|
|
Library and Tools for Server-Side DNSSEC Implementation
Včelák, Jan ; Grégr, Matěj (referee) ; Matoušek, Petr (advisor)
Tato práce se zabývá analýzou současných open source řešení pro zabezpečení DNS zón pomocí technologie DNSSEC. Na základě provedené rešerše je navržena a implementována nová knihovna pro použití na autoritativních DNS serverech. Cílem knihovny je zachovat výhody stávajících řešení a vyřešit jejich nedostatky. Součástí návrhu je i sada nástrojů pro správu politiky a klíčů. Funkčnost vytvořené knihovny je ukázána na jejím použití v serveru Knot DNS.
|
|
|
Framework for DNS Server Testing
Novák, Martin ; Grégr, Matěj (referee) ; Matoušek, Petr (advisor)
This thesis deals with the modifications of the framework designed for DNS servers testing. Framework is developed by NIC.CZ association and is used primarily for testing the DNS server Knot DNS. The aim of this work are modifications of the framework that will allow simpler testing with this framework, such as: support for multiple implementations of DNS servers, parallel testing, components dummy server and box-in-the-middle, division into multiple components and overall modification of the existing framework. Introduction of thesis is dedicated to the authoritative DNS servers and to the foundations of testing. The remaining part of the thesis deals with the state of the existing framework and the state and testing of modified framework.
|
|
|
Laboratory scenarios describing DNS system
Sakala, Peter ; Langhammer, Lukáš (referee) ; Jeřábek, Jan (advisor)
The master’s thesis deals with Domain Name System (DNS) and its practical use. It describes hierarchy of domain names, resource record types, protocol used, as well as DNSSEC extension. The most utilized implementations of authoritative and recursive DNS servers are presented. Virtualization, containers and other tools with potential use in labs are described. Two lab scenarios in virtualized environment with instructions for students were designed and developed in this thesis.
|
|
|
Synchronization of DNS Records between LDAP Database and DNS Server
Bašti, Martin ; Matoušek, Petr (referee) ; Čejka, Rudolf (advisor)
Cílem této práce je prozkoumat možnosti uložení DNS dat v LDAP databázi a jejich oboustranné synchronizace s DNS serverem s využitím standardních technologií, paralelizace a jednoduché rozšiřitelnosti o podporu různých DNS a LDAP serverů s různými DNS schématy. Práce dále popisuje různa schémata pro uložení dat v LDAP databázi a analyzuje problémy spojené se synchronizací a navrhuje jejich řešení. Výsledkem je prototyp synchronizační aplikace s doporučenými nastaveními pro DNS server a LDAP databázi, která je schopna efektivně synchronizovat DNS data.
|
|
|
Mobile Application for DNS Administration
Galajda, Denis ; Ovšonka, Daniel (referee) ; Kováčik, Michal (advisor)
This bachelor's thesis deals with possibilities and specifics of developing a custom mobile applicaion for DNS administration on Android. The goal is to create an easy-to-use application which will allow the user to manage zones and resource records of BIND9 nameserver. This issue is solved by manipulation of zone files over SSH connection, controlled through the modern user interface. The resulting programm allows the users to comfortably manage a DNS server from their smartphone practically anywhere.
|
|
|
DNS Service with Location Information Extension
Veselý, Vladimír ; Matoušek, Petr (referee) ; Čejka, Rudolf (advisor)
Accordingly to spreading of Internet users it is necessary to start solving the problem of optimized client access to key services. DNS service as widely used standard of hierarchy distributed database of all connected devices offers a great options in this branch of IT. My thesis deals with existing extensions of DNS system about location of server or service. Simultaneously informs reader with issues about load balancing and improving network performance.
|
|
|
Establishment of the Linux internet gateway using advanced filtering
Matocha, Tomáš ; Pust, Radim (referee) ; Jelínek, Mojmír (advisor)
The thesis Establishment of the Linux internet gateway using advanced filtering focuses on~the installation of~the Linux operating system on~the older computers, that functions as a gateway to connect clients in the internal network to the Internet. The thesis describes creation an advanced filter with using iptables. Shows some types of security against attacks from the Internet. The other chapters are discussed, advanced traffic control mechanism (such as a TC and a qdisc). The system queue, it is highly beneficial where it is necessary to hierarchically divide traffic between users. It describes types of queue and assembled configurations for clients in the internal network. Next chapter describes the DNS server caching-only type and application denyhosts, which increases the overall security system. Have your own DNS server is certified, especially if we want to reduce the data traffic. Last chapter describes the RADIUS server and its implementation using Apache and MySQL database. Furthermore, the configuration options are described and the examples of the particular configurations are provided. Finally, it presented a system for authentication through the RADIUS server. The thesis seeks to provide a~complex view of security and filtering.
|
|
|
Benchmarking of DNS Implementations
Haller, Martin ; Grégr, Matěj (referee) ; Matoušek, Petr (advisor)
This bachelor thesis has been made with assistance of CZ.NIC (Czech TLD administrator) association. Goal of this thesis was to examine methodology of authoritative DNS servers benchmarking, extend it and test it. The bachelor thesis contains overview of current DNS benchmarking methodologies. The current methodologies were analyzed, revised and extended. As a result a new complex methodology was proposed. Popular open source DNS implementations were selected and benchmarked by the new methodology. Results of the benchmark were discussed. The new methodology and the results were presented at DNS-OARC workshop. The methodology and the results were rated very well.
|
|
|
Administration of DNS Servers for FreenetIS Project
Raška, David ; Janoušek, Vladimír (referee) ; Malčík, Dominik (advisor)
The goal of this bachelor's thesis is to introduce an alternative option of DNS servers management using graphical interface. In this thesis it is implemented a graphic user interface for DNS servers, zones and records management and connection of a DNS server to a network management system. ISC BIND 9 software is used as a DNS server and management interface is implemented to open-source project FreenetIS. Connection of both parts is made by a script, which continuously updates DNS configuration on a server.
|
|
|
Laboratory scenarios describing DNS system
Sakala, Peter ; Langhammer, Lukáš (referee) ; Jeřábek, Jan (advisor)
The master’s thesis deals with Domain Name System (DNS) and its practical use. It describes hierarchy of domain names, resource record types, protocol used, as well as DNSSEC extension. The most utilized implementations of authoritative and recursive DNS servers are presented. Virtualization, containers and other tools with potential use in labs are described. Two lab scenarios in virtualized environment with instructions for students were designed and developed in this thesis.
|
guest ::
