AfNOG -> Workshops -> 2003 -> Track 1 - Scalable Internet Services -> Timetable

AfNOG 2003 Workshop

Track 1 - Scalable Internet Services

This is part of the AfNOG 2003 Workshop, held in conjunction with the AfNOG meeting in Kampala, Uganda, in June 2003.

TIMETABLE

Each day is divided into four slots of approximately two hours each. Classes start promptly at 08:45 and end at around 18:15 daily. There will be a one-hour break for lunch at around 13:00, and 15-minute breaks in mid-morning and mid-afternoon.

In addition to this detailed timetable you can see a summary timetable as well.

Monday morning

Introduction and logistics -- Ayitey Bulley
FreeBSD Tutorial -- Joel Jaeggli, Noah Sematimba, Patrick Okui
- FreeBSD Introduction Materials. This section includes:
  - Introduction
  - Why FreeBSD
  - Accounts information
  - Creating a user account for yourself
  - Some basic FreeBSD commands
  - Post-installation configuration
  - Short example using FreeBSD commands
  - Getting FreeBSD 4.5 files and others
  - pkg_add: Adding packages or ports by hand
  - Network Information
  - ifconfig
  - rc.conf
  - Stopping and starting the network
  - Stopping and starting services
  - Installation Notes
  - Slices and partitions
  - Distribution sets
  - Quick installation guide (using CD-ROM)
  - The FreeBSD Directory Structure
  - A few differences from Linux
Monday afternoon
DNS Section Materials. This section includes:
- DNS Session 1 -- Ayitey Bulley, Alain Aina and Brian Candler
  - Domain Name System (DNS)
  - Objectives
  - Why Names?
  - HOSTS.TXT
  - What was wrong with HOSTS.TXT
  - What is DNS?
  - Hierarchical Structure of DNS
  - Domains
  - Client-Server Model
  - Types of Nameservers
  - Exercise 1
  - Client Resolver Lookups
  - Client Utilities for Testing DNS
  - The BIND dig utility
  - Understanding output from dig
  - Exercise 2
  - Best Practices (Client Side)
- DNS Session 2-- Brian Candler, Ayitey Bulley and Alain Aina
  - Operation of recursive (caching) nameserver
  - How caching NS works (1)
  - What if the answer is not in the cache?
  - How caching NS works (2)
  - How does it know which auth nameserver to ask?
  - Intermediate nameservers return a "NS" resource record
  - Eventually this process will either:
  - How does this process start?
  - Distributed systems have many points of failure!
  - Caching reduces the load on auth nameservers
  - Example 1: www.tiscali.co.uk (on an empty cache)
  - Example 2: smtp.tiscali.co.uk (after previous example)
  - Caches can be a problem if data becomes stale
  - The owner of an auth server can control how their data is cached
  - A compromise policy
  - What sort of problems might happen when a caching nameserver is operating?
  - (1) One authoritative server is down or unreachable
  - (2) *ALL* authoritative servers are down or unreachable!
  - (3) Referral points to a nameserver which is not authoritative for this zone
  - (4) Inconsistencies between authoritative servers
  - (5) Inconsistencies in delegations
  - (6) Mixing caching and authoritative nameservers
  - (7) Inappropriate choice of parameters
  - How to interpret responses (1)
  - How to interpret responses (2)
  - How to debug a domain using "dig +norec" (1)
  - How to debug a domain using "dig +norec" (2)
  - How to debug a domain using "dig +norec" (3)
Monday evening - Optional sessions
- Continuation of DNS with Exercises -- Ayitey Bulley, Alain Aina and Brian Candler
Tuesday morning
- DNS Session 2 continued -- Brian Candler, Ayitey Bulley and Alain Aina
  - How to debug a domain using "dig +norec" (3)
  - Exercise - Setting up a Caching-Only Name Server
- DNS Session 3 -- Ayitey Bulley, Brian Candler and Alain Aina
  - Objectives
  - The Zone Data Files
  - Setting the default TTL (RFC-2308)
  - Structure of Resource Records
  - RRs in a Zone File
  - Resource Record: SOA
  - The named.conf file
  - Named.conf:- Master Config. For Domain
  - Named.conf:- Slave Config. For Domain
  - Choice of Sec. Name Server (RFC-2182)
  - Reloading a running server
  - Some Common Errors
  - Exercise - Setting up an Authoritative-Only Master Name Server
  - Exercise - Setting up an Authoritative-Only Slave Name Server
Tuesday afternoon
- Web/Proxy/SSL -- Joel Jaeggli Noah Sematimba and Patrick Okui
  - Web/Proxy/SSL Materials
  - Install OpenSSL
