Designate - DNSaaS for OpenStack - FOSDEM 2014
•
1 like•1,621 views
Designate is a newly incubated project in OpenStack, for providing an easy to use, integrated DNS service to users of your cloud. We integrate with Nova and Neutron, and allow control of Reverse DNS for floating IPs. Using sink features, we can pull events from the neutron / nova event queue and auto generate DNS entries. We will show all of this functionality, and talk about the upcoming features, while taking feedback from the community about what else they would like to see provided by Designate. We will also update the community on the developments of the Mid-Cycle summit (happening the week previously) Graham Hayes is a member of designate-core, and one of the main architects of our current feature push called server pools, which will allow per user DNS servers, and the ability to run DNS servers at massive scale.
Report
Share
Report
Share
Download to read offline
Recommended
Designate - Operators Deep Dive
A talk I gave with Ron Rickard from eBay Inc. at the May 2014 OpenStack Summit in Atlanta.
Video is here: https://www.youtube.com/watch?v=SdTf8OvHC60
Get your instance by name integration of nova, neutron and designate
The document discusses integrating Neutron, Nova, and Designate to provide DNS services for instances. It summarizes the motivation, outlines how DNS was handled in Neutron prior to integration, provides overviews of Designate and how the integration was accomplished. Key points include:
- DNS errors in instances motivated integration for a consistent user experience
- Neutron previously used its own internal DNS which caused issues
- Designate is an OpenStack DNS service that manages DNS servers without being a DNS server itself
- Integration was done in two stages - getting Nova and Neutron on instance names, then integrating Neutron and Designate
- Collaboration involved dividing work, getting buy-in from larger projects like Nova,
Designate: An Overview
This talk was given in Vancouver B.C. in May 2015 at the OpenStack Summit
If you are an operator or user of DNS come learn about Designate, the DNSaaS provider for OpenStack. We will cover:
Designate Architecture Overview
Designate Use Cases
Exciting features that landed in the Kilo release: Server Pools, MiniDNS, Secondary Zones, and the Agent
Integration with Nova and Neutron
How Designate works with your chosen DNS server
Customization points - API Extensions, Storage Plugins, Backend Plugins
Namespaces for Local Networks
Google has changed Chrome's code to enforce HTTPS encryption on all ".dev" domains by default. This causes problems for developers who use ".dev" locally without HTTPS. Alternatives for local domain names include subdomains of owned domains, reserved domains like ".test", or protocols besides DNS like LLMNR and mDNS. Unbound and BIND can configure local zones to resolve names without internet access.
Part 3 - Local Name Resolution in Linux, FreeBSD and macOS/iOS
The focus of this webinar will be to take a deeper look into this local name-resolution system and the implementations for other Unix systems like Linux and FreeBSD. Linux’s new über-Daemon “systemd” supports both mDNS and the Windows LLMNR (Link-Local-Multicast-Name-Resolution). We will also show how well a Systemd-Linux behaves in heterogenous networks running both Windows and macOS.
Windows Server 2016 Webinar
A webinar that looks into the new features that the Windows Server 2016 will offer in the DNS, DHCP and IPv6 space.
Showcase of some of the new stuff using the latest tech preview and the aim is to give administrators a quick overview of the Windows Server 2016 and enough information to decide if early adoption is worthwhile.
DNSSEC - WHAT IS IT ? INSTALL AND CONFIGURE IN CHROOT JAIL
Install and Understand DNSSEC in Linux Server running BIND 9 with CHROOT JAIL system and Service.
By Utah Networxs
Follow - @fabioandpires
Follow - @utah_networxs
A study of our DNS full-resolvers
This document summarizes a study of an outage of a company's DNS full-resolvers. During the outage, both of the company's caching nameservers failed for 12 minutes. During this period, clients were unable to resolve hostnames and query rates increased as clients retried requests. When the servers were restored, they received much higher query rates for several seconds as clients flushed their caches. The study found that having multiple DNS resolvers provides redundancy and avoids a complete outage. It also showed that clients unintentionally synchronize, likely due to scheduled tasks on devices, which can lead to spikes in query rates.
Recommended
Designate - Operators Deep Dive
A talk I gave with Ron Rickard from eBay Inc. at the May 2014 OpenStack Summit in Atlanta.
Video is here: https://www.youtube.com/watch?v=SdTf8OvHC60
Get your instance by name integration of nova, neutron and designate
The document discusses integrating Neutron, Nova, and Designate to provide DNS services for instances. It summarizes the motivation, outlines how DNS was handled in Neutron prior to integration, provides overviews of Designate and how the integration was accomplished. Key points include:
- DNS errors in instances motivated integration for a consistent user experience
- Neutron previously used its own internal DNS which caused issues
- Designate is an OpenStack DNS service that manages DNS servers without being a DNS server itself
- Integration was done in two stages - getting Nova and Neutron on instance names, then integrating Neutron and Designate
- Collaboration involved dividing work, getting buy-in from larger projects like Nova,
Designate: An Overview
This talk was given in Vancouver B.C. in May 2015 at the OpenStack Summit
If you are an operator or user of DNS come learn about Designate, the DNSaaS provider for OpenStack. We will cover:
Designate Architecture Overview
Designate Use Cases
Exciting features that landed in the Kilo release: Server Pools, MiniDNS, Secondary Zones, and the Agent
Integration with Nova and Neutron
How Designate works with your chosen DNS server
Customization points - API Extensions, Storage Plugins, Backend Plugins
Namespaces for Local Networks
Google has changed Chrome's code to enforce HTTPS encryption on all ".dev" domains by default. This causes problems for developers who use ".dev" locally without HTTPS. Alternatives for local domain names include subdomains of owned domains, reserved domains like ".test", or protocols besides DNS like LLMNR and mDNS. Unbound and BIND can configure local zones to resolve names without internet access.
Part 3 - Local Name Resolution in Linux, FreeBSD and macOS/iOS
The focus of this webinar will be to take a deeper look into this local name-resolution system and the implementations for other Unix systems like Linux and FreeBSD. Linux’s new über-Daemon “systemd” supports both mDNS and the Windows LLMNR (Link-Local-Multicast-Name-Resolution). We will also show how well a Systemd-Linux behaves in heterogenous networks running both Windows and macOS.
