Your cart is empty.
Keep shoppingUltimate DNS Warrior
15 students
Ultimate DNS Warrior
DNS Protocol and BIND Server - Expert Level - Incudes latest protocol advancements: DOH/DOT/Cookies - Expert T.Shooting
Last updated 8/2025
English
What you'll learn
- In depth working of the protocol as per the DNS RFCs
- Components of the DNS System
- DNS Namespace - Fully Qualified Domain Name (FQDN)
- Hierarchical Administration - Registry/Registrar/Registrant
- Zones and Resource Records
- Concept of Delegation
- Types of DNS Servers - Authoritative vs Resolvers
- Iterative vs Recursive DNS Queries
- The 13 Root DNS Servers
- Forward vs Reverse Zones
- Resource Record Format
- Purpose, format, usage and rules for most common Resource Records such as SOA, NS, A, AAAA, PTR, CNAME, TXT, MX and SRV and CAA Records
- Wildcard Records
- DNS Packet Format
- DNS response Status Codes
- Deep Dive into the complete DNS resolution process
- What are White Label or branded or Vanity Name Servers?
- How Glue records break circular reference?
- DNS Response Caching and TTL
- How caching works at the End Client
- How caching works at the Resolver
- The perils of caching
- What is BIND?
- How dig +trace works?
- Setting up a Recursive Resolver
- Tuning the Resolver
- Setting up a Caching Server and Forwarding Queries
- Setting up Authoritative Master and Slave Name Servers
- How Zone transfers work - AXFR vs IXFR, Notify mechanism, SOA record timers?
- Complete walkthrough of buying a Domain and setting up Internet facing Branded Name Servers
- Different DNS Architectures used in Corporate Networks
- How to perform Sub Domain Delegation
- Different DNS related Files and settings on Windows and Linux end clients
- Deep Dive into Extension Mechanisms for DNS (EDNS)
- Views or Split DNS
- EDNS Client Subnet (ECS)
- Name Server Identifier (NSID)
- Dynamic DNS Updates (DDNS)
- How to delegate reverse zones which don't fall on classful boundaries
- Deep Dive into DNSSEC - DNSSEC records, zone signing, establishing chain of trust, DNSSEC flags, failure scenarios
- How to implement DNSSEC on BIND, Key maintenance and troubleshooting
- DNS Firewall (RPZ) using local and 3rd party rule providers
- DDOS protection features on BIND - clients per query, fetches-per-zone, fetches-per-server, recursive-clients and tcp-clients, Response Rate Limiting (RRL)
- DNS Response Filtering features on BIND - Blackhole, NXDOMAIN Redirection
- New DNS security features - DNS Cookies
- Whois, EPP Status codes and related Domain settings and issues
- How to troubleshoot different variety of DNS resolution issues
- How to troubleshoot BIND server under heavy load
- How end client stub resolver softwares such as Systemd-resolved and Dnsmasq can be leveraged to enabled caching
- Best practices and steps to follow when transferring domain registration/hosted zone
Explore related topics
Course content
12 sections • 47 lectures • 12h 41m total length
Requirements
- Basic networking and linux knowledge
- Access to a Linux server - cloud / eve-ng / gns3
- Access to intermediate network devices such as routers / switches / firewalls
Description
This course includes:
12.5 hours on-demand video
Downloadable commands and configurations
Full lifetime access
Certificate of Completion
Who is this course for:
This course has been designed for all IT Professionals looking forward to learn the DNS protocol and how to install, configure, operate and troubleshoot a BIND DNS Server.
The course covers the DNS protocol and BIND Server from scratch to expert level.
Course Outcomes:
Thorough understanding of the DNS protocol.
Understand how DNS works within large production grade environments
Use dig and other tools to troubleshoot a wide variety of DNS issues
Gain confidence to troubleshoot complex DNS issues
Install, configure, tweak and tune the BIND as a recursive caching resolver
Install, configure, tweak and tune the BIND as an Authoritative DNS Server
Master the advanced side of DNS - EDNDS, ECS, Views, DDNS, DNSSEC, DNS Cookies, DNS Firewall and more
Gain confidence to clear interviews with top tier organizations like Amazon, Google, Facebook etc.
What sets this course apart from others:
High quality production standards
Respect for time - every second of the course is used to deliver precise and practical information
Goes deep into the protocol following the RFC
Comprehensive coverage of almost all DNS related concepts
All topics are explained with practical labs
Explains not just the protocol but how it works in the context of a large production network - how different network devices interact with DNS traffic
Deep dive into the protocol and real world implementations
Focus on troubleshooting rather than just configuration
Who this course is for:
- This course has been designed for all IT Professionals looking forward to learn the DNS protocol and how to install, configure, operate and troubleshoot a BIND DNS Server. The course covers the DNS protocol and BIND Server from scratch to expert level.