ICANN 44 - Tech day: YADIFA

EURid
YADIFA
A true name server alternative


ICANN 44 Prague – ccNSO TechDay –
25/06/2012

Peter Janssen
EURid vzw/asbl
2   GOALS


    USE CASE 1 : ALTERNATIVE FOR BIND AND NSD ON PUBLIC TLD
    SLAVES
    – Clean implementation
    – High query rate and portable
    – RFC compliant
          Authoritative
          DNSSEC support
          AXFR/IXFR (master and slave)

    USE CASE 2 : DYNAMIC UPDATED HIDDEN MASTER + DNSSEC
    – Dynamic updates (including continuous DNSSEC signing)
    – “Generic, extensible storage backend”

    USE CASE 3 : ZONE MANAGEMENT
    – Dynamic zone provisioning

    USE CASE 4 : RECURSIVE NAME SERVER
    – Recursion
    – Validation
                                         EURid vzw - Peter Janssen
                              ICANN 44 ccNSO Tech Day – 25/06/2012
3   RELEASE 1.0


    AUTHORITATIVE

    ZONE FILES
    – Include, *, /
    – SOA, A, AAAA, NS, CNAME, PTR, DNAME, HINFO, MX, TXT,
       DNSKEY, DS, RRSIG, NSEC, NSEC3, NSECPARAM, NAPTR, SRV,
       SSHFP

    ZONE TRANSFERS, MASTER, SLAVE, NOTIFY

    TSIG, ACLS

    NSUPDATE

    DNSSEC
    – RSASHA1 (5,7)
    – Online resigning




                                         EURid vzw - Peter Janssen
                              ICANN 44 ccNSO Tech Day – 25/06/2012
4   RELEASE 1.0


    Packages

     CENTOS/DEBIAN/UBUNTU (32 & 64 BIT)

     FREEBSD (64 BIT)

     MAC OS X (64 BIT)


    Source code

     BSD 3-CLAUSE LICENSE

     DOWNLOAD FROM HTTP://YADIFA.EU/DOWNLOAD




                                          EURid vzw - Peter Janssen
                               ICANN 44 ccNSO Tech Day – 25/06/2012
5   (NEAR) FUTURE WORK


    Functionality

     DSA/SHA1, DSA-NSEC3-SHA1, RSASHA256, RSASHA512

     KEY ROLL OVER MECHANISM

     DYNAMIC PROVISIONING/CONFIGURATION


    Conformance / Performance / General

     WORKER THREADS (PERFORMANCE)

     STABILITY/BUGFIXES (CONFORMANCE)

     DOCUMENTATION

     PLATFORM SUPPORT (SOLARIS, OPENBSD)

                                          EURid vzw - Peter Janssen
                               ICANN 44 ccNSO Tech Day – 25/06/2012
6   PERFORMANCE BENCHMARK
         Ubuntu 12.04 using kernel 2.6.32 (1 Worker Thread)




                                         EURid vzw - Peter Janssen
                              ICANN 44 ccNSO Tech Day – 25/06/2012
7   PERFORMANCE BENCHMARK
         Ubuntu 12.04 using kernel 2.6.32 (Optimal Worker Threads)




                                         EURid vzw - Peter Janssen
                              ICANN 44 ccNSO Tech Day – 25/06/2012
8


    WEBSITE

     HTTP://YADIFA.EU



    EMAIL

     INFO@YADIFA.EU



    MAILINGLISTS

     YADIFA-ANNOUNCE

     YADIFA-USERS




                                   EURid vzw - Peter Janssen
                        ICANN 44 ccNSO Tech Day – 25/06/2012
1 of 8

Recommended

Darwin OSDarwin OS
Darwin OSpatel nidhi
1.4K views14 slides
Introduction To UnixIntroduction To Unix
Introduction To UnixCTIN
946 views49 slides
Diy containersDiy containers
Diy containersGeorgi Sabev
219 views30 slides
SAN ConceptsSAN Concepts
SAN ConceptsRamkaliyaperumal
465 views10 slides
NAS ConceptsNAS Concepts
NAS ConceptsRamkaliyaperumal
802 views13 slides

More Related Content

Similar to ICANN 44 - Tech day: YADIFA(20)

Recently uploaded(20)

ICANN 44 - Tech day: YADIFA

  • 1. YADIFA A true name server alternative ICANN 44 Prague – ccNSO TechDay – 25/06/2012 Peter Janssen EURid vzw/asbl
  • 2. 2 GOALS USE CASE 1 : ALTERNATIVE FOR BIND AND NSD ON PUBLIC TLD SLAVES – Clean implementation – High query rate and portable – RFC compliant  Authoritative  DNSSEC support  AXFR/IXFR (master and slave) USE CASE 2 : DYNAMIC UPDATED HIDDEN MASTER + DNSSEC – Dynamic updates (including continuous DNSSEC signing) – “Generic, extensible storage backend” USE CASE 3 : ZONE MANAGEMENT – Dynamic zone provisioning USE CASE 4 : RECURSIVE NAME SERVER – Recursion – Validation EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 3. 3 RELEASE 1.0 AUTHORITATIVE ZONE FILES – Include, *, / – SOA, A, AAAA, NS, CNAME, PTR, DNAME, HINFO, MX, TXT, DNSKEY, DS, RRSIG, NSEC, NSEC3, NSECPARAM, NAPTR, SRV, SSHFP ZONE TRANSFERS, MASTER, SLAVE, NOTIFY TSIG, ACLS NSUPDATE DNSSEC – RSASHA1 (5,7) – Online resigning EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 4. 4 RELEASE 1.0 Packages CENTOS/DEBIAN/UBUNTU (32 & 64 BIT) FREEBSD (64 BIT) MAC OS X (64 BIT) Source code BSD 3-CLAUSE LICENSE DOWNLOAD FROM HTTP://YADIFA.EU/DOWNLOAD EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 5. 5 (NEAR) FUTURE WORK Functionality DSA/SHA1, DSA-NSEC3-SHA1, RSASHA256, RSASHA512 KEY ROLL OVER MECHANISM DYNAMIC PROVISIONING/CONFIGURATION Conformance / Performance / General WORKER THREADS (PERFORMANCE) STABILITY/BUGFIXES (CONFORMANCE) DOCUMENTATION PLATFORM SUPPORT (SOLARIS, OPENBSD) EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 6. 6 PERFORMANCE BENCHMARK Ubuntu 12.04 using kernel 2.6.32 (1 Worker Thread) EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 7. 7 PERFORMANCE BENCHMARK Ubuntu 12.04 using kernel 2.6.32 (Optimal Worker Threads) EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 8. 8 WEBSITE HTTP://YADIFA.EU EMAIL INFO@YADIFA.EU MAILINGLISTS YADIFA-ANNOUNCE YADIFA-USERS EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012