Workshop wiki · DNS

DNS

Complete, versioned learning material for this workshop—from reference documentation and workshop levels to exercises, assessments and the supporting texts for every practice module.

DNS

My learning progress

With the web app option enabled, your progress is stored on this device.

Learning progress in the web app

Mark chapters as read, view reading progress and check off practice modules after enabling the optional web app. Workshop progress is calculated from chapters across all document pages. Your choices stay on this device; there is no account or server sync. Installation is not required. Withdrawing your choice in Privacy settings deletes the progress.

Workshop progress0%
Practice modules completed0 / 31
Documents read0 / 94
Workshop progress0%
0%
0 / 1297 chapters read

Practice modules

Workshop examples as ZIP files

All 31 practice examples in this workshop are available as individual ZIP files. Choose an example to download its package directly.

00lab-skeleton 5 Files · 9.5 KB · SHA-256 6918b5208e94 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • queries/queries.txt
  • run.sh
01dns-cli-inspection 5 Files · 9.5 KB · SHA-256 51ae497685ed Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • queries/queries.txt
  • run.sh
02zone-file-analysis 5 Files · 9.7 KB · SHA-256 2f0c51e77033 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
03authoritative-bind-model 6 Files · 10.2 KB · SHA-256 33afb232b28d Download example ZIP
Files in the ZIP · 6
  • README.md
  • bind/named.conf.local
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
04recursive-resolver-unbound-model 5 Files · 9.9 KB · SHA-256 3c66ccf145d3 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • unbound/unbound.conf
05forwarding-cache-model 5 Files · 9.7 KB · SHA-256 165239eb42d1 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • resolver/forward-zones.conf
  • run.sh
06split-horizon-views 6 Files · 10.1 KB · SHA-256 77c7be76df4d Download example ZIP
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test.external
  • zones/db.example.test.internal
07reverse-dns-ptr 5 Files · 9.6 KB · SHA-256 6ec490c7601d Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.192.0.2
08cname-and-alias-rules 6 Files · 10.2 KB · SHA-256 135893c531a8 Download example ZIP
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • notes/cname-conflict-example.txt
  • run.sh
  • zones/db.example.test
09mail-dns-spf-dkim-dmarc 5 Files · 9.9 KB · SHA-256 95079ce94c03 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
10ttl-cache-planning 6 Files · 10.0 KB · SHA-256 b156f52bfa54 Download example ZIP
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • plans/ttl-plan.yaml
  • run.sh
  • zones/db.example.test
11negative-caching-nxdomain 6 Files · 10.3 KB · SHA-256 d86300e8b119 Download example ZIP
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • notes/negative-cache.txt
  • run.sh
  • zones/db.example.test
12delegation-glue 6 Files · 9.9 KB · SHA-256 7c9440fb3a38 Download example ZIP
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
  • zones/db.test
13dnssec-signing-model 6 Files · 10.2 KB · SHA-256 c941c39f41e2 Download example ZIP
Files in the ZIP · 6
  • README.md
  • dnssec/signing-model.json
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
14ds-chain-of-trust 6 Files · 10.1 KB · SHA-256 37e3f1f8420f Download example ZIP
Files in the ZIP · 6
  • README.md
  • dnssec/ds-record.json
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
15nsec-nsec3-model 6 Files · 10.1 KB · SHA-256 6ca074477b8f Download example ZIP
Files in the ZIP · 6
  • README.md
  • dnssec/nsec-model.txt
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
16tsig-zone-transfer 6 Files · 9.9 KB · SHA-256 4a536df9373b Download example ZIP
Files in the ZIP · 6
  • README.md
  • bind/transfer.conf
  • bind/tsig.conf
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
17dynamic-update-model 6 Files · 10.1 KB · SHA-256 47ba2876b140 Download example ZIP
Files in the ZIP · 6
  • README.md
  • bind/update-policy.conf
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • updates/nsupdate.txt
18zone-transfer-acl 5 Files · 9.6 KB · SHA-256 bf23397961bb Download example ZIP
Files in the ZIP · 5
  • README.md
  • bind/zone-transfer-acl.conf
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
19edns-udp-tcp-fallback 5 Files · 9.8 KB · SHA-256 ab9a94e26f46 Download example ZIP
Files in the ZIP · 5
  • README.md
  • diagnostics/edns-model.json
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
20dns-over-tls-model 5 Files · 9.7 KB · SHA-256 f5c0766b9179 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • unbound/dot.conf
21dns-over-https-model 5 Files · 9.7 KB · SHA-256 e749a9ad6b29 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • doh/doh-endpoint.json
  • run.sh
22resolver-privacy-qname-minimization 5 Files · 10.0 KB · SHA-256 119d534a34a4 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • resolver/privacy.conf
  • run.sh
23response-policy-zone 5 Files · 9.7 KB · SHA-256 e5cbfd940311 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.rpz
24dns-firewall-amplification 5 Files · 9.8 KB · SHA-256 d448f2b2f9ad Download example ZIP
Files in the ZIP · 5
  • README.md
  • bind/resolver-hardening.conf
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
25coredns-lab 6 Files · 9.8 KB · SHA-256 64088c182792 Download example ZIP
Files in the ZIP · 6
  • README.md
  • coredns/Corefile
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
26kubernetes-coredns-model 5 Files · 9.9 KB · SHA-256 8ff5f56fc7e3 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • kubernetes/coredns-configmap.yaml
  • run.sh
27service-discovery-srv 5 Files · 8.2 KB · SHA-256 cf086a6adeb6 Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • zones/db.example.test
28monitoring-query-logs 6 Files · 8.5 KB · SHA-256 5c45a130368f Download example ZIP
Files in the ZIP · 6
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • monitoring/query-log-sample.txt
  • monitoring/slo.yaml
  • run.sh
29incident-response-dns-outage 5 Files · 8.4 KB · SHA-256 57649d89775d Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • incident/dns-incident-runbook.txt
  • run.sh
30troubleshooting-dns 5 Files · 8.2 KB · SHA-256 7b608127ee1e Download example ZIP
Files in the ZIP · 5
  • README.md
  • docs/de/README.md
  • docs/en/README.md
  • run.sh
  • troubleshooting/decision-tree.yaml