Windows Server 2016 Webinar
A webinar that looks into the new features that the Windows Server 2016 will offer in the DNS, DHCP and IPv6 space.
Showcase of some of the new stuff using the latest tech preview and the aim is to give administrators a quick overview of the Windows Server 2016 and enough information to decide if early adoption is worthwhile.
DNSSEC - WHAT IS IT ? INSTALL AND CONFIGURE IN CHROOT JAIL
Install and Understand DNSSEC in Linux Server running BIND 9 with CHROOT JAIL system and Service.
By Utah Networxs
Follow - @fabioandpires
Follow - @utah_networxs
A study of our DNS full-resolvers
This document summarizes a study of an outage of a company's DNS full-resolvers. During the outage, both of the company's caching nameservers failed for 12 minutes. During this period, clients were unable to resolve hostnames and query rates increased as clients retried requests. When the servers were restored, they received much higher query rates for several seconds as clients flushed their caches. The study found that having multiple DNS resolvers provides redundancy and avoids a complete outage. It also showed that clients unintentionally synchronize, likely due to scheduled tasks on devices, which can lead to spikes in query rates.
Kea DHCP – the new open source DHCP server from ISC
This webinar will highlight the differences between the old ISC DHCP and new Kea DHCP (database support, dynamic reconfiguration, performance wins, scripting hooks) and will showcase the Men & Mice Suite as a graphical front-end to both ISC DHCP and Kea to ease the migration.
The DNSSEC KSK of the root rolls
The DNSSEC key signing key (or KSK) of the DNS root zone will be changed in the summer of 2017. During the time between July and October, all DNSSEC validating resolver need to get the new key material.
In this webinar we explain the KSK roll, how DNS resolver will load the new KSK with the RFC 5011 protocol and how a DNS administrator can verify that the new KSK is present in the resolvers configuration.
Understanding and Deploying DNSSEC, by Champika Wijayatunga [APRICOT 2015]
A presentation given at the Understanding & Deploying DNSSEC sessions at APRICOT 2015 on Thursday, 5th March 2015.
Windows 2012 and DNSSEC
DNS threats, what is DNSSEC, DNSSEC in Windows 2012 Server, Signing Zones, DNSSEC validation with Windows 2012
Background Tasks in Node - Evan Tahler, TaskRabbit
The part of the talk discusses various strategies for handling background tasks in Node.js, including:
1. Foreground tasks, which process tasks inline but can slow down response times.
2. Parallel tasks, which ignore callbacks to try and speed up response times but lose error handling.
3. Local messages using clustering, which uses inter-process communication to pass tasks to worker processes and provides error handling but is limited to one server.
4. Remote messages using Redis pub/sub, which allows distributing tasks across multiple servers but limits server types to one.
5. Remote queue using Node-Resque, which treats tasks as jobs in a Redis queue for scheduling across worker processes, providing
DNSSEC Tutorial; USENIX LISA 2013
The document is a slide deck for a DNSSEC tutorial presented at the USENIX LISA conference in 2013. It provides an overview of DNSSEC, including how it uses public key cryptography and digital signatures to authenticate DNS data and establish a chain of trust. It also covers topics like configuring DNSSEC in BIND, using the dig tool to perform queries, and prospects for new applications of DNSSEC. The presentation was given by Shumon Huque, an IT director at the University of Pennsylvania.
Yeti DNS - Experimenting at the root
Yeti-DNS is an international research project with the purpose of testing new technologies and procedures in running the Internet root zone. The project runs tests on DNSSEC key rollovers in the root, as well as experimenting with new ways to manage the DNSSEC keys (multiple zone signing keys).
An interview with Shane Kerr, a coordinator for the Yeti-DNS project, forms part of this webinar. The interview sheds light on the technical and political aspects of the project and introduces the latest results from experiments.
The webinar also includes a tutorial on how to use the Yeti-DNS root name servers to configure a BIND 9 DNS resolver in order to take part in the project.
Kafka on ZFS: Better Living Through Filesystems
(Hugh O'Brien, Jet.com) Kafka Summit SF 2018
You’re doing disk IO wrong, let ZFS show you the way. ZFS on Linux is now stable. Say goodbye to JBOD, to directories in your reassignment plans, to unevenly used disks. Instead, have 8K Cloud IOPS for $25, SSD speed reads on spinning disks, in-kernel LZ4 compression and the smartest page cache on the planet. (Fear compactions no more!)
Learn how Jet’s Kafka clusters squeeze every drop of disk performance out of Azure, all completely transparent to Kafka.
-Striping cheap disks to maximize instance IOPS
-Block compression to reduce disk usage by ~80% (JSON data)
-Instance SSD as the secondary read cache (storing compressed data), eliminating >99% of disk reads and safe across host redeployments
-Upcoming features: Compressed blocks in memory, potentially quadrupling your page cache (RAM) for free
We’ll cover:
-Basic Principles
-Adapting ZFS for cloud instances (gotchas)
-Performance tuning for Kafka
-Benchmarks
Building the Enterprise infrastructure with PostgreSQL as the basis for stori...
In my talk, I will tell how we built a geographically distributed system of personal data storage based on Open Source software and PostgreSQL. The concept of the inCountry business is to provide customers with a ready-to-use infrastructure for personal data storage. Our business customers are ensured that their customer’s personal data is securely stored within their country’s borders. We wrote an API and SDK and built a variety of services. Our system complies with generally accepted security standards (SOC Type 1, Type 2, PCI DSS, etc.). We built our infrastructure with Consul, Nomad, and Vault, used PostgreSQL, ElasticSearch as a storage system, Nginx, Jenkins, Artifactory, other tools to automate management and deployment. We have assembled our development and management teams - DevOps, Security, Monitoring, and DBA. We use both cloud providers and bare-metal servers located in different regions of the world. Development of the system architecture and ensuring the stability of the infrastructure, consistent and secure operation of all its components is the main task facing our teams.
