This week I was approached by a man dressed in platypus pyjamas, he asked me: “These layers and modules you talk about, they’re cool. But can it be even better?”. After the initial costume distraction wore off, I pondered a bit and said: “Sure, let me just grab a cup of coffee”. The real story is that the layers are now much more interactive, and the documentation is improved.
DNSSEC – RFC7646 NTA – RFC5011 TA updates
Since you’re reading this, you probably know Lua, the world’s most infuriating language. If not, hop on to Lua in 15 minutes to get the basics right. Now there are two types of use cases where Lua shines – as a tiny script/configuration language, and for high-performance data processing (with JIT). I went through both of them with kresd, and wrote down some notes.
validator – need for speed – RPZ – views – new tests
IETF93 – prefetching and predictions – more cwrap – validating signatures
I/O improvements – documenting – validation – Happy Eyeballs
A short tutorial on how to block DNS slow-drip attack with kresd.
iced coffee, testing library, starting DNSSEC validation, prefetching queries, namebenching
A storified tale of how we’re baking a modern resolver the hard way. Ingredients included.