October 18, 2013 archive

TDYR #042 – On The Eve Of The Keene Pumpkin Festival 2013

TDYR #042 - On The Eve Of The Keene Pumpkin Festival 2013 by Dan York

Friday Fun: An IPv6 Pumpkin At Tomorrow’s Keene (NH) Pumpkin Festival

Tomorrow, somewhere among the 30,000+ pumpkins displayed at the Keene Pumpkin Festival 2013, will be this pumpkin stating proudly “IPv6″. Probably most people won’t have a clue… but it will be a fun little thing for the geeks and technology folks out there.  Living here in Keene, New Hampshire, as I do, you wind up carving a lot of pumpkins because the pumpkin festival is really our largest annual community event.  After a while, you get tired of carving just simple faces, so it’s always fun to do something different.  If you look at some of the photos (more links to photos here), 30,000-ish pumpkins is a huge amount of pumpkins… and somewhere in there will be one saying IPv6! :-)
Pumpkin carved with IPv6

What about you?  Are you going to carve any “IPv6 pumpkins” this year?  I thought about carving “::1″, but I thought even fewer people would know what that was! ;-)

DNS Servers Supporting DNSSEC

When you install a DNS “server” on your network, it generally acts as either: 1) an “authoritative server” serving out DNS records on behalf of a zone; or 2) a “recursive nameserver” (also called a “caching nameserver“, a “caching recursive nameserver” or simply a “resolver“) that performs DNS queries.

The following DNS software is known to support DNSSEC.  If you have additions, please contact us.

[EDITORIAL NOTE: This page is still a work in progress.  Individual pages are being created for each of the servers listed that will link to the server website but also to specific pages and tutorials about using that server with DNSSEC. The goal is to have this completed by the end of October 2013.]

Authoritative DNS servers

The following DNS servers can serve out DNSSEC-signed zones and typically also include mechanisms for directly performing DNSSEC-signing within the software (listed alphabetically):

  • BIND
  • Knot DNS
  • Microsoft Windows Server 2012
  • NSD
  • PowerDNS

Recursive DNS servers (a.k.a. “resolvers”)

The following DNS servers can perform validation of DNSSEC signatures when performing DNS queries (listed alphabetically):

  • BIND
  • Microsoft Windows Server 2012
  • Unbound

If you know of additional software we should list here, please contact us.

Video/Slides: Status of Best Current Operational Practices (BCOP) at RIPE67

At the RIPE67 event last week, our Jan Zorz joined Benno Overreinder on stage to give an overview of the ongoing efforts to expand sharing of “best current operational practices” (BCOPs) between network operators around the world. Jan’s slides are available and the video of the talk can be viewed on the RIPE 67 site:

RIPE 67 BCOP Presentation

To learn more about this initiative, please visit our BCOP page.