SlideShare a Scribd company logo
1 of 8
YADIFA
A true name server alternative


ICANN 44 Prague – ccNSO TechDay –
25/06/2012

Peter Janssen
EURid vzw/asbl
2   GOALS


    USE CASE 1 : ALTERNATIVE FOR BIND AND NSD ON PUBLIC TLD
    SLAVES
    – Clean implementation
    – High query rate and portable
    – RFC compliant
          Authoritative
          DNSSEC support
          AXFR/IXFR (master and slave)

    USE CASE 2 : DYNAMIC UPDATED HIDDEN MASTER + DNSSEC
    – Dynamic updates (including continuous DNSSEC signing)
    – “Generic, extensible storage backend”

    USE CASE 3 : ZONE MANAGEMENT
    – Dynamic zone provisioning

    USE CASE 4 : RECURSIVE NAME SERVER
    – Recursion
    – Validation
                                         EURid vzw - Peter Janssen
                              ICANN 44 ccNSO Tech Day – 25/06/2012
3   RELEASE 1.0


    AUTHORITATIVE

    ZONE FILES
    – Include, *, /
    – SOA, A, AAAA, NS, CNAME, PTR, DNAME, HINFO, MX, TXT,
       DNSKEY, DS, RRSIG, NSEC, NSEC3, NSECPARAM, NAPTR, SRV,
       SSHFP

    ZONE TRANSFERS, MASTER, SLAVE, NOTIFY

    TSIG, ACLS

    NSUPDATE

    DNSSEC
    – RSASHA1 (5,7)
    – Online resigning




                                         EURid vzw - Peter Janssen
                              ICANN 44 ccNSO Tech Day – 25/06/2012
4   RELEASE 1.0


    Packages

     CENTOS/DEBIAN/UBUNTU (32 & 64 BIT)

     FREEBSD (64 BIT)

     MAC OS X (64 BIT)


    Source code

     BSD 3-CLAUSE LICENSE

     DOWNLOAD FROM HTTP://YADIFA.EU/DOWNLOAD




                                          EURid vzw - Peter Janssen
                               ICANN 44 ccNSO Tech Day – 25/06/2012
5   (NEAR) FUTURE WORK


    Functionality

     DSA/SHA1, DSA-NSEC3-SHA1, RSASHA256, RSASHA512

     KEY ROLL OVER MECHANISM

     DYNAMIC PROVISIONING/CONFIGURATION


    Conformance / Performance / General

     WORKER THREADS (PERFORMANCE)

     STABILITY/BUGFIXES (CONFORMANCE)

     DOCUMENTATION

     PLATFORM SUPPORT (SOLARIS, OPENBSD)

                                          EURid vzw - Peter Janssen
                               ICANN 44 ccNSO Tech Day – 25/06/2012
6   PERFORMANCE BENCHMARK
         Ubuntu 12.04 using kernel 2.6.32 (1 Worker Thread)




                                         EURid vzw - Peter Janssen
                              ICANN 44 ccNSO Tech Day – 25/06/2012
7   PERFORMANCE BENCHMARK
         Ubuntu 12.04 using kernel 2.6.32 (Optimal Worker Threads)




                                         EURid vzw - Peter Janssen
                              ICANN 44 ccNSO Tech Day – 25/06/2012
8


    WEBSITE

     HTTP://YADIFA.EU



    EMAIL

     INFO@YADIFA.EU



    MAILINGLISTS

     YADIFA-ANNOUNCE

     YADIFA-USERS




                                   EURid vzw - Peter Janssen
                        ICANN 44 ccNSO Tech Day – 25/06/2012

More Related Content

Similar to ICANN 44 - Tech day: YADIFA

CHEP2012_Upgrade_CMS_Event_Builder_AP_21052011
CHEP2012_Upgrade_CMS_Event_Builder_AP_21052011CHEP2012_Upgrade_CMS_Event_Builder_AP_21052011
CHEP2012_Upgrade_CMS_Event_Builder_AP_21052011
Andrea PETRUCCI
 
17-Pete_Vickers-IPv6-in-the-Mobile-Net
17-Pete_Vickers-IPv6-in-the-Mobile-Net17-Pete_Vickers-IPv6-in-the-Mobile-Net
17-Pete_Vickers-IPv6-in-the-Mobile-Net
IPv6no
 
