Info! Please note that this translation has been provided at best effort, for your convenience. The English page remains the official version.

Research ARC

Last Modified on -

nodxDNSSEC is a mechanism to protect the integrity of DNS records and protect end-users against DNS cache poisoning attacks. However, operating a DNSSEC signing infrastructure requires a lot of investment and effort for the maintenance and to ensure the security of the signing service. There is also a need to maintain a proper key management life-cycle. This project is about operating a DNSSEC signing service for external parties (any network operator).

We envisage it to be a container-based infrastructure, where a new container is spun every time a new operator enrols into this service. Each signer will have their isolated environment for e.g. running on a Docker and keys will be stored in a soft-HSM. There will be a web portal allowing the users to activate their service and get the configuration to setup zone transfers for signing between master and slave servers. 

Keywords: DNSSEC, Docker, SoftHSM, web development, security

 

 

Number of Students/Interns required Duration
 1  6-8 months
 Key deliverables  Skills required
 
  1. A container-based system for activating a DNSSEC engine for AFRINIC members
  2. Key management strategy within the Docker ecosystem
  3. Web interface to manage and monitor ecosystem
  
  1. Bash scripting
  2. Good understanding of the DNS and DNSSEC infrastructure
  3. Good working knowledge of Docker, Kubernetes, etc
  4. Web development (Python/Django, PHP, Angular.js, etc)

 

 

Print Friendly, PDF & Email

Last Modified on -

workflowAfrica remains significantly behind other regions in terms of performance and quality of service. This obviously has many implications on the Quality of Service (QoS) of networks in general but also on the Quality of Experience (QoE) from the end-user perspective. While some parts of Africa are performing very well, we see a considerably bad performance in different subregions and specific countries such as Angola and Ethiopia.

AFRINIC used SpeedChecker probes found in 52 different countries (~ 850 probes) as vantage points and OOKLA Speedtest servers as targets (~213 servers) in 42 different countries. In this study, more than 300 AS were probed which yielded 42K RTT samples and 31K traceroutes were captured over a period of 3 months.

The project is about adapting an existing visualization or creating a new visualization widget to display latency clusters in an interactive way (and in a longitudinal fashion i.e. how does the cluster change over time). More information here <https://afrinic.net/blog/333-revealing-latency-clusters-in-africa> 

Keyword: Latency, QoS, Clustering, data visualization

 

Click here to apply

 

Number of Students/Interns required Duration
 1  3-6 months
 Key deliverables  Skills required
 
  1. Review existing latency measurement scripts, repackage them into a proper data capture tool
  2. Build an interactive platform for visualizing latency clusters
  3. Perform longitudinal data analysis
  
  1. Python scripting
  2. RESTFUL API
  3. Databases (MySQL, PostgreSQL)
  4. Web development (Python/Django, PHP, Angular.js, etc)

 

 

Print Friendly, PDF & Email