Learning material

Documentation in the Orthevs Wiki

The material retains its subject-specific structure. German and English versions are cross-linked, and diagrams are generated directly from the included Mermaid sources.

Workshop overview

1

Technical documentation

13
English · 70.5 KB

Architecture: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.5 KB

Best Practices: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.4 KB

Command Reference: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.3 KB

Concepts: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.4 KB

Curriculum: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.3 KB

Diagrams: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.7 KB

Cloud Environment: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 71.1 KB

Bare Metal Environment: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.7 KB

VM Environment: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.6 KB

WSL Environment: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.4 KB

Operations: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.3 KB

Security: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗
English · 70.6 KB

Troubleshooting: DNS

Scope is treated as a reviewable DNS building block in this workshop. The relevant point is not just a query, but its position in the name space, zone, delegation, resolver path, cache, transport and security model.

Open document ↗

Workshop levels

4

Exercises

4

Assessments and solutions

9
English · 29.3 KB

Assessment: Fundamentals DNS

Explain DNS roles in the context of DNS. Name suitable queries or artifacts and describe a realistic failure mode.

Open document ↗
English · 35.2 KB

Solution: Fundamentals DNS

A good answer for DNS roles names role, zone, RRtype, expected RCODE and evidence. It separates query symptom, zone data, resolver cache and delegation.

Open document ↗
English · 29.3 KB

Assessment: Intermediate DNS

Explain DNS roles in the context of DNS. Name suitable queries or artifacts and describe a realistic failure mode.

Open document ↗
English · 35.2 KB

Solution: Intermediate DNS

A good answer for DNS roles names role, zone, RRtype, expected RCODE and evidence. It separates query symptom, zone data, resolver cache and delegation.

Open document ↗
English · 29.3 KB

Assessment: Professional DNS

Explain DNS roles in the context of DNS. Name suitable queries or artifacts and describe a realistic failure mode.

Open document ↗
English · 35.2 KB

Solution: Professional DNS

A good answer for DNS roles names role, zone, RRtype, expected RCODE and evidence. It separates query symptom, zone data, resolver cache and delegation.

Open document ↗
English · 29.4 KB

Assessment: Advanced Security DNS

Explain DNS roles in the context of DNS. Name suitable queries or artifacts and describe a realistic failure mode.

Open document ↗
English · 35.3 KB

Solution: Advanced Security DNS

A good answer for DNS roles names role, zone, RRtype, expected RCODE and evidence. It separates query symptom, zone data, resolver cache and delegation.

Open document ↗
English · 27.2 KB

Official Certifications and Exam Context: DNS

This workshop does not award a universal official DNS certificate. DNS knowledge is relevant for networking, Linux, cloud, Kubernetes and security exams.

Open document ↗

Practice modules

31 modules as one continuous learning path.

The sequence remains unchanged: from the lab skeleton through technical foundations and operating models to final troubleshooting. The technical directory names are deliberately preserved.

00 lab-skeleton

2

01 dns-cli-inspection

2

02 zone-file-analysis

2

03 authoritative-bind-model

2

04 recursive-resolver-unbound-model

2

05 forwarding-cache-model

2

06 split-horizon-views

2

07 reverse-dns-ptr

2

08 cname-and-alias-rules

2

09 mail-dns-spf-dkim-dmarc

2

10 ttl-cache-planning

2

11 negative-caching-nxdomain

2

12 delegation-glue

2

13 dnssec-signing-model

2

14 ds-chain-of-trust

2

15 nsec-nsec3-model

2

16 tsig-zone-transfer

2

17 dynamic-update-model

2

18 zone-transfer-acl

2

19 edns-udp-tcp-fallback

2

20 dns-over-tls-model

2

21 dns-over-https-model

2

22 resolver-privacy-qname-minimization

2

23 response-policy-zone

2

24 dns-firewall-amplification

2

25 coredns-lab

2

26 kubernetes-coredns-model

2

27 service-discovery-srv

2

28 monitoring-query-logs

2

29 incident-response-dns-outage

2

30 troubleshooting-dns

2

DNS · Orthevs Academy

31 modules as one continuous learning path.

The sequence remains unchanged: from the lab skeleton through technical foundations and operating models to final troubleshooting. The technical directory names are deliberately preserved.

Orthevs – Engineering the foundation for what comes next.

Orthevs as an app

Install Orthevs

The Orthevs web app can be installed on supported mobile devices and desktop browsers.

iPhone and iPad

Open Orthevs in Safari. Tap Share, then Add to Home Screen. Enable Open as Web App if offered, then tap Add.

Android

For the web app, open the browser menu and choose Install app or Add to Home screen. Confirm the installation.

Desktop browser

Open the browser menu or the install icon in the address bar, then choose Install app or Add to Dock.

Web app installation depends on your browser. If no install prompt appears, follow the browser steps shown above.