Orthevs Orthevs Fathom new horizons
Menu

DNS · Network services

DNS Workshop

Namespace and resolution, authoritative servers and resolvers, delegation, caching, DNSSEC, encrypted DNS models, CoreDNS, monitoring and incident analysis.

Workshop examples as ZIP files · 31 Workshop wiki Back to the Academy

DNS

My learning progress

With the web app option enabled, your progress is stored on this device.

Learning progress in the web app

Mark chapters as read, view reading progress and check off practice modules after enabling the optional web app. Workshop progress is calculated from chapters across all document pages. Your choices stay on this device; there is no account or server sync. Installation is not required. Withdrawing your choice in Privacy settings deletes the progress.

Workshop progress0%
Practice modules completed0 / 31
Documents read0 / 94
Workshop progress0%
0%
0 / 1297 chapters read

Orthevs Academy · Orthevs

DNS as a learning path

This learning path provides knowledge and practice. Requirements, ownership and evidence must be defined separately for production Orthevs processes.

Technical workshop

One learning framework. Distinct technical subjects.

All workshops follow the same robust topology: central documentation, progressive workshop levels, exercises, assessments, runnable examples and supporting scripts. The Academy preserves this organization instead of dissolving the material into isolated articles or decorative course cards.

Learning material

Documentation in the Orthevs Wiki

The material retains its subject-specific structure. German and English versions are cross-linked, and diagrams are generated directly from the included Mermaid sources.

Workshop overview

1
English · 2.6 KB

DNS Workshop – Overview

This workshop covers the path from namespace fundamentals to secure operations with delegation, DNSSEC, resolver hardening, CoreDNS, Kubernetes DNS, monitori…

Open document ↗

Technical documentation

13
English · 70.5 KB

Architecture: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.5 KB

Best Practices: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.4 KB

Command Reference: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.3 KB

Concepts: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.4 KB

Curriculum: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.3 KB

Diagrams: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.7 KB

Cloud Environment: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 71.1 KB

Bare Metal Environment: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.7 KB

VM Environment: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.6 KB

WSL Environment: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.4 KB

Operations: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.3 KB

Security: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗ English · 70.6 KB

Troubleshooting: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗

Workshop levels

4
English · 74.7 KB

Fundamentals: DNS

Fundamentals of DNS, namespace, resolvers, zones, record types and dig.

Open document ↗ English · 74.7 KB

Intermediate: DNS

Delegation, caching, reverse DNS, mail DNS, CoreDNS and Kubernetes DNS.

Open document ↗ English · 74.8 KB

Professional: DNS

Authoritative and recursive operations, transfers, split horizon, monitoring and change management.

Open document ↗ English · 75.0 KB

Advanced Security: DNS

DNSSEC, TSIG, RPZ, DoT/DoH, privacy, amplification and incident response.

Open document ↗

Exercises

4
English · 32.8 KB

Exercises: Fundamentals DNS

Fundamentals of DNS, namespace, resolvers, zones, record types and dig.

Open document ↗ English · 32.8 KB

Exercises: Intermediate DNS

Delegation, caching, reverse DNS, mail DNS, CoreDNS and Kubernetes DNS.

Open document ↗ English · 32.8 KB

Exercises: Professional DNS

Authoritative and recursive operations, transfers, split horizon, monitoring and change management.

Open document ↗ English · 32.9 KB

Exercises: Advanced Security DNS

DNSSEC, TSIG, RPZ, DoT/DoH, privacy, amplification and incident response.

Open document ↗

Assessments and solutions

9
English · 29.3 KB

Assessment: Fundamentals DNS

Explain DNS roles in the context of DNS. Name suitable queries or artifacts and describe a realistic failure mode.

Open document ↗ English · 35.2 KB

Solution: Fundamentals DNS

A good answer for DNS roles names role, zone, RRtype, expected RCODE and evidence. It separates query symptom, zone data, resolver cache and delegation.

Open document ↗ English · 29.3 KB

Assessment: Intermediate DNS

Explain DNS roles in the context of DNS. Name suitable queries or artifacts and describe a realistic failure mode.

Open document ↗ English · 35.2 KB

Solution: Intermediate DNS

A good answer for DNS roles names role, zone, RRtype, expected RCODE and evidence. It separates query symptom, zone data, resolver cache and delegation.

Open document ↗ English · 29.3 KB

Assessment: Professional DNS

Explain DNS roles in the context of DNS. Name suitable queries or artifacts and describe a realistic failure mode.

Open document ↗ English · 35.2 KB

Solution: Professional DNS

A good answer for DNS roles names role, zone, RRtype, expected RCODE and evidence. It separates query symptom, zone data, resolver cache and delegation.

Open document ↗ English · 29.4 KB

Assessment: Advanced Security DNS

Explain DNS roles in the context of DNS. Name suitable queries or artifacts and describe a realistic failure mode.

