Summer 2011 ESCC/Internet2 Joint Techs

close
Use Internet2 SiteID

Already have an Internet2 SiteID?
Sign in here.

Internet2 SiteID

DNSSEC at ORNL

Time 07/12/11 03:50PM-04:10PM

We do not host flash-based video files on our servers anymore. Please contact Web Support for further details about netcast videos.

Session Abstract

At ORNL, we use our own network registration (IPAM) system that integrates ISC DNS/DHCP services. This system uses a Carnegie Mellon version of NetReg for the unregistered, and our own NAC system that monitors for network compliance. DNSSEC implementation had to accommodate this infrastructure, as well as signing +250 domains. However, with the initial lack of personnel to implement this in-house, a DNSSEC appliance was needed. The transition was a bit bumpy and expensive. But with what we have learned and the advances of BIND, we

Speakers

Speaker Paige Stafford Oak Ridge National Laboratory

Presentation Media

media item thumbnail DNSSEC at ORNL (pdf)

Speaker Paige Stafford Oak Ridge National Laboratory

Secondary tracks Security Campus Networking Advanced Network Services

Session Media

media item thumbnail DNSSEC at ORNL Netcast Archive At ORNL, we use our own network registration (IPAM) system that integrates ISC DNS/DHCP services. This system uses a Carnegie Mellon version of NetReg for the unregistered, and our own NAC system that monitors for network compliance. DNSSEC implementation had to accommodate this infrastructure, as well as signing +250 domains. However, with the initial lack of personnel to implement this in-house, a DNSSEC appliance was needed. The transition was a bit bumpy and expensive. But with what we have learned and the advances of BIND, we media item thumbnail DNSSEC at ORNL Netcast Archive At ORNL, we use our own network registration (IPAM) system that integrates ISC DNS/DHCP services. This system uses a Carnegie Mellon version of NetReg for the unregistered, and our own NAC system that monitors for network compliance. DNSSEC implementation had to accommodate this infrastructure, as well as signing +250 domains. However, with the initial lack of personnel to implement this in-house, a DNSSEC appliance was needed. The transition was a bit bumpy and expensive. But with what we have learned and the advances of BIND, we

gold Sponsors