Pacemaker+DRBD
Pacemaker+DRBDPacemaker+DRBD
Pacemaker+DRBD
Dan Frincu
 

Similar to ICANN 44 - Tech day: YADIFA (20)

PVOps Update
PVOps Update PVOps Update
PVOps Update
 
Understanding and Deploying DNSSEC, by Champika Wijayatunga [APRICOT 2015]
Understanding and Deploying DNSSEC, by Champika Wijayatunga [APRICOT 2015]Understanding and Deploying DNSSEC, by Champika Wijayatunga [APRICOT 2015]
Understanding and Deploying DNSSEC, by Champika Wijayatunga [APRICOT 2015]
 
CHEP2012_Upgrade_CMS_Event_Builder_AP_21052011
CHEP2012_Upgrade_CMS_Event_Builder_AP_21052011CHEP2012_Upgrade_CMS_Event_Builder_AP_21052011
CHEP2012_Upgrade_CMS_Event_Builder_AP_21052011
 
Drupal Deployment on Solaris - DrupalCamp Bay Area 2007 - Mattoon
Drupal Deployment on Solaris - DrupalCamp Bay Area 2007 - MattoonDrupal Deployment on Solaris - DrupalCamp Bay Area 2007 - Mattoon
Drupal Deployment on Solaris - DrupalCamp Bay Area 2007 - Mattoon
 
A survey of DNSSEC Deployment in the US R&E Community
A survey of DNSSEC Deployment in the US R&E CommunityA survey of DNSSEC Deployment in the US R&E Community
A survey of DNSSEC Deployment in the US R&E Community
 
Summit 16: Open-O Mini-Summit - Architecture & Technology
Summit 16: Open-O Mini-Summit - Architecture & TechnologySummit 16: Open-O Mini-Summit - Architecture & Technology
Summit 16: Open-O Mini-Summit - Architecture & Technology
 
17-Pete_Vickers-IPv6-in-the-Mobile-Net
17-Pete_Vickers-IPv6-in-the-Mobile-Net17-Pete_Vickers-IPv6-in-the-Mobile-Net
17-Pete_Vickers-IPv6-in-the-Mobile-Net
 
IPv6 i det mobile nettet: Pete Vickers, Network Engineer, Network Norway
IPv6 i det mobile nettet: Pete Vickers, Network Engineer, Network NorwayIPv6 i det mobile nettet: Pete Vickers, Network Engineer, Network Norway
IPv6 i det mobile nettet: Pete Vickers, Network Engineer, Network Norway
 
Fast DDS Features & Tools
Fast DDS Features & ToolsFast DDS Features & Tools
Fast DDS Features & Tools
 
State of the Union: Open Source Network Function Virtualization
State of the Union: Open Source Network Function VirtualizationState of the Union: Open Source Network Function Virtualization
State of the Union: Open Source Network Function Virtualization
 
Pacemaker+DRBD
Pacemaker+DRBDPacemaker+DRBD
Pacemaker+DRBD
 
2013-05-22 RedHatGov Partner Event
2013-05-22 RedHatGov Partner Event2013-05-22 RedHatGov Partner Event
2013-05-22 RedHatGov Partner Event
 
Drupalcon2007 Sun
Drupalcon2007 SunDrupalcon2007 Sun
Drupalcon2007 Sun
 
RIPE 71 and IETF 94 reports webinar
RIPE 71 and IETF 94 reports webinarRIPE 71 and IETF 94 reports webinar
RIPE 71 and IETF 94 reports webinar
 
DNSSEC implementation in Russia
DNSSEC implementation in Russia DNSSEC implementation in Russia
DNSSEC implementation in Russia
 
Auteria Wally Winzer Jr.'s Information Technology Resume
Auteria Wally Winzer Jr.'s Information Technology ResumeAuteria Wally Winzer Jr.'s Information Technology Resume
Auteria Wally Winzer Jr.'s Information Technology Resume
 