Open document ↗ English · 35.3 KB

Solution: Advanced Security DNS

A good answer for DNS roles names role, zone, RRtype, expected RCODE and evidence. It separates query symptom, zone data, resolver cache and delegation.

Open document ↗ English · 27.2 KB

Official Certifications and Exam Context: DNS

This workshop does not award a universal official DNS certificate. DNS knowledge is relevant for networking, Linux, cloud, Kubernetes and security exams.

Open document ↗
View all content in the wiki

Practice modules

Workshop examples as ZIP files

All 31 practice examples in this workshop are available as individual ZIP files. Choose an example to download its package directly.

00

lab-skeleton

examples/00-lab-skeleton
Files
5
Size
9.5 KB
SHA-256
6918b5208e94
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • queries/queries.txt
  • run.sh
Download example ZIP Open in the wiki
01

dns-cli-inspection

examples/01-dns-cli-inspection
Files
5
Size
9.5 KB
SHA-256
51ae497685ed
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • queries/queries.txt
  • run.sh
Download example ZIP Open in the wiki
02

zone-file-analysis

examples/02-zone-file-analysis
Files
5
Size
9.7 KB
SHA-256
2f0c51e77033
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
03

authoritative-bind-model

examples/03-authoritative-bind-model
Files
6
Size
10.2 KB
SHA-256
33afb232b28d
Files in the ZIP · 6
  • README.md
  • bind/named.conf.local
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
04

recursive-resolver-unbound-model

examples/04-recursive-resolver-unbound-model
Files
5
Size
9.9 KB
SHA-256
3c66ccf145d3
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • unbound/unbound.conf
Download example ZIP Open in the wiki
05

forwarding-cache-model

examples/05-forwarding-cache-model
Files
5
Size
9.7 KB
SHA-256
165239eb42d1
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • resolver/forward-zones.conf
  • run.sh
Download example ZIP Open in the wiki
06

split-horizon-views

examples/06-split-horizon-views
Files
6
Size
10.1 KB
SHA-256
77c7be76df4d
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test.external
  • zones/db.example.test.internal
Download example ZIP Open in the wiki
07

reverse-dns-ptr

examples/07-reverse-dns-ptr
Files
5
Size
9.6 KB
SHA-256
6ec490c7601d
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.192.0.2
Download example ZIP Open in the wiki
08

cname-and-alias-rules

examples/08-cname-and-alias-rules
Files
6
Size
10.2 KB
SHA-256
135893c531a8
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • notes/cname-conflict-example.txt
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
09

mail-dns-spf-dkim-dmarc

examples/09-mail-dns-spf-dkim-dmarc
Files
5
Size
9.9 KB
SHA-256
95079ce94c03
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
10

ttl-cache-planning

examples/10-ttl-cache-planning
Files
6
Size
10.0 KB
SHA-256
b156f52bfa54
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • plans/ttl-plan.yaml
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
11

negative-caching-nxdomain

examples/11-negative-caching-nxdomain
Files
6
Size
10.3 KB
SHA-256
d86300e8b119
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • notes/negative-cache.txt
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
12

delegation-glue

examples/12-delegation-glue
Files
6
Size
9.9 KB
SHA-256
7c9440fb3a38
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
  • zones/db.test
Download example ZIP Open in the wiki
13

dnssec-signing-model

examples/13-dnssec-signing-model
Files
6
Size
10.2 KB
SHA-256
c941c39f41e2
Files in the ZIP · 6
  • README.md
  • dnssec/signing-model.json
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
14

ds-chain-of-trust

examples/14-ds-chain-of-trust
Files
6
Size
10.1 KB
SHA-256
37e3f1f8420f
Files in the ZIP · 6
  • README.md
  • dnssec/ds-record.json
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
15

nsec-nsec3-model

examples/15-nsec-nsec3-model
Files
6
Size
10.1 KB
SHA-256
6ca074477b8f
Files in the ZIP · 6
  • README.md
  • dnssec/nsec-model.txt
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
16

tsig-zone-transfer

examples/16-tsig-zone-transfer
Files
6
Size
9.9 KB
SHA-256
4a536df9373b
Files in the ZIP · 6
  • README.md
  • bind/transfer.conf
  • bind/tsig.conf
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
Download example ZIP Open in the wiki
17

dynamic-update-model

examples/17-dynamic-update-model
Files
6
Size
10.1 KB
SHA-256
47ba2876b140
Files in the ZIP · 6
  • README.md
  • bind/update-policy.conf
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • updates/nsupdate.txt
Download example ZIP Open in the wiki
18

