DNS The world’s most successful distributed database—and the most naïve. The Domain Name System is one of the Internet’s oldest protocols, designed for a network without hostile users. Intruders targeting a network start by investigating their DNS. DNS Security Extensions, or DNSSEC, hardens DNS and brings it into the 21st century. Learning DNSSEC required wading through years of obsolete tutorials, dead ends, and inscrutable standards. Until now. This new edition of DNSSEC Mastery will have DNS administrators deploying DNSSEC with industry-standard software in hours instead of weeks. You will: · Understand what DNSSEC provides · Configure your servers to resist attack · Verify your environment supports modern DNS · Debug DNSSEC and the Chain of Trust · Sign your zones and attach them to the Chain of Trust · Conceal zone data with NSEC3 · Automate DNSSEC maintenance · Roll over keys to maintain integrity · Implement DNSSEC on private networks · Securely distribute security-critical information via DNS And more! DNSSEC Mastery transforms DNS from a headache to a solution.

DNS is one of the oldest protocols on the Internet, and was designed for a network without hostile users. Anyone who wants to break into a network starts by investigating the target's Domain Name Service. DNS Security Extensions, or DNSSEC, hardens DNS and brings it into the 21st century. But learning DNSSEC requires wading through years of obsolete tutorials, dead ends, and inscrutable standards.Until now.DNSSEC Mastery will have DNS administrators running DNSSEC with the industry-standard BIND server in hours instead of weeks. You will:*Understand what DNSSEC gives you, and what it doesn't *Configure your servers to resist attack.*Verify your environment supports modern DNS*Debug DNSSEC and the Chain of Trust*Configure your server to resolve DNSSEC*Conceal zone data with NSEC3*Cryptographically sign your zones, and attach them to the Chain of Trust*Let BIND automatically maintain DNSSEC for you*Roll over keys to maintain security*Implement DNSSEC on private networks*Use DNSSEC to validate self-signed SSL certificates, ending your dependence on Certificate AuthoritiesAnd more! DNSSEC Mastery transforms DNS from a security risk to a solution.

Transport Layer Security, or TLS, makes ecommerce and online banking possible. It protects your passwords and your privacy. Let’s Encrypt transformed TLS from an expensive tool to a free one. TLS understanding and debugging is an essential sysadmin skill you must have. TLS Mastery takes you through: · How TLS works · What TLS provides, and what it doesn’t · Wrapping unencrypted connections inside TLS · Assessing TLS configurations · The Automated Certificate Management Environment (ACME) protocol · Using Let’s Encrypt to automatically maintain TLS certificates · Online Certificate Status Protocol · Certificate Revocation · CAA, HSTS, and Certificate Transparency · Why you shouldn’t run your own CA, and how to do it anyway · and more! Stop wandering blindly around TLS. Master the protocol with TLS Mastery!

Filesystems for everything! FreeBSD includes many special-purpose filesystems. FreeBSD Mastery: Specialty Filesystems takes you through these filesystems, helping you solve problems you didn’t know you have. These filesystems underlie everything from application servers to jails. You’ll learn to manage: -removable media -MSDOS and Linux filesystems -CD, DVD, and Blu-Ray disks -devfs -process filesystems -the file descriptor filesystem -the POSIX message queue filesystem -union mounts -null mounts -both memory filesystems, and when to use each -NFS versions 2, 3, and 4 -iSCSI targets and initiators -the Common Internet File System -networked disk redundancy with geom_gate and HAST -high availability storage with HAST and iSCSI -NFSv4 Access Control Lists -User Space Filesystems -FreeBSD’s Solaris-compatible automounter System administrators of any expertise level will expand their FreeBSD mastery with FreeBSD Mastery: Specialty Filesystems.

ZFS improves everything about systems administration. Once you peek under the hood, though, ZFS’ bewildering array of knobs and tunables can overwhelm anyone. ZFS experts can make their servers zing—and now you can, too, with FreeBSD Mastery: Advanced ZFS. This small book teaches you to: •Use boot environments to make the riskiest sysadmin tasks boring •Delegate filesystem privileges to users •Containerize ZFS datasets with jails •Quickly and efficiently replicate data between machines •split layers off of mirrors •optimize ZFS block storage •handle large storage arrays •select caching strategies to improve performance •manage next-generation storage hardware •identify and remove bottlenecks •build screaming fast database storage •dive deep into pools, metaslabs, and more! Whether you manage a single small server or international datacenters, simplify your storage with FreeBSD Mastery: Advanced ZFS.

“I think we’re gonna need a bigger web server.” OpenBSD has a solid reputation for security and stability. It’s well known for the OpenSMTPd mail server, the LibreSSL cryptography library, and the PF packet filter. But nobody ever talks about the load balancer, or the web server. Until now. The httpd web server provides a fast, stable, secure environment for your web applications. The relayd load balancer lets you distribute Internet application load across multiple hosts. Between the two, you can slash hundreds of thousands of dollars off the cost of building, deploying, and managing applications. With Httpd and Relayd Mastery you’ll learn how to: · set up web sites · configure software to run in a chroot · run dozens or hundreds of sites on one host · dynamically reconfigure sites with Lua patterns · manage site logs · maintain free, globally-valid SSL certificates · improve performance with SSL stapling · install and maintain two-server clusters · distribute traffic between any number of hosts · stop worrying about old SSL versions and bad crypto algorithms Slash the amount of time you spend futzing with web servers. Get Httpd and Relayd Mastery today!