Jumbo Mumbo in OpenStack
Jumbo frames allow for larger packet sizes than the standard Ethernet maximum transmission unit (MTU) of 1500 bytes. In OpenStack, enabling jumbo frames involves configuring the global, physical, and logical network MTUs. A use case demonstrates attaching a volume to an instance with jumbo frame support, which reduces traffic and potential packet drops compared to standard MTU sizes. Path MTU discovery allows dynamically determining the optimal MTU for a network path to avoid fragmentation.
The CAA-Record for increased encryption security
The CAA Record (Certification Authority Authorization) is used to signal which certification authority (CA) can issue an x509 certificate for a given domain. CAA creates a DNS mechanism that enables domain name owners to whitelist CAs that are allowed to issue certificates for their hostnames.
Starting from September 2017, certificate issuing CA must support the CAA record.
This explains the CAA record, how it works, how to enter CAA into a zone and how certification authorities are about to use the record.
DNS/DNSSEC by Nurul Islam
This document provides an overview and introduction to DNS and DNSSEC. It begins with introducing the presenter, Nurul Islam Roman, and his background and areas of expertise. The overview section lists the topics to be covered, including DNS overview, forward and reverse DNS, DNS security overview, TSIG, and DNSSEC. The document then delves into explanations of DNS overview, how it works, its features and components. It also covers IP addresses vs domain names, the DNS tree hierarchy, domains, root servers, resolvers, authoritative and recursive nameservers. Finally, it discusses resource records, common RR types, reverse DNS, delegation, glue records and responsibilities around APNIC and ISPs for reverse delegations.
Hands-on DNSSEC Deployment
1) The document discusses DNS basics including its hierarchical database structure with root and top level domains (TLDs) at the top, and its main components like authoritative servers, recursive resolvers, and resource records.
2) It explains key DNS concepts like domains, zones, and delegation between zones. Common resource record types and a sample zone file are also described.
3) The document covers potential DNS issues like cache poisoning and vulnerabilities if data is not validated, which DNS Security Extensions (DNSSEC) aims to address through cryptographic signing of resource records.
Building Linux IPv6 DNS Server (Complete Presentation)
This document summarizes a project that implemented IPv6 and enabled cross-platform communication between IPv6 and IPv4 devices. The project involved compiling a new kernel with IPv6 support, setting up a lookup service to register IPv6 clients, configuring DNS to resolve IPv6 and IPv4 names, and testing cross-platform communication between an IPv6 server and IPv4 and IPv6 clients. The conclusion is that the project provides a scalable and secure IPv6 solution to resolve long-term addressing issues and allows communication across different platforms.
Re-Engineering the DNS – One Resolver at a Time
This document discusses strategies for improving the resilience of the Domain Name System (DNS) against distributed denial-of-service (DDoS) attacks. It outlines how caching of DNSSEC-signed responses for non-existent domain names can help prevent unnecessary queries from reaching the DNS root servers. The document details an initiative by APNIC to sponsor the inclusion of this NSEC caching in the upcoming BIND 9.12 release, which would help distribute DNS query load more efficiently and mitigate DDoS attacks targeting the root servers.
OpenZFS data-driven performance
OpenZFS data-driven performance presented at the first OpenZFS developer conference 11/18/2013. Lot's of DTrace examples and output.
DNSSEC Tutorial, by Champika Wijayatunga [APNIC 38]
This document provides an overview of DNSSEC (Domain Name System Security Extensions). It discusses how DNSSEC introduces digital signatures to cryptographically protect DNS data and prevent man-in-the-middle attacks. It also describes some common DNS record types used in DNSSEC like DNSKEY, RRSIG, and DS. The document notes that while DNSSEC deployment has increased in top-level domains and root servers, adoption remains low at the second-level domain level, and more work is still needed for full deployment.
Out of the box replication in postgres 9.4(pg confus)
This document contains notes from a presentation on PostgreSQL replication. It discusses write-ahead logs (WAL), replication history in PostgreSQL from versions 7.0 to 9.4, how to set up basic replication, tools for backups and monitoring replication, and demonstrates setting up replication without third party tools using pg_basebackup, replication slots, and pg_receivexlog. It also includes contact information for the presenter and an invitation to join the PostgreSQL Slack channel.
Hadoop Meetup Jan 2019 - Hadoop On Azure
Íñigo Goiri of Microsoft presents regarding the state of running Hadoop on Azure, Microsoft's cloud computing platform. He discusses some of the advanced features of Azure for cheaply running offline workloads, and what modifications have been made to Hadoop to take advantage of this functionality.
This is taken from the Apache Hadoop Contributors Meetup on January 30, hosted by LinkedIn in Mountain View.
Dnssec
This document provides an introduction to a DNSSEC training course hosted by RIPE NCC. It explains that DNSSEC protects against DNS spoofing and data corruption by using digital signatures to authenticate DNS data and establish its integrity. The course aims to raise awareness of DNSSEC and provide guidance on deployment. It outlines DNSSEC mechanisms like using new resource records and signing zones to authenticate communication between servers and establish authenticity of DNS data.
6425 b 10
The document provides an overview of configuring Domain Name System (DNS) including:
- Reviewing DNS concepts such as zones, resource records, and name resolution
- Installing and configuring DNS in an Active Directory domain, including creating zones, records, and redundant DNS servers
- The relationship between Active Directory, DNS, and Windows including integrating DNS with the domain namespace, split-brain DNS, delegations, and dynamic updates
SharePoint on Microsoft Azure
This document discusses hosting SharePoint on Azure. It provides an example reference architecture of a hybrid on-premises and Azure environment for a SharePoint farm. It shows the farm designed across multiple cloud services, with web and application servers in one availability set, database servers in another, and Active Directory in a third. It provides sizing and configuration recommendations for roles and virtual machines in each tier.
More Related Content
What's hot
Kea DHCP – the new open source DHCP server from ISC
This webinar will highlight the differences between the old ISC DHCP and new Kea DHCP (database support, dynamic reconfiguration, performance wins, scripting hooks) and will showcase the Men & Mice Suite as a graphical front-end to both ISC DHCP and Kea to ease the migration.
