Software

  • CreateZones tool for Generating Simulation Scenarios

The latest codes are available from the link below.
https://github.com/shored/createzones/

  • Getting and Building NS-3 DCE Environment

ns-3 Direct Code Execution (DCE) based DNSSEC simulator. bind9, unbound, dig, etc are running inside ns-3 simulation.

  1. Install bake
    All the software installation is handled by bake build tool. You could obtain the tools as:

    hg clone http://code.nsnam.org/bake

    You need to install ‘mercurial’ for this installation.

  2. Obtain bakeconf.xml for ns-3-dce-dnssec module
    wget http://ns3-dev.sekiya-lab.info/hg/ns-3-dce-dnssec/raw-file/tip/utils/bakeconf.xml -O bakeconf.xml
  3. Build
    The following commands build the DNSSEC module, ns-3, bind9, unbound, and some additional modules that the simulator requires. It will take long time to finish it.

    mkdir dnssec
    cd dnssec
    ../bake/bake.py configure -c ../bakeconf.xml -e dce-dnssec
    ../bake/bake.py download
    ../bake/bake.py build
  4. Test examples
    If all the build steps above are finished without no errors, you can try pre-installed example.

    cd source/ns-3-dce
    ./waf --run dce-dns-simple

    This command simulates a simple DNS packet exchange, resulting pcap files which contains packets of DNS. You will see

    % ls -ltr *.pcap
    -rw-r--r-- 1 foo foo 32944 Feb  7 17:54 dce-dns-simple-1-0.pcap
    -rw-r--r-- 1 foo foo 32944 Feb  7 17:54 dce-dns-simple-0-0.pcap

    If you wanna try DNSSEC example,

    cd source/ns-3-dce
    ./waf --run "dce-dnssec --pcap=1"

    will give you another pcap files.

    % tcpdump -r dce-dnssec-4-0.pcap -n
    (snip)
    09:01:51.002006 IP 10.0.0.5.53 > 10.0.0.6.64932: 52654 2/2/1 A 192.168.1.2, RRSIG (292)
    09:01:51.004451 IP 10.0.0.5.53 > 10.0.0.6.53602: 57806 2/2/1 A 10.0.0.4, RRSIG (308)