- dns-wg - mailman.ripe.net

New on RIPE Labs: Managing DNS Zones Using Git
by Mirjam Kuehne 04 Feb '19

04 Feb '19

Dear colleagues, Using zone files for managing the Domain Name System (DNS) zone data is the most basic and flexible way to manage the authoritative DNS data. In this post on RIPE Labs, Ondřej Caletka describes how the Git version control system can be used to store zone file history and protect against errors: https://labs.ripe.net/Members/ondrej_caletka/managing-dns-zones-using-git Kind regards, Mirjam Kühne RIPE NCC

1 0

DNSViz Relocates to DNS-OARC
by Matthew Pounsett 01 Feb '19

01 Feb '19

OARC is pleased to announce that dnsviz.net has moved to join many other tools that we support for the DNS community. DNSViz, Casey Deccio's excellent DNSSEC debugging tool, was initially developed and hosted at Sandia National Laboratories, and has been hosted most recently at Verisign. We'd like to thank them both for providing that service for many years, and Verisign for donating the hardware that DNSViz will continue to live on in the near future. We're happy to be picking up the torch! Casey continues to be the primary developer and maintainer of the application, while OARC takes on the role of hosting and operating the online service. Unfortunately, we will be without the historical functions of the tool for a little over a week while the hardware is in transit between data centers, and DNSVIZ runs on an interim platform. Full access to the historical data will be restored once the hardware is brought back online during the week of February 11th. Matt Pounsett DNS-OARC Systems Engineering

1 0

Call For Presentations - DNS-OARC Workshop, Thailand, Bangkok, 12th/13th May 2019
by Dave Knight 06 Dec '18

06 Dec '18

Colleagues, The 30th DNS-OARC Workshop will take place at the Shangri-La Hotel, Bangkok, Thailand, on May 12th and 13th 2019, hosted by ICANN. (Note that several co-located meetings are taking place immediately prior to the DNS-OARC Workshop, including the GDD Industry Summit, May 6th-9th, the Registrations Operations Workshop, May 9th, and the ICANN DNS Symposium, May 10th-11th.) The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. A timeslot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted until the start of the morning session on day two. There will be a Members-only session during the workshop, which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. Workshop Milestones: 05 Dec 2018 - Submissions open via Indico 22 Feb 2019 - Deadline for submission 01 Mar 2019 - Initial Contribution list published 22 Mar 2019 - Full agenda published 03 May 2019 - Deadline for slideset submission 12 May 2019 - Workshop Details for presentation submission are published here: <https://indico.dns-oarc.net/event/31/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Dave Knight, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

New on RIPE Labs: DoH - It's DNS Jim, but not as we know it!
by Mirjam Kuehne 06 Dec '18

06 Dec '18

Dear colleagues, At RIPE 77, Sara Dickinson talked about what’s been going on with DNS over the past five years from the perspective of end devices. Now in article form, here's what Sara had to say about the status of the IETF standards for DNS over TLS (DoT) and DNS over HTTPS (DoH) as well as the deployment status of clients and servers for those technologies. https://labs.ripe.net/Members/sara_dickinson/doh-its-dns-jim-but-not-as-we-… Kind regards, Mirjam Kühne RIPE NCC

1 0

automatic DS record updates in the RIPE database
by Tony Finch 29 Nov '18

29 Nov '18

At the end of his talk at the RIPE meeting this morning, Ondřej Caletka mentioned his work on automated updates to DNSSEC delegations using CDS records: https://ripe77.ripe.net/programme/meeting-plan/dns-wg/ I commented at the mic to say that this is something I am very keen on. I wrote `dnssec-cds` (an implementation of RFC7344 and section 4 of RFC8078) to help improve DNSSEC automation, and it is included in BIND 9.12 and later. https://ftp.isc.org/isc/bind9/9.12.0/doc/arm/man.dnssec-cds.html Ondřej's setup uses a special `mntner` with RIPE database API access to indicate which zones should have their DS records updated automatically. This is a nice way to control permissions when the update process is running outside the RIPE database, but I expect it can be made neater if it is integrated more closely. I would like to help get RFC 7344 support into the RIPE database, so what do we need to do next to make it happen? Tony. -- f.anthony.n.finch <dot(a)dotat.at> http://dotat.at/ Hebrides, Bailey: Westerly backing southerly later, 5 to 7, occasionally gale 8 at first in north Bailey. Rough or very rough, occasionally high at first in north Bailey. Showers, rain later. Good, occasionally moderate.

6 11

FOSDEM DNS devroom CfP
by Peter van Dijk 19 Oct '18

19 Oct '18

Hello DNS working group, After a successful and packed half-day DNS devroom at FOSDEM 2018, we are happy to announce a full-day DNS devroom at FOSDEM 2019. As with last year, we hope to host talks anywhere from hardcore protocol stuff, to practical sessions for programmers that are not directly involved with DNS but may have to deal with DNS in their day to day coding or system administrators responsible for DNS infrastructure. We have been allotted a room on Sunday 3 February 2019. We expect to schedule 30 minutes per talk, including questions, but if you need more or less time, we can discuss this. If you have something you’d like to share with your fellow developers, please head to pentabarf at https://penta.fosdem.org/submission/FOSDEM19. Examples of topics are measuring, monitoring, DNS libraries, and anecdotes on how you’ve (ab)used the DNS. Here’s the 2018 schedule, for your inspiration: https://archive.fosdem.org/2018/schedule/track/dns/ . The deadline for submission is December 1st. If you have a FOSDEM pentabarf account from a previous year, please use that account. Reach out to dns-devroom-manager(a)fosdem.org if you run into any trouble. See you there! Cheers, Peter van Dijk, Shane Kerr, Pieter Lexis, and Kees Monshouwer Kind regards, -- Peter van Dijk PowerDNS.COM BV - https://www.powerdns.com/

1 0

New on RIPE Labs: Geoff Huston Explains DNS over HTTPS - DOH!
by Mirjam Kuehne 12 Oct '18

12 Oct '18

Dear colleagues, Please read this new article on RIPE Labs where Geoff Huston explains DNS over HTTPS - DOH! https://labs.ripe.net/Members/gih/doh-dns-over-https-explained Kind regards, Mirjam Kühne RIPE NCC

1 0

the day of reckoning is near
by Jim Reid 10 Oct '18

10 Oct '18

So, who’s stocked up on canned food and ammunition in case it all goes horribly wrong at 16:00 UTC tomorrow? :-)

4 3

New on RIPE Labs: Measuring the KSK Roll
by Mirjam Kuehne 01 Oct '18

01 Oct '18

Dear colleagues, Please read on RIPE Labs how Geoff Huston and the APNIC Labs measured the readiness of the Internet for the KSK roll: https://labs.ripe.net/Members/gih/measuring-the-ksk-roll Kind regards, Mirjam Kühne RIPE NCC

1 0

Now on RIPE Labs: How to Survive Scheduled DNS Maintenance
by Mirjam Kuehne 28 Sep '18

28 Sep '18

Dear colleagues, Please find this new article on RIPE Labs by Petr Spacek: How to Survive Scheduled DNS Maintenance https://labs.ripe.net/Members/petr_spacek/how-to-survive-scheduled-dns-main… Kind regards, Mirjam Kühne RIPE NCC

1 0