The DNSSEC KSK of the root rolls
The DNSSEC key signing key (or KSK) of the DNS root zone will be changed in the summer of 2017. During the time between July and October, all DNSSEC validating resolver need to get the new key material.
In this webinar we explain the KSK roll, how DNS resolver will load the new KSK with the RFC 5011 protocol and how a DNS administrator can verify that the new KSK is present in the resolvers configuration.
Understanding and Deploying DNSSEC, by Champika Wijayatunga [APRICOT 2015]
A presentation given at the Understanding & Deploying DNSSEC sessions at APRICOT 2015 on Thursday, 5th March 2015.
Windows 2012 and DNSSEC
DNS threats, what is DNSSEC, DNSSEC in Windows 2012 Server, Signing Zones, DNSSEC validation with Windows 2012
Background Tasks in Node - Evan Tahler, TaskRabbit
The part of the talk discusses various strategies for handling background tasks in Node.js, including:
1. Foreground tasks, which process tasks inline but can slow down response times.
2. Parallel tasks, which ignore callbacks to try and speed up response times but lose error handling.
3. Local messages using clustering, which uses inter-process communication to pass tasks to worker processes and provides error handling but is limited to one server.
4. Remote messages using Redis pub/sub, which allows distributing tasks across multiple servers but limits server types to one.
5. Remote queue using Node-Resque, which treats tasks as jobs in a Redis queue for scheduling across worker processes, providing
DNSSEC Tutorial; USENIX LISA 2013
The document is a slide deck for a DNSSEC tutorial presented at the USENIX LISA conference in 2013. It provides an overview of DNSSEC, including how it uses public key cryptography and digital signatures to authenticate DNS data and establish a chain of trust. It also covers topics like configuring DNSSEC in BIND, using the dig tool to perform queries, and prospects for new applications of DNSSEC. The presentation was given by Shumon Huque, an IT director at the University of Pennsylvania.
Yeti DNS - Experimenting at the root
Yeti-DNS is an international research project with the purpose of testing new technologies and procedures in running the Internet root zone. The project runs tests on DNSSEC key rollovers in the root, as well as experimenting with new ways to manage the DNSSEC keys (multiple zone signing keys).
An interview with Shane Kerr, a coordinator for the Yeti-DNS project, forms part of this webinar. The interview sheds light on the technical and political aspects of the project and introduces the latest results from experiments.
The webinar also includes a tutorial on how to use the Yeti-DNS root name servers to configure a BIND 9 DNS resolver in order to take part in the project.
Kafka on ZFS: Better Living Through Filesystems
(Hugh O'Brien, Jet.com) Kafka Summit SF 2018
You’re doing disk IO wrong, let ZFS show you the way. ZFS on Linux is now stable. Say goodbye to JBOD, to directories in your reassignment plans, to unevenly used disks. Instead, have 8K Cloud IOPS for $25, SSD speed reads on spinning disks, in-kernel LZ4 compression and the smartest page cache on the planet. (Fear compactions no more!)
Learn how Jet’s Kafka clusters squeeze every drop of disk performance out of Azure, all completely transparent to Kafka.
-Striping cheap disks to maximize instance IOPS
-Block compression to reduce disk usage by ~80% (JSON data)
-Instance SSD as the secondary read cache (storing compressed data), eliminating >99% of disk reads and safe across host redeployments
-Upcoming features: Compressed blocks in memory, potentially quadrupling your page cache (RAM) for free
We’ll cover:
-Basic Principles
-Adapting ZFS for cloud instances (gotchas)
-Performance tuning for Kafka
-Benchmarks
Building the Enterprise infrastructure with PostgreSQL as the basis for stori...
In my talk, I will tell how we built a geographically distributed system of personal data storage based on Open Source software and PostgreSQL. The concept of the inCountry business is to provide customers with a ready-to-use infrastructure for personal data storage. Our business customers are ensured that their customer’s personal data is securely stored within their country’s borders. We wrote an API and SDK and built a variety of services. Our system complies with generally accepted security standards (SOC Type 1, Type 2, PCI DSS, etc.). We built our infrastructure with Consul, Nomad, and Vault, used PostgreSQL, ElasticSearch as a storage system, Nginx, Jenkins, Artifactory, other tools to automate management and deployment. We have assembled our development and management teams - DevOps, Security, Monitoring, and DBA. We use both cloud providers and bare-metal servers located in different regions of the world. Development of the system architecture and ensuring the stability of the infrastructure, consistent and secure operation of all its components is the main task facing our teams.
Jumbo Mumbo in OpenStack
Jumbo frames allow for larger packet sizes than the standard Ethernet maximum transmission unit (MTU) of 1500 bytes. In OpenStack, enabling jumbo frames involves configuring the global, physical, and logical network MTUs. A use case demonstrates attaching a volume to an instance with jumbo frame support, which reduces traffic and potential packet drops compared to standard MTU sizes. Path MTU discovery allows dynamically determining the optimal MTU for a network path to avoid fragmentation.
The CAA-Record for increased encryption security
The CAA Record (Certification Authority Authorization) is used to signal which certification authority (CA) can issue an x509 certificate for a given domain. CAA creates a DNS mechanism that enables domain name owners to whitelist CAs that are allowed to issue certificates for their hostnames.
Starting from September 2017, certificate issuing CA must support the CAA record.
This explains the CAA record, how it works, how to enter CAA into a zone and how certification authorities are about to use the record.
DNS/DNSSEC by Nurul Islam
This document provides an overview and introduction to DNS and DNSSEC. It begins with introducing the presenter, Nurul Islam Roman, and his background and areas of expertise. The overview section lists the topics to be covered, including DNS overview, forward and reverse DNS, DNS security overview, TSIG, and DNSSEC. The document then delves into explanations of DNS overview, how it works, its features and components. It also covers IP addresses vs domain names, the DNS tree hierarchy, domains, root servers, resolvers, authoritative and recursive nameservers. Finally, it discusses resource records, common RR types, reverse DNS, delegation, glue records and responsibilities around APNIC and ISPs for reverse delegations.
Hands-on DNSSEC Deployment
1) The document discusses DNS basics including its hierarchical database structure with root and top level domains (TLDs) at the top, and its main components like authoritative servers, recursive resolvers, and resource records.
