Jan-Piet Mens

Jan-Piet is an independent Unix/Linux consultant and sysadmin who's worked with Unix-systems since 1985.

JP does odd bits of coding, and works extensively with the Domain Name System and as such, he authored the book Alternative DNS Servers as well as a variety of other technical publications. He contributed several modules and the documentation system to the Ansible project and dreamed up the Open Source (MQTT-based) OwnTracks project. JP blogs at jpmens.net


Session

05-07
09:50
45min
The Cascade DNSSEC Signing Solution
Jan-Piet Mens

Cascade is the new DNSSEC signing solution by NLnet Labs slated to replace OpenDNSSEC. It manages keys on disk or on HSMs, has sensible defaults, provides review hooks which allow us to use our preferred verification solutions, very decent logging, and it is designed to be easy to interact with and to communicate sensibly what it is doing.

In this talk I present Cascade, discuss some of its features, and I will of course demo signing a zone with it.

If you've been putting off DNSSEC-signing your zones, now's the chance to embark on that project!

Room 3