zone-transfer-acl

examples/18-zone-transfer-acl
Files
5
Size
9.6 KB
SHA-256
bf23397961bb
Files in the ZIP · 5
  • README.md
  • bind/zone-transfer-acl.conf
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
Download example ZIP Open in the wiki
19

edns-udp-tcp-fallback

examples/19-edns-udp-tcp-fallback
Files
5
Size
9.8 KB
SHA-256
ab9a94e26f46
Files in the ZIP · 5
  • README.md
  • diagnostics/edns-model.json
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
Download example ZIP Open in the wiki
20

dns-over-tls-model

examples/20-dns-over-tls-model
Files
5
Size
9.7 KB
SHA-256
f5c0766b9179
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • unbound/dot.conf
Download example ZIP Open in the wiki
21

dns-over-https-model

examples/21-dns-over-https-model
Files
5
Size
9.7 KB
SHA-256
e749a9ad6b29
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • doh/doh-endpoint.json
  • run.sh
Download example ZIP Open in the wiki
22

resolver-privacy-qname-minimization

examples/22-resolver-privacy-qname-minimization
Files
5
Size
10.0 KB
SHA-256
119d534a34a4
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • resolver/privacy.conf
  • run.sh
Download example ZIP Open in the wiki
23

response-policy-zone

examples/23-response-policy-zone
Files
5
Size
9.7 KB
SHA-256
e5cbfd940311
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.rpz
Download example ZIP Open in the wiki
24

dns-firewall-amplification

examples/24-dns-firewall-amplification
Files
5
Size
9.8 KB
SHA-256
d448f2b2f9ad
Files in the ZIP · 5
  • README.md
  • bind/resolver-hardening.conf
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
Download example ZIP Open in the wiki
25

coredns-lab

examples/25-coredns-lab
Files
6
Size
9.8 KB
SHA-256
64088c182792
Files in the ZIP · 6
  • README.md
  • coredns/Corefile
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
26

kubernetes-coredns-model

examples/26-kubernetes-coredns-model
Files
5
Size
9.9 KB
SHA-256
8ff5f56fc7e3
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • kubernetes/coredns-configmap.yaml
  • run.sh
Download example ZIP Open in the wiki
27

service-discovery-srv

examples/27-service-discovery-srv
Files
5
Size
8.2 KB
SHA-256
cf086a6adeb6
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
Download example ZIP Open in the wiki
28

monitoring-query-logs

examples/28-monitoring-query-logs
Files
6
Size
8.5 KB
SHA-256
5c45a130368f
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • monitoring/query-log-sample.txt
  • monitoring/slo.yaml
  • run.sh
Download example ZIP Open in the wiki
29

incident-response-dns-outage

examples/29-incident-response-dns-outage
Files
5
Size
8.4 KB
SHA-256
57649d89775d
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • incident/dns-incident-runbook.txt
  • run.sh
Download example ZIP Open in the wiki
30

troubleshooting-dns

examples/30-troubleshooting-dns
Files
5
Size
8.2 KB
SHA-256
7b608127ee1e
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • troubleshooting/decision-tree.yaml
Download example ZIP Open in the wiki

Material structure

The workshop's real directory structure.

Each area can be opened separately. Directories and material files appear in their actual hierarchy with their unchanged paths; the media directory is excluded in full.