2) It explains key DNS concepts like domains, zones, and delegation between zones. Common resource record types and a sample zone file are also described.
3) The document covers potential DNS issues like cache poisoning and vulnerabilities if data is not validated, which DNS Security Extensions (DNSSEC) aims to address through cryptographic signing of resource records.
Building Linux IPv6 DNS Server (Complete Presentation)
This document summarizes a project that implemented IPv6 and enabled cross-platform communication between IPv6 and IPv4 devices. The project involved compiling a new kernel with IPv6 support, setting up a lookup service to register IPv6 clients, configuring DNS to resolve IPv6 and IPv4 names, and testing cross-platform communication between an IPv6 server and IPv4 and IPv6 clients. The conclusion is that the project provides a scalable and secure IPv6 solution to resolve long-term addressing issues and allows communication across different platforms.
Re-Engineering the DNS – One Resolver at a Time
This document discusses strategies for improving the resilience of the Domain Name System (DNS) against distributed denial-of-service (DDoS) attacks. It outlines how caching of DNSSEC-signed responses for non-existent domain names can help prevent unnecessary queries from reaching the DNS root servers. The document details an initiative by APNIC to sponsor the inclusion of this NSEC caching in the upcoming BIND 9.12 release, which would help distribute DNS query load more efficiently and mitigate DDoS attacks targeting the root servers.
OpenZFS data-driven performance
OpenZFS data-driven performance presented at the first OpenZFS developer conference 11/18/2013. Lot's of DTrace examples and output.
DNSSEC Tutorial, by Champika Wijayatunga [APNIC 38]
This document provides an overview of DNSSEC (Domain Name System Security Extensions). It discusses how DNSSEC introduces digital signatures to cryptographically protect DNS data and prevent man-in-the-middle attacks. It also describes some common DNS record types used in DNSSEC like DNSKEY, RRSIG, and DS. The document notes that while DNSSEC deployment has increased in top-level domains and root servers, adoption remains low at the second-level domain level, and more work is still needed for full deployment.
Out of the box replication in postgres 9.4(pg confus)
This document contains notes from a presentation on PostgreSQL replication. It discusses write-ahead logs (WAL), replication history in PostgreSQL from versions 7.0 to 9.4, how to set up basic replication, tools for backups and monitoring replication, and demonstrates setting up replication without third party tools using pg_basebackup, replication slots, and pg_receivexlog. It also includes contact information for the presenter and an invitation to join the PostgreSQL Slack channel.
Hadoop Meetup Jan 2019 - Hadoop On Azure
Íñigo Goiri of Microsoft presents regarding the state of running Hadoop on Azure, Microsoft's cloud computing platform. He discusses some of the advanced features of Azure for cheaply running offline workloads, and what modifications have been made to Hadoop to take advantage of this functionality.
This is taken from the Apache Hadoop Contributors Meetup on January 30, hosted by LinkedIn in Mountain View.
Dnssec
This document provides an introduction to a DNSSEC training course hosted by RIPE NCC. It explains that DNSSEC protects against DNS spoofing and data corruption by using digital signatures to authenticate DNS data and establish its integrity. The course aims to raise awareness of DNSSEC and provide guidance on deployment. It outlines DNSSEC mechanisms like using new resource records and signing zones to authenticate communication between servers and establish authenticity of DNS data.
What's hot (20)
Kea DHCP – the new open source DHCP server from ISC
Kea DHCP – the new open source DHCP server from ISC
Understanding and Deploying DNSSEC, by Champika Wijayatunga [APRICOT 2015]
Understanding and Deploying DNSSEC, by Champika Wijayatunga [APRICOT 2015]
Background Tasks in Node - Evan Tahler, TaskRabbit
Background Tasks in Node - Evan Tahler, TaskRabbit
Building the Enterprise infrastructure with PostgreSQL as the basis for stori...
Building the Enterprise infrastructure with PostgreSQL as the basis for stori...
Building Linux IPv6 DNS Server (Complete Presentation)
Building Linux IPv6 DNS Server (Complete Presentation)
DNSSEC Tutorial, by Champika Wijayatunga [APNIC 38]
DNSSEC Tutorial, by Champika Wijayatunga [APNIC 38]
Out of the box replication in postgres 9.4(pg confus)
Out of the box replication in postgres 9.4(pg confus)
Similar to Designate - DNSaaS for OpenStack - FOSDEM 2014
6425 b 10
The document provides an overview of configuring Domain Name System (DNS) including:
- Reviewing DNS concepts such as zones, resource records, and name resolution
- Installing and configuring DNS in an Active Directory domain, including creating zones, records, and redundant DNS servers
- The relationship between Active Directory, DNS, and Windows including integrating DNS with the domain namespace, split-brain DNS, delegations, and dynamic updates
SharePoint on Microsoft Azure
This document discusses hosting SharePoint on Azure. It provides an example reference architecture of a hybrid on-premises and Azure environment for a SharePoint farm. It shows the farm designed across multiple cloud services, with web and application servers in one availability set, database servers in another, and Active Directory in a third. It provides sizing and configuration recommendations for roles and virtual machines in each tier.
SQL et in-memory sur Hadoop avec Pivotal et HAWQ
Pivotal, la plateforme Big Data signé EMC, embarque des technologies pour gérer des requêtes sql en mémoire très performante et pas que ...
Présentation de Alexandre Vasseur et Jérôme Campo de Pivotal
WordPress Development Environments
This document discusses WordPress development environments. It recommends setting up separate local, staging, and live environments. The local environment is for development on one's own machine. The staging environment resembles the live site for testing purposes. The live environment is the actual public site. It provides tips for setting up servers, configuring domains and files, syncing databases, and using version control across the different environments.
With one click
This document discusses approaches for deploying Drupal websites from development to production environments. It covers considerations for initial site installation ("cold start") as well as ongoing updates. Simple setups can use basic scripts for deployment, but more complex enterprise sites require tools to manage multiple hosts, roles, environments and tasks. The document evaluates options like Webistrano, DrushDeploy, Jenkins and Aegir and discusses related tools for automation, testing and continuous integration.
