DNS & DNSSEC
 operational best practices

Sleep better at night with KINDNS in your network!

In this workshop, we will cover the basics of DNS operations, explore the importance of DNSSEC for authentication and integrity, and introduce KINDNS — a practical framework that provides clear guidelines and self-assessment tools to help operators follow best practices. Together, these topics will give participants a roadmap for running DNS services more securely and reliably.

Workshop Level

Intermediate
Open and free for anyone interested in learning.

Instructor 

Philip Paeps > Trouble :-) 
https://trouble.is/who/ 

Workshop Outline / Topics:

• Core Guidelines (for everyone)

• ACLs: How to restrict traffic to DNS servers

• DNSSEC Validation: It’s easy – turn it on already!

• Enabling DNSSEC

• KINDNS Self-Assessment

• Best Practices and Hands-On

Workshop Objectives

By the end of this workshop, participants will:

• Understand the importance of securing DNS operations.

• Learn how to apply simple but effective access control to DNS servers.

• Enable and test DNSSEC validation in their environments.

• Perform a KINDNS self-assessment to measure their operational health.

• Explore best practices through real-world examples and hands-on demonstrations.

Target Audience

• Network engineers

• System administrators

• Students and newcomers interested in DNS security

• Anyone running or planning to run DNS infrastructure

Slides and Materials

• Slides:

 https://docs.google.com/presentation/d/1Sm6HtkCz1SONqyt5su4WCP59fsavORhl/edit?usp=share_link&ouid=115115255437803652362&rtpof=true&sd=true 

• Hands-on: 

https://drive.google.com/file/d/1-5ZgJmLRu8wFQvf9ULaw3mlV6C1MgdMl/view?usp=share_link 

Session's record 

https://drive.google.com/file/d/1P_PehD939T5D53DELvrVr0HfDNJ7vbo0/view?usp=share_link