Root files

README-EN.md
Documentation39
docs/architecture-dns-DE.md
docs/architecture-dns-EN.md
docs/architecture-dns-EL.md
docs/best-practices-dns-DE.md
docs/best-practices-dns-EN.md
docs/best-practices-dns-EL.md
docs/commands-dns-DE.md
docs/commands-dns-EN.md
docs/commands-dns-EL.md
docs/concepts-dns-DE.md
docs/concepts-dns-EN.md
docs/concepts-dns-EL.md
docs/curriculum-dns-DE.md
docs/curriculum-dns-EN.md
docs/curriculum-dns-EL.md
docs/diagrams-dns-DE.md
docs/diagrams-dns-EN.md
docs/diagrams-dns-EL.md
docs/environment-cloud-dns-DE.md
docs/environment-cloud-dns-EN.md
docs/environment-cloud-dns-EL.md
docs/environment-native-baremetal-dns-DE.md
docs/environment-native-baremetal-dns-EN.md
docs/environment-native-baremetal-dns-EL.md
docs/environment-native-vm-dns-DE.md
docs/environment-native-vm-dns-EN.md
docs/environment-native-vm-dns-EL.md
docs/environment-wsl-dns-DE.md
docs/environment-wsl-dns-EN.md
docs/environment-wsl-dns-EL.md
docs/operations-dns-DE.md
docs/operations-dns-EN.md
docs/operations-dns-EL.md
docs/security-dns-DE.md
docs/security-dns-EN.md
docs/security-dns-EL.md
docs/troubleshooting-dns-DE.md
docs/troubleshooting-dns-EN.md
docs/troubleshooting-dns-EL.md
Workshop levels12
workshops/01-fundamentals-dns-DE.md
workshops/01-fundamentals-dns-EN.md
workshops/01-fundamentals-dns-EL.md
workshops/02-intermediate-dns-DE.md
workshops/02-intermediate-dns-EN.md
workshops/02-intermediate-dns-EL.md
workshops/03-professional-dns-DE.md
workshops/03-professional-dns-EN.md
workshops/03-professional-dns-EL.md
workshops/04-advanced-security-dns-DE.md
workshops/04-advanced-security-dns-EN.md
workshops/04-advanced-security-dns-EL.md
Exercises12
exercises/01-fundamentals-exercises-dns-DE.md
exercises/01-fundamentals-exercises-dns-EN.md
exercises/01-fundamentals-exercises-dns-EL.md
exercises/02-intermediate-exercises-dns-DE.md
exercises/02-intermediate-exercises-dns-EN.md
exercises/02-intermediate-exercises-dns-EL.md
exercises/03-professional-exercises-dns-DE.md
exercises/03-professional-exercises-dns-EN.md
exercises/03-professional-exercises-dns-EL.md
exercises/04-advanced-security-exercises-dns-DE.md
exercises/04-advanced-security-exercises-dns-EN.md
exercises/04-advanced-security-exercises-dns-EL.md
Assessments & solutions27
assessments/01-fundamentals-dns-assessment-DE.md
assessments/01-fundamentals-dns-assessment-EN.md
assessments/01-fundamentals-dns-assessment-EL.md
assessments/01-fundamentals-dns-solution-DE.md
assessments/01-fundamentals-dns-solution-EN.md
assessments/01-fundamentals-dns-solution-EL.md
assessments/02-intermediate-dns-assessment-DE.md
assessments/02-intermediate-dns-assessment-EN.md
assessments/02-intermediate-dns-assessment-EL.md
assessments/02-intermediate-dns-solution-DE.md
assessments/02-intermediate-dns-solution-EN.md
assessments/02-intermediate-dns-solution-EL.md
assessments/03-professional-dns-assessment-DE.md
assessments/03-professional-dns-assessment-EN.md
assessments/03-professional-dns-assessment-EL.md
assessments/03-professional-dns-solution-DE.md
assessments/03-professional-dns-solution-EN.md
assessments/03-professional-dns-solution-EL.md
assessments/04-advanced-security-dns-assessment-DE.md
assessments/04-advanced-security-dns-assessment-EN.md
assessments/04-advanced-security-dns-assessment-EL.md
assessments/04-advanced-security-dns-solution-DE.md
assessments/04-advanced-security-dns-solution-EN.md
assessments/04-advanced-security-dns-solution-EL.md
assessments/05-official-certificates-dns-DE.md
assessments/05-official-certificates-dns-EN.md
assessments/05-official-certificates-dns-EL.md
Practice modules365
examples/00-lab-skeleton
examples/00-lab-skeleton/docs
examples/00-lab-skeleton/docs/de
examples/00-lab-skeleton/docs/en
examples/00-lab-skeleton/queries
examples/01-dns-cli-inspection
examples/01-dns-cli-inspection/docs
examples/01-dns-cli-inspection/docs/de
examples/01-dns-cli-inspection/docs/en
examples/01-dns-cli-inspection/queries
examples/02-zone-file-analysis
examples/02-zone-file-analysis/docs
examples/02-zone-file-analysis/docs/de
examples/02-zone-file-analysis/docs/en
examples/02-zone-file-analysis/zones
examples/03-authoritative-bind-model
examples/03-authoritative-bind-model/bind
examples/03-authoritative-bind-model/docs
examples/03-authoritative-bind-model/docs/de
examples/03-authoritative-bind-model/docs/en
examples/03-authoritative-bind-model/zones
examples/04-recursive-resolver-unbound-model
examples/04-recursive-resolver-unbound-model/docs
examples/04-recursive-resolver-unbound-model/docs/de
examples/04-recursive-resolver-unbound-model/docs/en
examples/04-recursive-resolver-unbound-model/unbound
examples/05-forwarding-cache-model
examples/05-forwarding-cache-model/docs
examples/05-forwarding-cache-model/docs/de
examples/05-forwarding-cache-model/docs/en
examples/05-forwarding-cache-model/resolver
examples/06-split-horizon-views
examples/06-split-horizon-views/docs
examples/06-split-horizon-views/docs/de
examples/06-split-horizon-views/docs/en