Cross-DC Fault-Tolerant ViewFileSystem @ Twitter
The document describes a distributed Hadoop architecture with multiple data centers and clusters. It shows how to configure Hadoop to access HDFS files across different name nodes and clusters using tools like ViewFileSystem. Client applications can use a single consistent file system namespace and API to access data distributed across the infrastructure.
Pmw2 k3ni 1-2b
This document discusses planning for DNS infrastructure, including:
1. Creating a DNS server plan by determining capacity, location, roles, and security of DNS servers
2. Creating a DNS namespace plan by selecting an appropriate internal namespace
3. Creating a DNS zone plan by identifying zone requirements, types, and security and planning for additional DNS servers if the main server is overloaded
4. Creating a zone replication and delegation plan by selecting a replication methodology, securing replication, and planning for zone delegation to distribute load across servers
(BIZ401) Kellogg Company Runs SAP in a Hybrid Environment | AWS re:Invent 2014
Many enterprises today are moving their SAP workloads to the cloud in order to achieve business agility. In this session, learn strategies and recommended practices for architecting and implementing a phased (''hybrid'') approach for SAP workloads, while optimizing for availability and performance. In this session, Kellogg Company will walk through the business justification and how they leveraged a hybrid approach when implementing SAP Business Warehouse (BW) on SAP HANA on the AWS cloud.
Ad fundamentals
This document provides an overview of an Active Directory fundamentals training course. It covers Active Directory logical concepts like domains, trees and forests. It also covers physical concepts such as domain controllers, sites and replication. The training will demonstrate Active Directory Domain Name System (DNS) configuration, replication details and how operations masters work. It aims to provide both conceptual knowledge and practical demonstrations of Active Directory administration.
VMworld 2013: Big Data Platform Building Blocks: Serengeti, Resource Manageme...
VMworld 2013
Abhishek Kashyap, Pivotal
Kevin Leong, VMware
Learn more about VMworld and register at http://www.vmworld.com/index.jspa?src=socmed-vmworld-slideshare
Keeping Data in Sync with Syncsort
Moments after you move data into your Hadoop cluster or target database, new transactions on source systems make that data incomplete, and analyses done on that data inaccurate.
However, there are several strategies for keeping data in sync between data platforms.
View this webcast on-demand to learn about the advantages and disadvantages of various change data capture strategies, as well as:
• The latest improvements in Syncsort DMX and DMX-h
• The new DMX Change Data Capture software
• How Syncsort can help you keep your data analytics current and accurate
1. beyond mission critical virtualizing big data and hadoop
Virtualizing big data platforms like Hadoop provides organizations with agility, elasticity, and operational simplicity. It allows clusters to be quickly provisioned on demand, workloads to be independently scaled, and mixed workloads to be consolidated on shared infrastructure. This reduces costs while improving resource utilization for emerging big data use cases across many industries.
Disaster Recovery and Cloud Migration for your Apache Hive Warehouse
This document discusses disaster recovery and cloud migration strategies for Apache Hive data warehouses. It covers replication modes like master-slave and master-master. It also discusses fail over, fail back, event-based replication using REPL commands, change management, bootstrapping, and demonstrations. Challenges of cloud migration like data movement and integrity are also addressed. The future of Hive replication including ACID tables, faster bootstrapping, and table-level replication is outlined.
VMware vFabric Data Director for DB as a Service
vFabric Data Director is a software solution that enables enterprises to provide self-service database provisioning and management capabilities to users on demand. It allows developers to quickly provision fully configured databases with automated backup and restore. It also provides administrators with fine-grained access controls and tools to enforce IT policies and optimize resource utilization. The solution is built on VMware vSphere and uses a vSphere-optimized PostgreSQL database to deliver benefits like elastic resource allocation and automated high availability.
Vmware Serengeti - Based on Infochimps Ironfan
This document discusses virtualizing Hadoop for the enterprise. It begins with discussing trends driving changes in enterprise IT like cloud, mobile apps, and big data. It then discusses how Hadoop can address big, fast, and flexible data needs. The rest of the document discusses how virtualizing Hadoop through solutions like Project Serengeti can provide enterprises with elasticity, high availability, and operational simplicity for their Hadoop implementations. It also discusses how virtualization allows enterprises to integrate Hadoop with other workloads and data platforms.
AWS-Enabled Disaster Recovery and Business Continuity for SIFIs
AWS is hosting the first FSI Cloud Symposium in Hong Kong, which will take place on Thursday, March 23, 2017 at Grand Hyatt Hotel. The event will bring together FSI customers, industry professional and AWS experts, to explore how to turn the dream of transformation, innovation and acceleration into reality by exploiting Cloud, Voice to Text and IoT technologies. The packed agenda includes expert sessions on a host of pressing issues, such as security and compliance, as well as customer experience sharing on how cloud computing is benefiting the industry.
Speaker: Felix Candelario, Global Accounts Solutions Architect, AWS
Big data Hadoop Analytic and Data warehouse comparison guide
This document provides an overview of 4 solutions for processing big data using Hadoop and compares them. Solution 1 involves using core Hadoop processing without data staging or movement. Solution 2 uses BI tools to analyze Hadoop data after a single CSV transformation. Solution 3 creates a data warehouse in Hadoop after a single transformation. Solution 4 implements a traditional data warehouse. The solutions are then compared based on benefits like cloud readiness, parallel processing, and investment required. The document also includes steps for installing a Hadoop cluster and running sample MapReduce jobs and Excel processing.
DNS: from manual records to a modern & dynamic approach
This document discusses evolving DNS systems from static zone files to more dynamic approaches. It proposes building a Scaleway Domains API with three versions - basic, intermediate, and advanced. The basic version uses PowerDNS with LUA scripts to dynamically resolve records. The intermediate version forwards queries to a separate DNS server running dynamic records via zone delegation. It also introduces using microservices that resolve queries and return JSON responses. The advanced version is not described.
