Internet Initiative Japan Inc. · TSE:3774
Internet Initiative Japan — Internet Systems Consortium — Technical Presentation (July 2008)
10 slides from Internet Initiative Japan's technical presentation, July 2008
Slide 1: BIND Forum member meeting 2008
BIND Forum member meeting 2008 Dublin, July 2008
Slide 2: BIND news/releases
BIND news/releases • overview of 9.5 • plans for 9.6 and 9.7 • Forgery resilience, with specialemphasis on D N SSEC • BIND 10 status 2
Slide 3: BIND 9.5 - what's new
BIND 9.5 - what’s new • Added new statistics capabilities – Mini-http server – Sends XML to the client. XSLT provided to view on browser • GSS-TSIG support – Active directory • Efficient LRU cache cleaning mechanism. • More efficient ACL handling • NSID (RFC5001) 3
Slide 4: Plans for BIND 9.6
Plans for BIND 9.6 • Main new items are – NSEC3 support, server/client/toolset • Sponsored by Nominet, Afilias – Online re-signing • Sponsored by Nominet – Crypto hardware acceleration support – Release around year end/early 2009 4
Slide 5: Plans for BIND 9.7
Plans for BIND 9.7 • Make it easier to deploy DNSSEC by dealing automatically with the various steps – Authoritative servers/zone maintenance • Key generation, key storage, key rollover, DS/DLV upload – Recursive servers/validators • Trust anchor management • Debugging tools 5
Slide 6: Forgery resilience
Forgery resilience • Everyone knows about Kaminisky’s attack • What did ISC do? – Actively participate in bringing in vendors, evaluate the risk and the response – Work on BIND modifications to increase forgery resilience. Mainly UDP port randomisation. 6
Slide 7: Forgery resilience
Forgery resilience • Dual approach – Immediate patch to 9.3, 9.4 and 9.5 • Has performance implications with performance – Better performance modification • Lots of changes to BIND I/O core • We felt required a beta process • Beta couldn’t be released until patch release date (July 8th) 7
Slide 8: Forgery resilience
Forgery resilience • Update – -P2 versions coming out in a few days to improve: • socket handling • Resource utilisation • Ensure UDP queries do not completely take over the server 8
Slide 9: BIND 10
BIND 10 • Funding progress – Initial core of sponsors getting together to discuss details of contract – Preliminary work beginning now – Effort in earnest after holiday season 9
Slide 10: Questions?
a Ly INTERNET SYSTEMS CONSORTIUM A q Questions? 10
Internet Systems Consortium — Technical Presentation (July 2008) on 6ix