNSSEC (Domain Name System Security Extensions) technology authenticates DNS records using cryptographic keys to ensure that each domain fits perfectly into a trusted chain within the tree of the Internet-based naming system.
DISCOVERING PRINCIPLES OF DNSSEC (6 December 2024, 9:00 - 17:00)
Level : Intermediate
On 6 December 2024, within the ‘Principles of the Domain Name System Security Extensions (DNSSEC)’ training course, the participants will learn about:
- Review of the DNS technical infrastructure, with a focus on security threats and that can be mitigated with DNSSEC.
- Theoretical background on DNSSEC.
- Actual implementation of DNSSEC-signing (manually then automatically).
- DNSSEC-signing validation and monitoring.
→ Registration and information on dlh.lu
DNSSEC (Domain Name System Security Extensions) technology authenticates DNS records using cryptographic keys to ensure that each domain fits perfectly into a trusted chain within the tree of the Internet-based naming system.
GAINING IN-DEPTH KNOWLEDGE OF DNSSEC INFRASTRUCTURE (13 December 2024, 9:00 - 17:00)
Level: Advanced
On 12 December 2024, within the ‘Advanced DNSSEC infrastructure’ training course, the participants will learn about:
- Review of the DNS technical infrastructure, with a focus on security threats and that can be mitigated with DNSSEC and principles of DNSSEC.
- Installation, configuration and administration of a secure and resilient DNSSEC signing infrastructure.
- DNSSEC keys and algorithm roll-overs
→ Registration and information on dlh.lu
DNSSEC (Domain Name System Security Extensions) technology authenticates DNS records using cryptographic keys to ensure that each domain fits perfectly into a trusted chain within the tree of the Internet-based naming system.
The courses are open to anyone of adult age, Luxembourg resident or not, and a certificate of participation is issued by the Ministry of Education, Children and Youth. Participation is subject to prior registration - within the limits of the available places - directly with the Digital Learning Hub.