DNS

Introduction to CoreDNS in a Dockerised environment

23 Feb 2019

CoreDNS is a relatively new DNS server written in Go. CoreDNS was written keeping in mind the evolving needs of today and the ability to work well with cloud native applications. In Kubernetes 1.13, CoreDNS is the default cluster DNS server.

Read More

DNSSEC Keys and Signing Explained

19 Feb 2019

This article describes what happens when a zone is signed with DNSSEC. This document helps to understand the concept of zone signing and does not detail the actual steps for signing a zone.

Note: I have taken some liberties with this article in the interest of simplicity. For full and accurate information, refer DNSSEC RFCs. NXDOMAIN validation is not included in this article.

Let’s consider an unsigned zone test.com. Below is a representation of the zone file with sample records with only the relevant fields.

Read More