Bw on hana some obvious wins
This document discusses SAP BW on HANA and its value proposition. It outlines implementation options for deploying BW on HANA, including a mixed deployment with HANA Live and S/4 HANA. Key considerations for the optimized deployment of HANA include data loading, scheduling, maintenance, analysis and reporting. The document also discusses assessing customer BI landscapes, the architecture of BW on HANA, and empowering BI capabilities with use cases. It provides recommendations on sizing BW for HANA, general problems during migration, and the value proposition of BW on HANA including virtualization, real-time data, flexible modeling, increased availability and lower TCO.
SPCA2013 - Windows Azure for SharePoint People
The document discusses Windows Azure and hybrid cloud computing. It explains that Windows Azure allows workloads and applications to run across both public and private clouds with usage-based pricing and automated management. It also describes how to set up a virtual network in Windows Azure that connects an on-premises network to Azure resources through a VPN or gateway.
Similar to Designate - DNSaaS for OpenStack - FOSDEM 2014 (20)
(BIZ401) Kellogg Company Runs SAP in a Hybrid Environment | AWS re:Invent 2014
(BIZ401) Kellogg Company Runs SAP in a Hybrid Environment | AWS re:Invent 2014
VMworld 2013: Big Data Platform Building Blocks: Serengeti, Resource Manageme...
VMworld 2013: Big Data Platform Building Blocks: Serengeti, Resource Manageme...
1. beyond mission critical virtualizing big data and hadoop
1. beyond mission critical virtualizing big data and hadoop
Disaster Recovery and Cloud Migration for your Apache Hive Warehouse
Disaster Recovery and Cloud Migration for your Apache Hive Warehouse
AWS-Enabled Disaster Recovery and Business Continuity for SIFIs
AWS-Enabled Disaster Recovery and Business Continuity for SIFIs
Big data Hadoop Analytic and Data warehouse comparison guide
Big data Hadoop Analytic and Data warehouse comparison guide
DNS: from manual records to a modern & dynamic approach
DNS: from manual records to a modern & dynamic approach
Recently uploaded
Enterprise Resource Planning System in Telangana
Enterprise Resource Planning System includes various modules that reduce any business's workload. Additionally, it organizes the workflows, which drives towards enhancing productivity. Here are a detailed explanation of the ERP modules. Going through the points will help you understand how the software is changing the work dynamics.
To know more details here: https://blogs.nyggs.com/nyggs/enterprise-resource-planning-erp-system-modules/
GreenCode-A-VSCode-Plugin--Dario-Jurisic
Presentation about a VSCode plugin from Dario Jurisic at the GSD Community Stage meetup
GOING AOT WITH GRAALVM FOR SPRING BOOT (SPRING IO)
This session covers GraalVM & Spring Boot, Spring AOT, performance optimizations and using libraries
May Marketo Masterclass, London MUG May 22 2024.pdf
Can't make Adobe Summit in Vegas? No sweat because the EMEA Marketo Engage Champions are coming to London to share their Summit sessions, insights and more!
This is a MUG with a twist you don't want to miss.
Revolutionizing Visual Effects Mastering AI Face Swaps.pdf
The quest for the best AI face swap solution is marked by an amalgamation of technological prowess and artistic finesse, where cutting-edge algorithms seamlessly replace faces in images or videos with striking realism. Leveraging advanced deep learning techniques, the best AI face swap tools meticulously analyze facial features, lighting conditions, and expressions to execute flawless transformations, ensuring natural-looking results that blur the line between reality and illusion, captivating users with their ingenuity and sophistication.
Web:- https://undressbaby.com/
Webinar On-Demand: Using Flutter for Embedded
Flutter is a popular open source, cross-platform framework developed by Google. In this webinar we'll explore Flutter and its architecture, delve into the Flutter Embedder and Flutter’s Dart language, discover how to leverage Flutter for embedded device development, learn about Automotive Grade Linux (AGL) and its consortium and understand the rationale behind AGL's choice of Flutter for next-gen IVI systems. Don’t miss this opportunity to discover whether Flutter is right for your project.
LORRAINE ANDREI_LEQUIGAN_HOW TO USE WHATSAPP.pptx
WhatsApp offers simple, reliable, and private messaging and calling services for free worldwide. With end-to-end encryption, your personal messages and calls are secure, ensuring only you and the recipient can access them. Enjoy voice and video calls to stay connected with loved ones or colleagues. Express yourself using stickers, GIFs, or by sharing moments on Status. WhatsApp Business enables global customer outreach, facilitating sales growth and relationship building through showcasing products and services. Stay connected effortlessly with group chats for planning outings with friends or staying updated on family conversations.
Energy consumption of Database Management - Florina Jonuzi
Presentation from Florina Jonuzi at the GSD Community Stage Meetup on June 06, 2024
Graspan: A Big Data System for Big Code Analysis
We built a disk-based parallel graph system, Graspan, that uses a novel edge-pair centric computation model to compute dynamic transitive closures on very large program graphs.
We implement context-sensitive pointer/alias and dataflow analyses on Graspan. An evaluation of these analyses on large codebases such as Linux shows that their Graspan implementations scale to millions of lines of code and are much simpler than their original implementations.
These analyses were used to augment the existing checkers; these augmented checkers found 132 new NULL pointer bugs and 1308 unnecessary NULL tests in Linux 4.4.0-rc5, PostgreSQL 8.3.9, and Apache httpd 2.2.18.
- Accepted in ASPLOS ‘17, Xi’an, China.
- Featured in the tutorial, Systemized Program Analyses: A Big Data Perspective on Static Analysis Scalability, ASPLOS ‘17.
- Invited for presentation at SoCal PLS ‘16.
- Invited for poster presentation at PLDI SRC ‘16.
SWEBOK and Education at FUSE Okinawa 2024
Takashi Kobayashi and Hironori Washizaki, "SWEBOK Guide and Future of SE Education," First International Symposium on the Future of Software Engineering (FUSE), June 3-6, 2024, Okinawa, Japan
Top Features to Include in Your Winzo Clone App for Business Growth (4).pptx
Discover the essential features to incorporate in your Winzo clone app to boost business growth, enhance user engagement, and drive revenue. Learn how to create a compelling gaming experience that stands out in the competitive market.
