SPARTA, Inc.
Solutions to Help People Implement DNSSEC
Russ Mundy SPARTA, Inc.
(a Parsons Company ) October 17, 2012
10/17/12 1 https://www.dnssec-tools.org/ Sponsored by: DHS S&T
SPARTA, Inc.
DNSSEC-Tools: Tools to Help People “Do DNSSEC” • Zone Administration Tools • Authoritative Domain Name Server Tools • Recursive Domain Name Server Tools • Application/Script Writers • End Users (DNSSEC Native Applications) • DNS Error Checking Tools • DNSSEC Management Tools
6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 2
SPARTA, Inc.
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 3
DNSSEC-Tools: Tools to Help People “Do DNSSEC”
SPARTA, Inc.
Automating & Visualizing DNSSEC
• Tools for end-users including several mobile platforms – DNSSEC is available on Android & some
other small platforms (e.g. cell phones)
• Tools for network and name server providers & operators – Automated key management & monitoring
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 4
SPARTA, Inc.
Help Us Measure the World! Available for Windows, Linux, OS X and Android
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 5
SPARTA, Inc.
www.weather.com www.foxnews.com
1 address = multiple DNS lookups
10/17/12 6 https://www.dnssec-tools.org/ Sponsored by: DHS S&T
SPARTA, Inc.
Valid Web Site Content
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 7
SPARTA, Inc.
INVALID Web Site Content From DNS Based Attack
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 8
SPARTA, Inc.
“Seeing” DNSSEC Better
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 9
SPARTA, Inc.
DNSSEC Nodes - Graph
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 10
SPARTA, Inc.
DNSSEC Nodes – Node Details
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 11
SPARTA, Inc.
DNSSEC Nodes – Validate Map
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 12
SPARTA, Inc.
DNSSEC-Tools: Tools for Using DNSSEC
• Zone Administration Tools • Authoritative Domain Name Server Tools • Recursive Domain Name Server Tools • Application/Script Writers • End Users (DNSSEC Native Applications) • DNS Error Checking Tools
• DNSSEC Management Tools
6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 13
SPARTA, Inc.
DNSSEC-Tools: Webmin Integration
6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 14
• DNSSEC status displayed in the zone listing
• Manage Rollover operations using rollerd • Migration to DNSSEC-Tools • Configuring Global DNSSEC-Tools related
options • Currently shipping in Webmin for CENTOS
6.x
SPARTA, Inc.
DNSSEC-Tools: Webmin Integration
6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 15
SPARTA, Inc.
DNSSEC-Tools: DNSSEC Management Tools
6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 16
SPARTA, Inc.
Blinkenlights Visualizing Key Rollover
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 17
SPARTA, Inc.
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 18
Blinkenlights Visualizing Key Rollover
SPARTA, Inc.
DNSSEC-Tools: Plug-In for Nagios
6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 19
SPARTA, Inc.
DNSSEC-Tools: Plug-In for ZABBIX
6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 20
SPARTA, Inc.
DNSSEC-Tools: Plug-In for ZABBIX
6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 21
SPARTA, Inc.
DNSSEC-Tools: New Release Available NOW
at: https://www.dnssec-tools.org/
6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 22
SPARTA, Inc.
Most Important Question:
What will help YOU implement DNSSEC??
Please Tell Us: [email protected]
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 23
SPARTA, Inc.
10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 24