examples/06-split-horizon-views/zones
examples/07-reverse-dns-ptr
examples/07-reverse-dns-ptr/docs
examples/07-reverse-dns-ptr/docs/de
examples/07-reverse-dns-ptr/docs/en
examples/07-reverse-dns-ptr/zones
examples/08-cname-and-alias-rules
examples/08-cname-and-alias-rules/docs
examples/08-cname-and-alias-rules/docs/de
examples/08-cname-and-alias-rules/docs/en
examples/08-cname-and-alias-rules/notes
examples/08-cname-and-alias-rules/zones
examples/09-mail-dns-spf-dkim-dmarc
examples/09-mail-dns-spf-dkim-dmarc/docs
examples/09-mail-dns-spf-dkim-dmarc/docs/de
examples/09-mail-dns-spf-dkim-dmarc/docs/en
examples/09-mail-dns-spf-dkim-dmarc/zones
examples/10-ttl-cache-planning
examples/10-ttl-cache-planning/docs
examples/10-ttl-cache-planning/docs/de
examples/10-ttl-cache-planning/docs/en
examples/10-ttl-cache-planning/plans
examples/10-ttl-cache-planning/zones
examples/11-negative-caching-nxdomain
examples/11-negative-caching-nxdomain/docs
examples/11-negative-caching-nxdomain/docs/de
examples/11-negative-caching-nxdomain/docs/en
examples/11-negative-caching-nxdomain/notes
examples/11-negative-caching-nxdomain/zones
examples/12-delegation-glue
examples/12-delegation-glue/docs
examples/12-delegation-glue/docs/de
examples/12-delegation-glue/docs/en
examples/12-delegation-glue/zones
examples/13-dnssec-signing-model
examples/13-dnssec-signing-model/dnssec
examples/13-dnssec-signing-model/docs
examples/13-dnssec-signing-model/docs/de
examples/13-dnssec-signing-model/docs/en
examples/13-dnssec-signing-model/zones
examples/14-ds-chain-of-trust
examples/14-ds-chain-of-trust/dnssec
examples/14-ds-chain-of-trust/docs
examples/14-ds-chain-of-trust/docs/de
examples/14-ds-chain-of-trust/docs/en
examples/14-ds-chain-of-trust/zones
examples/15-nsec-nsec3-model
examples/15-nsec-nsec3-model/dnssec
examples/15-nsec-nsec3-model/docs
examples/15-nsec-nsec3-model/docs/de
examples/15-nsec-nsec3-model/docs/en
examples/15-nsec-nsec3-model/zones
examples/16-tsig-zone-transfer
examples/16-tsig-zone-transfer/bind
examples/16-tsig-zone-transfer/docs
examples/16-tsig-zone-transfer/docs/de
examples/16-tsig-zone-transfer/docs/en
examples/17-dynamic-update-model
examples/17-dynamic-update-model/bind
examples/17-dynamic-update-model/docs
examples/17-dynamic-update-model/docs/de
examples/17-dynamic-update-model/docs/en
examples/17-dynamic-update-model/updates
examples/18-zone-transfer-acl
examples/18-zone-transfer-acl/bind
examples/18-zone-transfer-acl/docs
examples/18-zone-transfer-acl/docs/de
examples/18-zone-transfer-acl/docs/en
examples/19-edns-udp-tcp-fallback
examples/19-edns-udp-tcp-fallback/diagnostics
examples/19-edns-udp-tcp-fallback/docs
examples/19-edns-udp-tcp-fallback/docs/de
examples/19-edns-udp-tcp-fallback/docs/en
examples/20-dns-over-tls-model
examples/20-dns-over-tls-model/docs
examples/20-dns-over-tls-model/docs/de
examples/20-dns-over-tls-model/docs/en
examples/20-dns-over-tls-model/unbound
examples/21-dns-over-https-model
examples/21-dns-over-https-model/docs
examples/21-dns-over-https-model/docs/de
examples/21-dns-over-https-model/docs/en
examples/21-dns-over-https-model/doh
examples/22-resolver-privacy-qname-minimization
examples/22-resolver-privacy-qname-minimization/docs
examples/22-resolver-privacy-qname-minimization/docs/de
examples/22-resolver-privacy-qname-minimization/docs/en
examples/22-resolver-privacy-qname-minimization/resolver
examples/23-response-policy-zone
examples/23-response-policy-zone/docs
examples/23-response-policy-zone/docs/de
examples/23-response-policy-zone/docs/en
examples/23-response-policy-zone/zones
examples/24-dns-firewall-amplification
examples/24-dns-firewall-amplification/bind
examples/24-dns-firewall-amplification/docs
examples/24-dns-firewall-amplification/docs/de
examples/24-dns-firewall-amplification/docs/en
examples/25-coredns-lab
examples/25-coredns-lab/coredns
examples/25-coredns-lab/docs
examples/25-coredns-lab/docs/de
examples/25-coredns-lab/docs/en
examples/25-coredns-lab/zones
examples/26-kubernetes-coredns-model
examples/26-kubernetes-coredns-model/docs
examples/26-kubernetes-coredns-model/docs/de
examples/26-kubernetes-coredns-model/docs/en
examples/26-kubernetes-coredns-model/kubernetes
examples/27-service-discovery-srv
examples/27-service-discovery-srv/docs
examples/27-service-discovery-srv/docs/de
examples/27-service-discovery-srv/docs/en
examples/27-service-discovery-srv/zones
examples/28-monitoring-query-logs
examples/28-monitoring-query-logs/docs
examples/28-monitoring-query-logs/docs/de
examples/28-monitoring-query-logs/docs/en
examples/28-monitoring-query-logs/monitoring
examples/29-incident-response-dns-outage
examples/29-incident-response-dns-outage/docs
examples/29-incident-response-dns-outage/docs/de
examples/29-incident-response-dns-outage/docs/en
examples/29-incident-response-dns-outage/incident
examples/30-troubleshooting-dns
examples/30-troubleshooting-dns/docs
examples/30-troubleshooting-dns/docs/de
examples/30-troubleshooting-dns/docs/en
