Presentation is loading. Please wait.

Presentation is loading. Please wait.

RIPE 43, September 2002, Ρόδος. nsd a Name Service Daemon Alexis Yushin, Daniel Karrenberg, Olaf Kolkman,

Published byTyrone O’Neal’ Modified over 8 years ago

Similar presentations

Presentation on theme: "RIPE 43, September 2002, Ρόδος. nsd a Name Service Daemon Alexis Yushin, Daniel Karrenberg, Olaf Kolkman,"— Presentation transcript:

1 http://www.nlnetlabs.nl/ RIPE 43, September 2002, Ρόδος. http://www.ripe.net nsd a Name Service Daemon Alexis Yushin, Daniel Karrenberg, Olaf Kolkman, Ted Lindgreen with Erik Rozendaal, Jaap Akkerhuis, Miek Gieben, …

2 http://www.nlnetlabs.nl/ RIPE 43, September 2002, Ρόδος. http://www.ripe.net Presentation Outline Why nsd ? What is nsd ? Who should use nsd ?

3 http://www.nlnetlabs.nl/ RIPE 43, September 2002, Ρόδος. http://www.ripe.net Why nsd? Code Diversity Simplicity Performance Open Source

4 http://www.nlnetlabs.nl/ RIPE 43, September 2002, Ρόδος. http://www.ripe.net What is nsd? Authoritative-Only DNS Name Server –No recursion –No caching –No dynamic update –No zone transfers Implemented from Scratch High Performance Design DNSSec Ready Well Tested

5 http://www.nlnetlabs.nl/ RIPE 43, September 2002, Ρόδος. http://www.ripe.net Basic nsd Design Zone Compiler bserved Loads Zone Files Responses daemon Queries Responses

6 http://www.nlnetlabs.nl/ RIPE 43, September 2002, Ρόδος. http://www.ripe.net Performance Results

7 Performance Results

8 http://www.nlnetlabs.nl/ RIPE 43, September 2002, Ρόδος. http://www.ripe.net Performance Results

9 http://www.nlnetlabs.nl/ RIPE 43, September 2002, Ρόδος. http://www.ripe.net Performance Results “Marketing Version”

10 Goals Achieved ? Code Diversity –Totally New Design –Bug Diversity Simplicity –Daemon kept as small as possible (~1000 lines C) –No creeping featurism (total 5684 lines C) Performance –See above Open Source –Yes (BSD License)

11 http://www.nlnetlabs.nl/ RIPE 43, September 2002, Ρόδος. http://www.ripe.net Who should use NSD? Publishers of authoritative zone info –Root Servers (some) –TLD servers –…–… Who should not use nsd –Recursing name servers –Servers really needing dynamic updates nsd-1.0.1 is available. It is stable.

12 http://www.nlnetlabs.nl/ RIPE 43, September 2002, Ρόδος. http://www.ripe.net Questions??? Slides and other information (will be) available from http://www.ripe.net/http://www.ripe.net/ Nsd-1.0.1: http://www.nlnetlabs.nl/ nsd/index.en.html

Download ppt "RIPE 43, September 2002, Ρόδος. nsd a Name Service Daemon Alexis Yushin, Daniel Karrenberg, Olaf Kolkman,"

Similar presentations

Olaf M. Kolkman. APNIC, 6 February 2014, Bangkok. DNSSEC and in-addr an update Olaf M. Kolkman

Olaf M. Kolkman. APNIC, 6 February 2014, Bangkok. DNSSEC and in-addr an update Olaf M. Kolkman
Reverse DNS SIG Summary Report APNIC Annual Member Meeting Bangkok, March 7 2002.

Reverse DNS SIG Summary Report APNIC Annual Member Meeting Bangkok, March
Naming: The Domain Name System Nick Feamster CS 4251 Fall 2008.

Naming: The Domain Name System Nick Feamster CS 4251 Fall 2008.
© 2006-2012 NLnet Labs, Licensed under a Creative Commons Attribution 3.0 Unported License.Creative Commons Attribution 3.0 Unported License Introduction.

