Ultimate Dns Warrior

DNS Protocol and BIND Server - Expert Level - Incudes latest protocol advancements: DOH/DOT/Cookies - Expert T.Shooting

What you'll learn

In depth working of the protocol as per the DNS RFCs

Components of the DNS System

DNS Namespace - Fully Qualified Domain Name (FQDN)

Hierarchical Administration - Registry/Registrar/Registrant

Zones and Resource Records

Concept of Delegation

Types of DNS Servers - Authoritative vs Resolvers

Iterative vs Recursive DNS Queries

The 13 Root DNS Servers

Forward vs Reverse Zones

Resource Record Format

Purpose, format, usage and rules for most common Resource Records such as SOA, NS, A, AAAA, PTR, CNAME, TXT, MX and SRV and CAA Records

Wildcard Records

DNS Packet Format

DNS response Status Codes

Deep Dive into the complete DNS resolution process

What are White Label or branded or Vanity Name Servers?

How Glue records break circular reference?

DNS Response Caching and TTL

How caching works at the End Client

How caching works at the Resolver

The perils of caching

What is BIND?

How dig +trace works?

Setting up a Recursive Resolver

Tuning the Resolver

Setting up a Caching Server and Forwarding Queries

Setting up Authoritative Master and Slave Name Servers

How Zone transfers work - AXFR vs IXFR, Notify mechanism, SOA record timers?

Complete walkthrough of buying a Domain and setting up Internet facing Branded Name Servers

Different DNS Architectures used in Corporate Networks

How to perform Sub Domain Delegation

Different DNS related Files and settings on Windows and Linux end clients

Deep Dive into Extension Mechanisms for DNS (EDNS)

Views or Split DNS

EDNS Client Subnet (ECS)

Name Server Identifier (NSID)

Dynamic DNS Updates (DDNS)

How to delegate reverse zones which don't fall on classful boundaries

Deep Dive into DNSSEC - DNSSEC records, zone signing, establishing chain of trust, DNSSEC flags, failure scenarios

How to implement DNSSEC on BIND, Key maintenance and troubleshooting

DNS Firewall (RPZ) using local and 3rd party rule providers

DDOS protection features on BIND - clients per query, fetches-per-zone, fetches-per-server, recursive-clients and tcp-clients, Response Rate Limiting (RRL)

DNS Response Filtering features on BIND - Blackhole, NXDOMAIN Redirection

New DNS security features - DNS Cookies

Whois, EPP Status codes and related Domain settings and issues

How to troubleshoot different variety of DNS resolution issues

How to troubleshoot BIND server under heavy load

How end client stub resolver softwares such as Systemd-resolved and Dnsmasq can be leveraged to enabled caching

Best practices and steps to follow when transferring domain registration/hosted zone

Requirements

Basic networking and linux knowledge

Access to a Linux server - cloud / eve-ng / gns3

Access to intermediate network devices such as routers / switches / firewalls

Description

This course includes:12.5 hours on-demand videoDownloadable commands and configurationsFull lifetime accessCertificate of CompletionWho is this course for:This course has been designed for all IT Professionals looking forward to learn the DNS protocol and how to install, configure, operate and troubleshoot a BIND DNS Server.The course covers the DNS protocol and BIND Server from scratch to expert level.Course Outcomes:Thorough understanding of the DNS protocol.Understand how DNS works within large production grade environmentsUse dig and other tools to troubleshoot a wide variety of DNS issuesGain confidence to troubleshoot complex DNS issuesInstall, configure, tweak and tune the BIND as a recursive caching resolverInstall, configure, tweak and tune the BIND as an Authoritative DNS ServerMaster the advanced side of DNS - EDNDS, ECS, Views, DDNS, DNSSEC, DNS Cookies, DNS Firewall and moreGain confidence to clear interviews with top tier organizations like Amazon, Google, Facebook etc.What sets this course apart from others:High quality production standardsRespect for time - every second of the course is used to deliver precise and practical informationGoes deep into the protocol following the RFCComprehensive coverage of almost all DNS related conceptsAll topics are explained with practical labsExplains not just the protocol but how it works in the context of a large production network - how different network devices interact with DNS trafficDeep dive into the protocol and real world implementationsFocus on troubleshooting rather than just configuration

Overview

Section 1: Course Introduction

Lecture 1 Course Introduction

Section 2: The Basics

Lecture 2 DNS 101

Lecture 3 Hierarchical DNS Namespace

Lecture 4 Zones, Resource Records and the Concept of Delegation

Lecture 5 Types of DNS Servers and Types of DNS Queries

Lecture 6 Forward vs Reverse DNS Zones

Section 3: The Main Resource Records

Lecture 7 SOA and NS Records

Lecture 8 A, AAAA and PTR Records

Lecture 9 CNAME, MX, TXT and SRV Records

Section 4: Lab

Lecture 10 Introduction to the Lab

Section 5: DNS Packet Structure and Interacting with the DNS System

Lecture 11 DNS Header

Lecture 12 Using dig and nslookup to interact with the DNS System - Part 1

Lecture 13 Using dig and nslookup to interact with the DNS System - Part 2

Section 6: The DNS Resolution Process and Caching

Lecture 14 The entire DNS Resolution Process

Lecture 15 White Label (branded/vanity) Name Servers

Lecture 16 How caching works at the End Client

Lecture 17 How caching works at the Resolver

Lecture 18 dig +trace

Section 7: Working with BIND

Lecture 19 What is BIND?

Lecture 20 Setting up a Recursive Resolver

Lecture 21 Tuning the Resolver

Lecture 22 Setting up a Caching Server and Forwarding Queries

Lecture 23 Setting up Authoritative Name Server

Lecture 24 Setting up Slave Name Server

Lecture 25 Buying a Domain and setting up Branded Name Servers

Lecture 26 Different Architectures used in Corporate Networks

Lecture 27 Sub Domain Delegation

Section 8: Advanced DNS

Lecture 28 End Client DNS Files and Behaviors

Lecture 29 Extension Mechanisms for DNS (EDNS)

Lecture 30 Views or Split DNS

Lecture 31 ECS and NSID

Lecture 32 Dynamic DNS Updates (DDNS)

Lecture 33 Classless Reverse Delegation

Section 9: DNS Security

Lecture 34 DNSSEC - Theory

Lecture 35 DNSSEC - Practical

Lecture 36 DNSSEC on Bind

Lecture 37 DNS Firewall (RPZ)

Lecture 38 Blackhole, RRL, NXDOMAIN redirection, Dot/Doh

Lecture 39 Cookies

Section 10: Troubleshooting

Lecture 40 Troubleshooting domain issues

Lecture 41 Troubleshooting subdomain delegation issues

Lecture 42 Troubleshooting DNS resolution issues

Lecture 43 Troubleshooting DNS and BIND

Section 11: Bonus

Lecture 44 System-resolved and Dnsmasq

Lecture 45 Transferring Domain Best practices

Lecture 46 How to install and setup Eve-ng

Section 12: Course Resources

Lecture 47 Course Resources

This course has been designed for all IT Professionals looking forward to learn the DNS protocol and how to install, configure, operate and troubleshoot a BIND DNS Server. The course covers the DNS protocol and BIND Server from scratch to expert level.