Auteria Wally Winzer Jr.'s Information Technology Resume
Auteria Wally Winzer Jr.'s Information Technology ResumeAuteria Wally Winzer Jr.'s Information Technology Resume
Auteria Wally Winzer Jr.'s Information Technology Resume
 
2008-11-13 CAVMEN RHEL for System z Deep Dive
2008-11-13 CAVMEN RHEL for System z Deep Dive2008-11-13 CAVMEN RHEL for System z Deep Dive
2008-11-13 CAVMEN RHEL for System z Deep Dive
 
Enabling Active Flow Manipulation In Silicon-based Network Forwarding Engines
Enabling Active Flow Manipulation In Silicon-based Network Forwarding Engines Enabling Active Flow Manipulation In Silicon-based Network Forwarding Engines
Enabling Active Flow Manipulation In Silicon-based Network Forwarding Engines
 
Data Plane Evolution: Towards Openness and Flexibility
Data Plane Evolution: Towards Openness and FlexibilityData Plane Evolution: Towards Openness and Flexibility
Data Plane Evolution: Towards Openness and Flexibility
 

Recently uploaded

Histor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slideHistor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slide
vu2urc
 

Recently uploaded (20)

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
Histor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slideHistor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slide
 
Advantages of Hiring UIUX Design Service Providers for Your Business
Advantages of Hiring UIUX Design Service Providers for Your BusinessAdvantages of Hiring UIUX Design Service Providers for Your Business
Advantages of Hiring UIUX Design Service Providers for Your Business
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CV
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation Strategies
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 

ICANN 44 - Tech day: YADIFA

  • 1. YADIFA A true name server alternative ICANN 44 Prague – ccNSO TechDay – 25/06/2012 Peter Janssen EURid vzw/asbl
  • 2. 2 GOALS USE CASE 1 : ALTERNATIVE FOR BIND AND NSD ON PUBLIC TLD SLAVES – Clean implementation – High query rate and portable – RFC compliant  Authoritative  DNSSEC support  AXFR/IXFR (master and slave) USE CASE 2 : DYNAMIC UPDATED HIDDEN MASTER + DNSSEC – Dynamic updates (including continuous DNSSEC signing) – “Generic, extensible storage backend” USE CASE 3 : ZONE MANAGEMENT – Dynamic zone provisioning USE CASE 4 : RECURSIVE NAME SERVER – Recursion – Validation EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 3. 3 RELEASE 1.0 AUTHORITATIVE ZONE FILES – Include, *, / – SOA, A, AAAA, NS, CNAME, PTR, DNAME, HINFO, MX, TXT, DNSKEY, DS, RRSIG, NSEC, NSEC3, NSECPARAM, NAPTR, SRV, SSHFP ZONE TRANSFERS, MASTER, SLAVE, NOTIFY TSIG, ACLS NSUPDATE DNSSEC – RSASHA1 (5,7) – Online resigning EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 4. 4 RELEASE 1.0 Packages CENTOS/DEBIAN/UBUNTU (32 & 64 BIT) FREEBSD (64 BIT) MAC OS X (64 BIT) Source code BSD 3-CLAUSE LICENSE DOWNLOAD FROM HTTP://YADIFA.EU/DOWNLOAD EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 5. 5 (NEAR) FUTURE WORK Functionality DSA/SHA1, DSA-NSEC3-SHA1, RSASHA256, RSASHA512 KEY ROLL OVER MECHANISM DYNAMIC PROVISIONING/CONFIGURATION Conformance / Performance / General WORKER THREADS (PERFORMANCE) STABILITY/BUGFIXES (CONFORMANCE) DOCUMENTATION PLATFORM SUPPORT (SOLARIS, OPENBSD) EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 6. 6 PERFORMANCE BENCHMARK Ubuntu 12.04 using kernel 2.6.32 (1 Worker Thread) EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 7. 7 PERFORMANCE BENCHMARK Ubuntu 12.04 using kernel 2.6.32 (Optimal Worker Threads) EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012
  • 8. 8 WEBSITE HTTP://YADIFA.EU EMAIL INFO@YADIFA.EU MAILINGLISTS YADIFA-ANNOUNCE YADIFA-USERS EURid vzw - Peter Janssen ICANN 44 ccNSO Tech Day – 25/06/2012