© NLnet Labs, Licensed under a Creative Commons Attribution 3.0 Unported License.Creative Commons Attribution 3.0 Unported License Introduction.
State of DNS Security Extensions Edward Lewis February 26, 2001 APRICOT 2001 Panel.

State of DNS Security Extensions Edward Lewis February 26, 2001 APRICOT 2001 Panel.
Sergei Komarov. DNS  Mechanism for IP hostname resolution  Globally distributed database  Hierarchical structure  Comprised of three components.

Sergei Komarov. DNS  Mechanism for IP hostname resolution  Globally distributed database  Hierarchical structure  Comprised of three components.
February 2003slideset 1 Introduction to the DNS system Olaf M. Kolkman

February 2003slideset 1 Introduction to the DNS system Olaf M. Kolkman
The new APNIC DNS generation system. Previous System Direct access to backend whois.db files – Constructed radix tree in memory from domain objects –

The new APNIC DNS generation system. Previous System Direct access to backend whois.db files – Constructed radix tree in memory from domain objects –
DNS Security Extension (DNSSEC). Why DNSSEC? DNS is not secure –Applications depend on DNS ►Known vulnerabilities DNSSEC protects against data spoofing.

DNS Security Extension (DNSSEC). Why DNSSEC? DNS is not secure –Applications depend on DNS ►Known vulnerabilities DNSSEC protects against data spoofing.
© Afilias Limitedwww.afilias.info SM Challenges of Deploying DNSSEC: Prepare your ccTLD with Secondary DNS services LACNIC Meeting May 2010 Presented by:

© Afilias Limitedwww.afilias.info SM Challenges of Deploying DNSSEC: Prepare your ccTLD with Secondary DNS services LACNIC Meeting May 2010 Presented by:
70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network, Enhanced Chapter 7: Planning a DNS Strategy.

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network, Enhanced Chapter 7: Planning a DNS Strategy.
DNS Security Extensions (DNSSEC) Ryan Dearing. Topics History What is DNS? DNS Stats Security DNSSEC DNSSEC Validation Deployment.

DNS Security Extensions (DNSSEC) Ryan Dearing. Topics History What is DNS? DNS Stats Security DNSSEC DNSSEC Validation Deployment.
25.1 Chapter 25 Domain Name System Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display.

25.1 Chapter 25 Domain Name System Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display.
Domain Name System ( DNS )  DNS is the system that provides name to address mapping for the internet.

Domain Name System ( DNS )  DNS is the system that provides name to address mapping for the internet.
1 Secure DNS Solutions Rooster. 2 Introduction What does security mean for DNS? What security problems exist for DNS, what is being done about them, and.

1 Secure DNS Solutions Rooster. 2 Introduction What does security mean for DNS? What security problems exist for DNS, what is being done about them, and.
Domain Name Services Oakton Community College CIS 238.

Domain Name Services Oakton Community College CIS 238.
Peter Janssen, EURid.eu Ljubljana, RIPE 64, 2012 Peter Janssen, EURid.eu Ljubljana, RIPE 64, April 18 2012.

Peter Janssen, EURid.eu Ljubljana, RIPE 64, 2012 Peter Janssen, EURid.eu Ljubljana, RIPE 64, April
11.1 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 11: Introducing WINS, DNS,

11.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 11: Introducing WINS, DNS,
Domain Name System | DNSSEC. 2  Internet Protocol address uniquely identifies laptops or phones or other devices  The Domain Name System matches IP.

Domain Name System | DNSSEC. 2  Internet Protocol address uniquely identifies laptops or phones or other devices  The Domain Name System matches IP.
Module 10 Advanced Topics. DNS and DHCP DHCP can be configured to auto- update (using DDNS) the forward and reverse map zones Can be secured using allow-update.

Module 10 Advanced Topics. DNS and DHCP DHCP can be configured to auto- update (using DDNS) the forward and reverse map zones Can be secured using allow-update.

Similar presentations

Ads by Google