^ Top

NANOG Meeting Presentation Abstract

DNSSEC Deployment in the Root Zone
Meeting: NANOG48
Date / Time: 2010-02-24 10:00am - 11:00am
Room: Salon H
Presenters: Moderators:

Duane Wessels, VeriSign

Following my college education in Physics and Telecommunications, I worked for many years on the Squid/IRCache project at UCSD. My, company The Measurement Factory, develops open source testing and measurement tools for HTTP and DNS. Currently I am the Director of the Domain Name System Operations Analysis and Research Center (DNS-OARC).
Panelists:

Dave Knight, ICANN

Dave Knight is a DNS Engineer at ICANN, where he is part of the team operating the L-root nameserver and contributing to DNSSEC for the root zone and for ICANN's own infrastructure. Before joining ICANN Dave served as Director of the Resolution Services group at Afilias, responsible for the anycast, TLD authority server platform and the deployment of DNSSEC in the .org zone. Dave has also been involved in DNSSEC projects at Internet Systems Consortium and RIPE NCC.

Keith Mitchell, DNS-OARC

Keith Mitchell has recently been appointed Director of Engineering at the Internet Systems Consortium, where he has responsibility for ISC's open-source software and network development. This includes operation of ISC's F-root, DNS and public benefit hosting network infrastructure. Prior to this at ISC he managed the OARC programme for DNS operators, and remains President of the newly autonomous nonprofit OARC Inc. <BR> <BR> Before moving to the US, Keith conceived the UK Network Operators' Forum UKNOF in 2005, and has been chairing this for its past dozen successful meetings. He has previously been involved in Internet engineering and governance for some 20 years, founding the London Internet Exchange (LINX) in 1994 where he was Executive Chairman until starting up XchangePoint in 2000. He has served as a non-executive Director of Nominet UK, Chairman of the RIPE NCC Executive Board and founded the UK's first commercial Internet provider, PIPEX in 1992.
Suzanne Woolf, ISC.
Abstract: In 2009 ICANN, VeriSign and the US Department of Commerce National Telecommunications and Information Administration (US DoC NTIA) began work on a collaborative project to deploy DNSSEC in the root zone of the DNS.



An overview of the project was presented as a lightning talk at NANOG 47, and details of the planned deployment approach were also discussed at the ISP Security BOF at that meeting.



Signing of the root zone started in December 2009, and the operational key management procedures continue to be exercised.



The deployment of DNSSEC in the root zone will trigger large responses from root servers, and it is not understood precisely what impact that will have on operators. Much effort has been put into instrumentation of the root servers to allow analysis of the reaction of the system as a whole to the staged deployment of DNSSEC, but given the widely-dispersed nature of the DNS another critical aspect of this deployment is to engage operators both so that they are aware of the work that is going on, and so that the deployment team can hear from operators how the changes are affecting them.



In January 2009 DNSSEC resource records will appear in the root zone as served by just the L root server. Data from root servers will be collected around the transition point and analysis will begin. NANOG 48 will be the first venue where the impact of the changes can be discussed.



This panel will provide a brief overview of the project and the deployment strategy, and will outline operational details of progress to date.
Files: pdfDave Knight Presentation(PDF)
youtubeDNSSEC Deployment in the Root Zone
pdfDuane Wessels Presentation(PDF)
pdfKeith Mitchell Presentation(PDF)
pdfSuzanne Woolf Presentation(PDF)
Sponsors: None.

Back to NANOG48 agenda.

NANOG48 Abstracts

  • BGP 101
    Speakers:
    Avi Freedman, ServerCentral;
  • BGP 102
    Speakers:
    Avi Freedman, ServerCentral;
  • Multiservice Networks Panel
    Moderators:
    Nina Bargisen, TDC A/S; Panelists:
    Joe Provo, ITA Software; Chris Luke, Easynet; Ted SeelySprint; .
    Walt Magnussen, Texas A&M;
  • Multiservice Networks Panel
    Moderators:
    Nina Bargisen, TDC A/S; Panelists:
    Joe Provo, ITA Software; Chris Luke, Easynet; Ted SeelySprint; .
    Walt Magnussen, Texas A&M;
  • Multiservice Networks Panel
    Moderators:
    Nina Bargisen, TDC A/S; Panelists:
    Joe Provo, ITA Software; Chris Luke, Easynet; Ted SeelySprint; .
    Walt Magnussen, Texas A&M;
  • Multiservice Networks Panel
    Moderators:
    Nina Bargisen, TDC A/S; Panelists:
    Joe Provo, ITA Software; Chris Luke, Easynet; Ted SeelySprint; .
    Walt Magnussen, Texas A&M;
  • Multiservice Networks Panel
    Moderators:
    Nina Bargisen, TDC A/S; Panelists:
    Joe Provo, ITA Software; Chris Luke, Easynet; Ted SeelySprint; .
    Walt Magnussen, Texas A&M;
  • ISP Security Track
    Moderators:
    Barry Greene, Juniper Networks; Speakers:
    John Kristoff, Team Cymru; Merike Kaeo, Double Shot Security;
  • ISP Security Track
    Moderators:
    Barry Greene, Juniper Networks; Speakers:
    John Kristoff, Team Cymru; Merike Kaeo, Double Shot Security;
  • ISP Security Track
    Moderators:
    Barry Greene, Juniper Networks; Speakers:
    John Kristoff, Team Cymru; Merike Kaeo, Double Shot Security;
  • SIP Peering Panel
    Moderators:
    Sonia Sakovich, Sprint; Panelists:
    Josh Sahala, Intelepeer; Tim Cody, Neustar; Matt Christopher, Comcast; Yi Chu, Sprint;
  • SIP Peering Panel
    Moderators:
    Sonia Sakovich, Sprint; Panelists:
    Josh Sahala, Intelepeer; Tim Cody, Neustar; Matt Christopher, Comcast; Yi Chu, Sprint;
  • SIP Peering Panel
    Moderators:
    Sonia Sakovich, Sprint; Panelists:
    Josh Sahala, Intelepeer; Tim Cody, Neustar; Matt Christopher, Comcast; Yi Chu, Sprint;
  • SIP Peering Panel
    Moderators:
    Sonia Sakovich, Sprint; Panelists:
    Josh Sahala, Intelepeer; Tim Cody, Neustar; Matt Christopher, Comcast; Yi Chu, Sprint;
  • SIP Peering Panel
    Moderators:
    Sonia Sakovich, Sprint; Panelists:
    Josh Sahala, Intelepeer; Tim Cody, Neustar; Matt Christopher, Comcast; Yi Chu, Sprint;
  • Network Tools Track
    Moderators:
    Mohit Lad, ThousandEyes; Speakers:
    Rene Wilhelm, RIPE; Manish Karir, Merit Network;
  • Network Tools Track
    Moderators:
    Mohit Lad, ThousandEyes; Speakers:
    Rene Wilhelm, RIPE; Manish Karir, Merit Network;
  • Network Tools Track
    Moderators:
    Mohit Lad, ThousandEyes; Speakers:
    Rene Wilhelm, RIPE; Manish Karir, Merit Network;

 
^ Back to Top