Lesson 8 of 12 · Resolver, DNSSEC and mail
DNSSEC: sign with dnssec-policy, roll keys, validate and troubleshoot
Objective
Sign masterlinux.lab without handling a single signature by hand, understand what BIND does during a key rollover, have resolvers validate the answers, and find the cause of a DNSSEC SERVFAIL in a few minutes. That is the incident that makes the most noise.
This lesson is part of the full course
Unlock Production DNS with BIND 9 and Unbound to read every lesson, do the exercises, access the simulations and earn your certificate.
Already enrolled? Log in.