DNS Workshop – Overview
Overview
This workshop covers the path from namespace fundamentals to secure operations with delegation, DNSSEC, resolver hardening, CoreDNS, Kubernetes DNS, monitoring and incident response.
Quickstart
# Workshop content is provided through the Orthevs Academy.
chmod +x scripts/provision_dns.sh
./scripts/provision_dns.sh --dry-run
Then start with the curriculum and first examples:
less docs/curriculum-dns-EN.md
less workshops/01-fundamentals-dns-EN.md
cd examples/00-lab-skeleton
./run.sh
Audience
This workshop is for developers, DevOps engineers, system engineers, platform engineers, SREs, network teams, Kubernetes administrators and security engineers who need to analyze, operate and secure DNS correctly.
Learning Path
| Level | Focus | Result |
|---|---|---|
| Fundamentals | DNS namespace, resolvers, zone files, record types and dig |
You can inspect DNS answers and simple zones reproducibly. |
| Intermediate | Delegation, caching, negative caching, reverse DNS, mail DNS, CoreDNS and Kubernetes DNS | You can analyze common operational cases and failure modes. |
| Professional | Authoritative operations, resolver operations, transfers, split horizon, monitoring and change management | You can plan and prove DNS changes safely. |
| Advanced + Security | DNSSEC, TSIG, RPZ, DoT/DoH, privacy, amplification, incident response and audit | You can evaluate and harden DNS from a security perspective. |
Structure
This workshop follows the same structure as the Kubernetes workshop. The topic changes, the navigation model stays consistent.
Official Sources and Boundary
- RFC 1034, Domain Names - Concepts and Facilities: https://datatracker.ietf.org/doc/html/rfc1034
- RFC 1035, Domain Names - Implementation and Specification: https://datatracker.ietf.org/doc/html/rfc1035
- RFC 8499, DNS Terminology: https://www.rfc-editor.org/info/rfc8499/
- RFC 6891, Extension Mechanisms for DNS (EDNS(0)): https://datatracker.ietf.org/doc/html/rfc6891
- RFC 4033, DNS Security Introduction and Requirements: https://datatracker.ietf.org/doc/html/rfc4033
- RFC 9364, DNSSEC Best Current Practice: https://www.rfc-editor.org/info/rfc9364/
- IANA Root Zone Database: https://www.iana.org/domains/root/db
- ISC BIND 9 Documentation: https://bind9.readthedocs.io/
- CoreDNS Documentation: https://coredns.io/manual/toc/
This workshop does not introduce DNS protocol rules. It maps official DNS concepts into labs, review questions, zone files, resolver models and operational workflows.