examples/30-troubleshooting-dns/troubleshooting
examples/.gitignore
examples/00-lab-skeleton/README.md
examples/00-lab-skeleton/docs/de/README.md
examples/00-lab-skeleton/docs/en/README.md
examples/00-lab-skeleton/docs/el/README.md
examples/00-lab-skeleton/queries/queries.txt
examples/00-lab-skeleton/run.sh
examples/01-dns-cli-inspection/README.md
examples/01-dns-cli-inspection/docs/de/README.md
examples/01-dns-cli-inspection/docs/en/README.md
examples/01-dns-cli-inspection/docs/el/README.md
examples/01-dns-cli-inspection/queries/queries.txt
examples/01-dns-cli-inspection/run.sh
examples/02-zone-file-analysis/README.md
examples/02-zone-file-analysis/docs/de/README.md
examples/02-zone-file-analysis/docs/en/README.md
examples/02-zone-file-analysis/docs/el/README.md
examples/02-zone-file-analysis/run.sh
examples/02-zone-file-analysis/zones/db.example.test
examples/03-authoritative-bind-model/README.md
examples/03-authoritative-bind-model/bind/named.conf.local
examples/03-authoritative-bind-model/docs/de/README.md
examples/03-authoritative-bind-model/docs/en/README.md
examples/03-authoritative-bind-model/docs/el/README.md
examples/03-authoritative-bind-model/run.sh
examples/03-authoritative-bind-model/zones/db.example.test
examples/04-recursive-resolver-unbound-model/README.md
examples/04-recursive-resolver-unbound-model/docs/de/README.md
examples/04-recursive-resolver-unbound-model/docs/en/README.md
examples/04-recursive-resolver-unbound-model/docs/el/README.md
examples/04-recursive-resolver-unbound-model/run.sh
examples/04-recursive-resolver-unbound-model/unbound/unbound.conf
examples/05-forwarding-cache-model/README.md
examples/05-forwarding-cache-model/docs/de/README.md
examples/05-forwarding-cache-model/docs/en/README.md
examples/05-forwarding-cache-model/docs/el/README.md
examples/05-forwarding-cache-model/resolver/forward-zones.conf
examples/05-forwarding-cache-model/run.sh
examples/06-split-horizon-views/README.md
examples/06-split-horizon-views/docs/de/README.md
examples/06-split-horizon-views/docs/en/README.md
examples/06-split-horizon-views/docs/el/README.md
examples/06-split-horizon-views/run.sh
examples/06-split-horizon-views/zones/db.example.test.external
examples/06-split-horizon-views/zones/db.example.test.internal
examples/07-reverse-dns-ptr/README.md
examples/07-reverse-dns-ptr/docs/de/README.md
examples/07-reverse-dns-ptr/docs/en/README.md
examples/07-reverse-dns-ptr/docs/el/README.md
examples/07-reverse-dns-ptr/run.sh
examples/07-reverse-dns-ptr/zones/db.192.0.2
examples/08-cname-and-alias-rules/README.md
examples/08-cname-and-alias-rules/docs/de/README.md
examples/08-cname-and-alias-rules/docs/en/README.md
examples/08-cname-and-alias-rules/docs/el/README.md
examples/08-cname-and-alias-rules/notes/cname-conflict-example.txt
examples/08-cname-and-alias-rules/run.sh
examples/08-cname-and-alias-rules/zones/db.example.test
examples/09-mail-dns-spf-dkim-dmarc/README.md
examples/09-mail-dns-spf-dkim-dmarc/docs/de/README.md
examples/09-mail-dns-spf-dkim-dmarc/docs/en/README.md
examples/09-mail-dns-spf-dkim-dmarc/docs/el/README.md
examples/09-mail-dns-spf-dkim-dmarc/run.sh
examples/09-mail-dns-spf-dkim-dmarc/zones/db.example.test
examples/10-ttl-cache-planning/README.md
examples/10-ttl-cache-planning/docs/de/README.md
examples/10-ttl-cache-planning/docs/en/README.md
examples/10-ttl-cache-planning/docs/el/README.md
examples/10-ttl-cache-planning/plans/ttl-plan.yaml
examples/10-ttl-cache-planning/run.sh
examples/10-ttl-cache-planning/zones/db.example.test
examples/11-negative-caching-nxdomain/README.md
examples/11-negative-caching-nxdomain/docs/de/README.md
examples/11-negative-caching-nxdomain/docs/en/README.md
examples/11-negative-caching-nxdomain/docs/el/README.md
examples/11-negative-caching-nxdomain/notes/negative-cache.txt
examples/11-negative-caching-nxdomain/run.sh
examples/11-negative-caching-nxdomain/zones/db.example.test
examples/12-delegation-glue/README.md
examples/12-delegation-glue/docs/de/README.md
examples/12-delegation-glue/docs/en/README.md
examples/12-delegation-glue/docs/el/README.md
examples/12-delegation-glue/run.sh
examples/12-delegation-glue/zones/db.example.test
examples/12-delegation-glue/zones/db.test
examples/13-dnssec-signing-model/README.md
examples/13-dnssec-signing-model/dnssec/signing-model.json
examples/13-dnssec-signing-model/docs/de/README.md
examples/13-dnssec-signing-model/docs/en/README.md
examples/13-dnssec-signing-model/docs/el/README.md
examples/13-dnssec-signing-model/run.sh
examples/13-dnssec-signing-model/zones/db.example.test
examples/14-ds-chain-of-trust/README.md
examples/14-ds-chain-of-trust/dnssec/ds-record.json
examples/14-ds-chain-of-trust/docs/de/README.md
examples/14-ds-chain-of-trust/docs/en/README.md
examples/14-ds-chain-of-trust/docs/el/README.md
examples/14-ds-chain-of-trust/run.sh
examples/14-ds-chain-of-trust/zones/db.example.test
examples/15-nsec-nsec3-model/README.md
examples/15-nsec-nsec3-model/dnssec/nsec-model.txt
examples/15-nsec-nsec3-model/docs/de/README.md
