overview dnssec -...
TRANSCRIPT
![Page 1: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/1.jpg)
![Page 2: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/2.jpg)
Overview DNSSEC
Performance More…
![Page 3: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/3.jpg)
Overview
![Page 4: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/4.jpg)
Overview DNSSEC
Performance More…
![Page 5: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/5.jpg)
Overview DNSSEC
Performance More…
![Page 6: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/6.jpg)
Overview DNSSEC
Performance More…
![Page 7: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/7.jpg)
Overview DNSSEC
Performance More…
![Page 8: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/8.jpg)
Overview DNSSEC
Performance More…
![Page 9: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/9.jpg)
DNSSEC
![Page 10: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/10.jpg)
Overview DNSSEC
Performance More…
![Page 11: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/11.jpg)
Overview DNSSEC
Performance More…
Latest RFCs NSEC3 Support
RSA/SHA-2, ECDSA Signing
Automated Trust Anchor Rollover
Support for 3rd Party Key Management (HSMs)
ENABLING ENTERPRISE DNSSEC ROLLOUT
![Page 12: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/12.jpg)
Overview DNSSEC
Performance More…
Support for Online Zone Signing. Sign/unsign/change DNSSEC settings on a live
zone
Add/remove records dynamically on a signed zone
Active Directory Integrated Support for dynamic updates
Preserving the multi-master DNS model
Leverage AD for secure key distribution and Trust Anchor distribution
Dynamic Update support is available for file backed zones as well
Improved DNS/DNSSEC server performance
ENABLING ENTERPRISE DNSSEC ROLLOUT
![Page 13: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/13.jpg)
Overview DNSSEC
Performance More…ENABLING ENTERPRISE DNSSEC ROLLOUT
![Page 14: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/14.jpg)
Automated re-signing on static and dynamic updates
Automated key rollovers
Automated signature refresh
Automated updating of secure delegations
Automated distribution and updating of Trust Anchors - RFC 5011
ENABLING ENTERPRISE DNSSEC ROLLOUT
Overview DNSSEC
Operations More…
![Page 15: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/15.jpg)
Performance
![Page 16: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/16.jpg)
Overview DNSSEC
Performance More…
100 99.9987 98.993
92.332
72.03
0
20
40
60
80
100
120
50000 75000 120000 200000 280000
Pe
rce
nta
ge
Re
spo
nd
ed
by
Win
DN
S
QPS
Percentage Queries Responded
![Page 17: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/17.jpg)
Overview DNSSEC
Performance More…
![Page 18: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/18.jpg)
Overview DNSSEC
Performance More…
0.00
1.00
2.00
3.00
4.00
5.00
6.00
7.00
0.00
50.00
100.00
150.00
200.00
250.00
300.00
350.00
Nodes/second signed Memory factor
![Page 19: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/19.jpg)
Overview DNSSEC
Performance More…
http://lists.msft.net
![Page 20: Overview DNSSEC - archive.icann.orgarchive.icann.org/.../presentation-windows-dns-server-23jun14-en.pdf · Overview DNSSEC Performance More… Support for Online Zone Signing. Sign/unsign/change](https://reader033.vdocuments.mx/reader033/viewer/2022052001/6013d24d6c82b07e913f5817/html5/thumbnails/20.jpg)
Questions Suggestions
Feedback ?