  - Patch Apache source code with SSL patch
  - Install Apache
  - Generate new local SSL certificate
  - Configure Apache with basic configuration
  - Start Apache httpsd daemon and connect to local box
  - Verify local ssl certificate works
Tuesday evening - Optional sessions
- FreeBSD Tutorial Cont. and FreeBSD Installation -- Joel Jaeggli, Brian Candler, Patrick Okui
Wednesday morning
- Squid
  - Web/Proxy/SSL -- Joel Jaeggli, Noah Sematimba and Patrick Okui
    - Discussion of Squid Caching Server
    - Installation of Squid
    - Step-by-step overview of squid.conf
  - Squid Caching Continued -- Joel Jaeggli, Noah Sematimba and Patrick Okui
    - Client Configuration for Proxy Server Use
    - Auto Discovery of Proxy in IE Issue
    - WPAD Expired RFC
- Web/Proxy/SSL -- Joel Jaeggli Noah Sematimba and Patrick Okui
  - Configuring Apache with SSL
  - Example SSL Apache configuration file
  - A good SSL Primer
Wednesday afternoon
- Mail/Exim -- Philip Hazel and Brian Candler
  - Exim Materials
  - POP3/Mail Materials - See below as well
- Topics covered in this section
  - Introduction to Internet Mail
    - Mail agents - MUA and MTA
    - Message format
    - Authentication
    - SMTP - Message in transit
    - Use of DNS for email
    - Delivering a message
    - Relay control
    - Policy control on email
  - Installation of Exim and basic tests
Wednesday evening - Optional sessions
- SOCIAL EVENT - CULTURAL SHOW
Thursday morning
- Mail/Exim -- Philip Hazel and Brian Candler
  - Exim Routers and Transports configuration
    - Configuration file
    - Changing runtime configuraiton
    - Configuration file sections
    - Default configuration file layout
    - Common global options
    - Exim 4 routing
    - Simple routing configuration
    - Default routers
    - Default transports
    - Routing to smarthosts
    - Virtual domains
    - Access control lists
    - Good and bad relaying
    - Message filtering
    - Large installations
    - Separating mail functions
  - Modify routing practical exercises
Thursday afternoon
- Mail/Exim -- Philip Hazel and Brian Candler
  - Access Control Lists
  - Setting up a relaying host practical exercises
Thursday evening - Optional sessions
- Informal Exim and Mail work
Friday morning
- POP, IMAP and Web email servers -- Brian Candler
  - POP3/Mail Materials
    - Mailserver scalability
      - Linear password files
      - Linear mbox files
      - Too many files in one directory
      - CPU limits
      - Disk performance
      - Keep your SMTP (smarthost) and POP3 services separate
    - Maildir and qmail-pop3d practical exercises
      - Reconfigure exim for Maildir delivery
    - Courier practical exercises
      - Install courier-imap
      - Configure the daemons
      - Start the daemons
      - pop3 and imap over SSL
- POP, IMAP and Web email servers -- Brian Candler
  - Sqwebmail practical exercises completion
  - FreeBSD mailserver performance tuning
    - Increase kernel limits
    - Enable softupdates
    - Use SCSI disks
    - Spread mail directories across multiple disks
    - Put in as much RAM as possible
    - Use PCI cards, not ISA!
  - Notes and Clustering and NFS
    - Using Network File System (NFS)
    - Using Proxies
    - Load balancing
    - Database
    - FreeBSD NFS
Friday afternoon
- Security Issues - Brian Candler Joel Jaeggli and Ayitey Bulley
  - Security Section Materials
    - Authentication
    - Authorisation
    - Integrity
    - Confidentiality
    - Availability (DoS)
    - Host access controls
    - Network access controls
  - Attacks on the host vs. attacks no the network
  - smurf attacks
- SSH Discussion - Security at the Application Layer
  - known_hosts files and authorization
  - Password challenge authentication
  - RSA/DSA Private/Public Key generation
  - Public/Private Key use with SSH
  - ssh-agent and ssh-add
  - Using tunnels with SSH
Return to AfNOG Workshop Main Page

AfNOG 2003 Workshop

Track 1 - Scalable Internet Services

TIMETABLE

Monday morning

Monday afternoon

Monday evening - Optional sessions

Tuesday morning

Tuesday afternoon

Tuesday evening - Optional sessions

Wednesday morning

Wednesday afternoon

Wednesday evening - Optional sessions

Thursday morning

Thursday afternoon

Thursday evening - Optional sessions

Friday morning

Friday afternoon