examples/15-nsec-nsec3-model/docs/en/README.md
examples/15-nsec-nsec3-model/docs/el/README.md
examples/15-nsec-nsec3-model/run.sh
examples/15-nsec-nsec3-model/zones/db.example.test
examples/16-tsig-zone-transfer/README.md
examples/16-tsig-zone-transfer/bind/transfer.conf
examples/16-tsig-zone-transfer/bind/tsig.conf
examples/16-tsig-zone-transfer/docs/de/README.md
examples/16-tsig-zone-transfer/docs/en/README.md
examples/16-tsig-zone-transfer/docs/el/README.md
examples/16-tsig-zone-transfer/run.sh
examples/17-dynamic-update-model/README.md
examples/17-dynamic-update-model/bind/update-policy.conf
examples/17-dynamic-update-model/docs/de/README.md
examples/17-dynamic-update-model/docs/en/README.md
examples/17-dynamic-update-model/docs/el/README.md
examples/17-dynamic-update-model/run.sh
examples/17-dynamic-update-model/updates/nsupdate.txt
examples/18-zone-transfer-acl/README.md
examples/18-zone-transfer-acl/bind/zone-transfer-acl.conf
examples/18-zone-transfer-acl/docs/de/README.md
examples/18-zone-transfer-acl/docs/en/README.md
examples/18-zone-transfer-acl/docs/el/README.md
examples/18-zone-transfer-acl/run.sh
examples/19-edns-udp-tcp-fallback/README.md
examples/19-edns-udp-tcp-fallback/diagnostics/edns-model.json
examples/19-edns-udp-tcp-fallback/docs/de/README.md
examples/19-edns-udp-tcp-fallback/docs/en/README.md
examples/19-edns-udp-tcp-fallback/docs/el/README.md
examples/19-edns-udp-tcp-fallback/run.sh
examples/20-dns-over-tls-model/README.md
examples/20-dns-over-tls-model/docs/de/README.md
examples/20-dns-over-tls-model/docs/en/README.md
examples/20-dns-over-tls-model/docs/el/README.md
examples/20-dns-over-tls-model/run.sh
examples/20-dns-over-tls-model/unbound/dot.conf
examples/21-dns-over-https-model/README.md
examples/21-dns-over-https-model/docs/de/README.md
examples/21-dns-over-https-model/docs/en/README.md
examples/21-dns-over-https-model/docs/el/README.md
examples/21-dns-over-https-model/doh/doh-endpoint.json
examples/21-dns-over-https-model/run.sh
examples/22-resolver-privacy-qname-minimization/README.md
examples/22-resolver-privacy-qname-minimization/docs/de/README.md
examples/22-resolver-privacy-qname-minimization/docs/en/README.md
examples/22-resolver-privacy-qname-minimization/docs/el/README.md
examples/22-resolver-privacy-qname-minimization/resolver/privacy.conf
examples/22-resolver-privacy-qname-minimization/run.sh
examples/23-response-policy-zone/README.md
examples/23-response-policy-zone/docs/de/README.md
examples/23-response-policy-zone/docs/en/README.md
examples/23-response-policy-zone/docs/el/README.md
examples/23-response-policy-zone/run.sh
examples/23-response-policy-zone/zones/db.rpz
examples/24-dns-firewall-amplification/README.md
examples/24-dns-firewall-amplification/bind/resolver-hardening.conf
examples/24-dns-firewall-amplification/docs/de/README.md
examples/24-dns-firewall-amplification/docs/en/README.md
examples/24-dns-firewall-amplification/docs/el/README.md
examples/24-dns-firewall-amplification/run.sh
examples/25-coredns-lab/README.md
examples/25-coredns-lab/coredns/Corefile
examples/25-coredns-lab/docs/de/README.md
examples/25-coredns-lab/docs/en/README.md
examples/25-coredns-lab/docs/el/README.md
examples/25-coredns-lab/run.sh
examples/25-coredns-lab/zones/db.example.test
examples/26-kubernetes-coredns-model/README.md
examples/26-kubernetes-coredns-model/docs/de/README.md
examples/26-kubernetes-coredns-model/docs/en/README.md
examples/26-kubernetes-coredns-model/docs/el/README.md
examples/26-kubernetes-coredns-model/kubernetes/coredns-configmap.yaml
examples/26-kubernetes-coredns-model/run.sh
examples/27-service-discovery-srv/README.md
examples/27-service-discovery-srv/docs/de/README.md
examples/27-service-discovery-srv/docs/en/README.md
examples/27-service-discovery-srv/docs/el/README.md
examples/27-service-discovery-srv/run.sh
examples/27-service-discovery-srv/zones/db.example.test
examples/28-monitoring-query-logs/README.md
examples/28-monitoring-query-logs/docs/de/README.md
examples/28-monitoring-query-logs/docs/en/README.md
examples/28-monitoring-query-logs/docs/el/README.md
examples/28-monitoring-query-logs/monitoring/query-log-sample.txt
examples/28-monitoring-query-logs/monitoring/slo.yaml
examples/28-monitoring-query-logs/run.sh
examples/29-incident-response-dns-outage/README.md
examples/29-incident-response-dns-outage/docs/de/README.md
examples/29-incident-response-dns-outage/docs/en/README.md
examples/29-incident-response-dns-outage/docs/el/README.md
examples/29-incident-response-dns-outage/incident/dns-incident-runbook.txt
examples/29-incident-response-dns-outage/run.sh
examples/30-troubleshooting-dns/README.md
examples/30-troubleshooting-dns/docs/de/README.md
examples/30-troubleshooting-dns/docs/en/README.md
examples/30-troubleshooting-dns/docs/el/README.md
examples/30-troubleshooting-dns/run.sh
examples/30-troubleshooting-dns/troubleshooting/decision-tree.yaml
examples/README.md
Setup & helper scripts1
scripts/provision_dns.sh