UI5con 2024 - Boost Your Development Experience with UI5 Tooling Extensions
The UI5 tooling is the development and build tooling of UI5. It is built in a modular and extensible way so that it can be easily extended by your needs. This session will showcase various tooling extensions which can boost your development experience by far so that you can really work offline, transpile your code in your project to use even newer versions of EcmaScript (than 2022 which is supported right now by the UI5 tooling), consume any npm package of your choice in your project, using different kind of proxies, and even stitching UI5 projects during development together to mimic your target environment.
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
Charla impartida en el evento de "KuberTENes Birthday Bash Guadalajara" para celebrar el 10mo. aniversario de Kubernetes #kuberTENes #celebr8k8s #k8s
Oracle Database 19c New Features for DBAs and Developers.pptx
Oracle Database 19c New Features for DBAs and Developers. This video you can watch from my youtube channel at https://youtu.be/m-F-mZA3MkU
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
Presentation from Ghazal Aakel and Eric Jochum at the GSD Community Stage Meetup on June 6th, 2024
E-commerce Application Development Company.pdf
Your business can reach new heights with our assistance as we design solutions that are specifically appropriate for your goals and vision. Our eCommerce application solutions can digitally coordinate all retail operations processes to meet the demands of the marketplace while maintaining business continuity.
DDS-Security 1.2 - What's New? Stronger security for long-running systems
DDS Security Version 1.2 was adopted in 2024. This revision strengthens support for long runnings systems adding new cryptographic algorithms, certificate revocation, and hardness against DoS attacks.
Why Choose Odoo 17 Community & How it differs from Odoo 17 Enterprise Edition
Why Choose Odoo 17 Community & How it differs from Odoo 17 Enterprise EditionEnvertis Software Solutions
Odoo ERP software
Odoo ERP software, a leading open-source software for Enterprise Resource Planning (ERP) and business management, has recently launched its latest version, Odoo 17 Community Edition. This update introduces a range of new features and enhancements designed to streamline business operations and support growth.
The Odoo Community serves as a cost-free edition within the Odoo suite of ERP systems. Tailored to accommodate the standard needs of business operations, it provides a robust platform suitable for organisations of different sizes and business sectors. Within the Odoo Community Edition, users can access a variety of essential features and services essential for managing day-to-day tasks efficiently.
This blog presents a detailed overview of the features available within the Odoo 17 Community edition, and the differences between Odoo 17 community and enterprise editions, aiming to equip you with the necessary information to make an informed decision about its suitability for your business.GraphSummit Paris - The art of the possible with Graph Technology
Sudhir Hasbe, Chief Product Officer, Neo4j
Join us as we explore breakthrough innovations enabled by interconnected data and AI. Discover firsthand how organizations use relationships in data to uncover contextual insights and solve our most pressing challenges – from optimizing supply chains, detecting fraud, and improving customer experiences to accelerating drug discoveries.
Recently uploaded (20)
GOING AOT WITH GRAALVM FOR SPRING BOOT (SPRING IO)
GOING AOT WITH GRAALVM FOR SPRING BOOT (SPRING IO)
May Marketo Masterclass, London MUG May 22 2024.pdf
May Marketo Masterclass, London MUG May 22 2024.pdf
Revolutionizing Visual Effects Mastering AI Face Swaps.pdf
Revolutionizing Visual Effects Mastering AI Face Swaps.pdf
Energy consumption of Database Management - Florina Jonuzi
Energy consumption of Database Management - Florina Jonuzi
Top Features to Include in Your Winzo Clone App for Business Growth (4).pptx
Top Features to Include in Your Winzo Clone App for Business Growth (4).pptx
UI5con 2024 - Boost Your Development Experience with UI5 Tooling Extensions
UI5con 2024 - Boost Your Development Experience with UI5 Tooling Extensions
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
Oracle Database 19c New Features for DBAs and Developers.pptx
Oracle Database 19c New Features for DBAs and Developers.pptx
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
DDS-Security 1.2 - What's New? Stronger security for long-running systems
DDS-Security 1.2 - What's New? Stronger security for long-running systems
Why Choose Odoo 17 Community & How it differs from Odoo 17 Enterprise Edition
Why Choose Odoo 17 Community & How it differs from Odoo 17 Enterprise Edition
GraphSummit Paris - The art of the possible with Graph Technology
GraphSummit Paris - The art of the possible with Graph Technology
Designate - DNSaaS for OpenStack - FOSDEM 2014
- 1. Graham Hayes / HP
- 2. ➔ @grahamhayes ➔ mugsie on freenode ➔ Designate-Core ➔ Developer / Ops in HP Cloud ➔ Run a production instance of designate - in use by the public
- 3. ˈdɛzɪɡneɪt/ officially give a specified status or name to. "the Wye Valley is designated an area of outstanding natural beauty" or "173.194.121.0 is google.com" designate verb
- 4. CentralAPI DB Pool Manager Mini DNS Customer Facing DNS Servers Backend
- 5. CentralAPI DB Pool Manager Mini DNS Customer Facing DNS Servers Backend
- 6. CentralAPI DB Pool Manager Mini DNS Customer Facing DNS Servers Backend Main business logic for designate Controls nearly all access to the database Horizontally Scalable
- 7. CentralAPI DB Pool Manager Mini DNS Customer Facing DNS Servers Backend New component Used to manage pools of servers (surprisingly) Horizontally Scalable Does direct creates and deletes for zones Coordinates updates to zones (Records, SOA etc)
- 8. CentralAPI DB Pool Manager Mini DNS Customer Facing DNS Servers Backend New component Horizontally Scalable Serves information from the Database to DNS Servers Talks the DNS Protocol Not designed for end users to use (hence ‘Mini’)
- 9. Pools
- 10. Customers / Users: I Want: ➔ To use mycompany.dev ➔ To make sure no one else can see my DNS records ➔ To have different DNS entries inside my VPC / Neutron Network ➔ To sell different tiers of service ➔ Bind9 to work ➔ Scale out
- 11. CentralAPI DB Pool Manager Mini DNS Customer Facing DNS Servers Backend
- 12. Mid Cycle Recap
- 14. Questions?
- 15. These slides, and other associated materials are licenced under the Creative Commons Attribution Share-Alike 4.0 International License