Ga naar 'Home'


634 artikelen

  1. Games, Brains and Learning

    VU-onderzoeksinstituut LEARN! organiseert een interessante lezing over de waarde van computerspellen voor de ontwikkeling en het leerproces van kinderen.
    Student aan het werk op laptop
  2. Final report DNSSEC in SURFdomeinen

    Today we published the Final report DNSSEC in SURFdomeinen describing our DNSSEC deployment. This will be the last post for a while on our DNSSEC deployment, we are going to continue later this year. In the mean time, I will try to post updates when I have interesting information available for instance about the validation rate as the year progresses.
    Screenshot of the report
  3. Monitoring signature expiration online

    One of the things we discovered while we were rolling out our deployment is that it is very important to monitor the availability of signed zones (see also this post by Migiel de Vos on monitoring). We have deployed default monitoring based on Nagios, with checks that verify if all signer components are running. One of the things we cannot check that way is whether signatures are valid for long enough. And that is a very important indicator of the status of the signer. Even if the signer daemon is running, that does not guarantee that it is actually resigning the zone correctly.
    Screenshot of computer settings
  4. Monitoring DNSSEC

    DNS is currently a “once it runs, never touch it again” infrastructure. This changes with the introduction of DNSSEC. Managing a DNSSEC signed zone involves a continuous effort of resigning zones and generating key material. Apart from that, DNS is a fundamental Internet protocol, thus the changes required to implement DNSSEC have an impact at many levels of the Internet infrastructure. In turn, DNSSEC is affected by many network elements. The result of this is that there are potentially some operational issues that might affect a DNSSEC signed zone.
    Student aan het werk op laptop