Orthevs Academy

Back to the Academy
ANSAutomation

Ansible

From agentless automation and inventories through playbooks, roles and collections to Vault, CI checks, controlled rollouts and operational evidence.

Open detail page ↗
PKIPKI & trust chains

Certificate Authority

From X.509 foundations through root and intermediate CAs, certificate chains and revocation to automation, audit, key compromise and recovery.

Open detail page ↗
CTRContainer runtime

containerd

Runtime architecture, OCI and CRI, content store, snapshotters, registry integration, Kubernetes nodes, rootless operation, hardening and incident response.

Open detail page ↗

DNS · Orthevs Academy

Frame the workshop application together.

For internal training, learning paths or technical deep dives, scope, sequence and audience can be aligned with the intended context.

Contact the Academy

Orthevs as an app

Install Orthevs

The Orthevs web app can be installed on supported mobile devices and desktop browsers.

iPhone and iPad

Open Orthevs in Safari. Tap Share, then Add to Home Screen. Enable Open as Web App if offered, then tap Add.

Android

For the web app, open the browser menu and choose Install app or Add to Home screen. Confirm the installation.

Desktop browser

Open the browser menu or the install icon in the address bar, then choose Install app or Add to Dock.

Web app installation depends on your browser. If no install prompt appears, follow the browser steps shown above.