NLnet Labs

Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy.

#Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more...

Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!

Public Key

npub1qyqtcu2yp540xnc6l6znm7npnlwm6pn47fpjnwtw66plhwrkcddq89rffr

NIP-05 Address

nlnetlabs@fosstodon-org.mostr.pub

Profile Code

nprofile1qqsqzq9uw9zq62hnfud0apfalfselhdaqe6lysefh9hddqlmhpmvxkspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsp2uymz

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1qyqtcu2yp540xnc6l6znm7npnlwm6pn47fpjnwtw66plhwrkcddq89rffr

Show more details

Last Notes

2025-06-16 06:34:30 UTC

We have just released the second release candidate for Krill 0.15.0. The release contains a lot of internal refactoring, along with a couple of changes.
The most important one is the way multi-user authentication works.If you are not running Krill with just the admin token, you may want to read https://krill.docs.nlnetlabs.nl/en/v0.15.0-rc2/multi-user.html. We’ll write a migration guide before the full 0.15.0 release. #RPKI #OpemSource #rustlang https://github.com/NLnetLabs/krill/releases

2025-06-13 09:04:25 UTC

Little Friday shout-out to @nprofile…ws60 for setting us up with a YubiHSM so we can test our KMIP and PKCS#11 code for our #DNSSEC signer Nameshed. 💚 Thanks a lot for supporting #OpenSource! #DNS #rustlang https://github.com/NLnetLabs/kmip2pkcs11

2025-06-12 10:57:52 UTC

A kind reminder to please provide your feedback on the #XDP implementation we did for NSD, our authoritative #DNS server.
With zero-copy disabled, weI saw a 1.7x improvement in handled queries per second compared to UDP through the network stack. We expect the improvement to be higher with a driver that fully supports AF_XDP zero-copy mode.
We're curious to hear about your experiences!
https://blog.nlnetlabs.nl/experimental-support-for-af_xdp-sockets-in-nsd/

2025-06-11 12:15:04 UTC

- reply

@nprofile…h77u We’d love to add more functionality to `dnst` by adding a drop-in replacement for `ldns-verify-zone` and include new functionality to make it comparable to validns, if desired.
As it stands, offering a prototype for Nameshed has our priority now, so that we can release a production grade #DNSSEC signer later in the year.
That being said, perhaps one of the developers needs to scratch an itch over the summer. 😉
#DNS #OpenSource #rustlang https://github.com/NLnetLabs/dnst

2025-06-11 06:42:01 UTC

Philip explains Nameshed's #DNSSEC key management design at the ICANN83 DNSSEC And Security Workshop. Presentation starts at 58:32. #DNS #OpenSource #rustlang https://icann.zoom.us/rec/play/rZO4WQ43FXCBle-B2aMGbyuxoMqmt4-HU9PJVfjsZA4DYxv2k9X0IyhR8f0F_SSZwRbSgCIO3KxUtVuF.v4W-DaCIkkBU7JmJ?eagerLoadZvaPages=sidemenu.billing.plan_management&accessLevel=meeting&canPlayFromShare=true&from=share_recording_detail&startTime=1749475871000&componentName=rec-play&originRequestUrl=https%3A%2F%2Ficann.zoom.us%2Frec%2Fshare%2FnEPUGP0kRV04R3oQaAt0i2c_UQhxb2UHzg16VylkViD-EomNkaaPiiuSzWsWooUC.3ieFTG4o1XsG-TDW%3FstartTime%3D1749475871000

2025-06-10 06:46:41 UTC

At the ICANN83 DNSSEC And Security Workshop, we presented the flexible key management we have designed for our new #DNSSEC signing solution Nameshed. Philip explains how we avoid loading an unknown shared library into the signer process and how we keep track of state. #DNS #OpenSource #rustlang Slides: https://static.sched.com/hosted_files/icann83/09/2.5%20Homburg%20-%20Flexible%20Key%20Management%20in%20Nameshed.pdf?_gl=1*36t2bs*_gcl_au*MjAzNDMxMTY4MS4xNzQ5NDc3NDU4

2025-06-06 11:40:14 UTC

Question in relation to our #DNSSEC signing project Nameshed: does anyone have operational experiences with #KMIP for interfacing with HSMs, as an alternative to PKCS#11? We'd love to hear from you. #DNS #OpenSource #rustlang

2025-06-05 12:12:36 UTC

‘dnst' is about twice as fast as ‘ldns’ for #DNSSEC signing. This is our result with a test zone containing about 10M RRs, and using ECDSAP256SHA256 algorithm 13.
Note that for our upcoming signer-pipeline Nameshed we'll make signing multi-threaded, boosting performance even more. #DNS #OpenSource #rustlang https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/

2025-06-05 12:08:44 UTC

‘dnst' is about twice as fast as ‘ldns’ for #DNSSEC signing. #DNS #OpenSource #rustrustlange, signing a test zone with about 10M RRs using ECDSAP256SHA256 algorithm 13.
Note that for our upcoming signer-pipeline Nameshed we'll make signing multi-threaded, boosting performance even more. #DNS #OpenSource #rustlang https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/

2025-06-04 10:08:13 UTC

We're proud to launch "dnst", our #DNS toolbox for network operators. Twenty years ago, we introduced the "ldns" C-library, along with a collection of example utilities for generating keys, signing a zone, and more. With the "domain" #Rust crate acting as the natural successor to the "ldns" library, with "dnst" we are offering a modern, well-maintained drop-in replacement for the most widely used "ldns" utilities. #OpenSource #rustlang https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/

2025-06-02 12:54:35 UTC

Another milestone in making Nameshed, our new #DNSSEC solution, a reality: @nprofile…7xtg just merged a drop-in replacement for `ldns signzone` - with several improvements for good measure. #DNS #OpenSource #rustlang
https://github.com/NLnetLabs/dnst/pull/8

2025-06-02 12:51:59 UTC

2025-05-30 08:43:51 UTC

- reply

And as a result, lots of improvements by @nprofile…v5vq! https://mastodon.online/@terts/114595725032293281 #OpenSource #rustlang #BGP

2025-05-30 08:42:38 UTC

When your project makes it to the top of Hacker News. https://news.ycombinator.com/item?id=44050222 #OpenSource #rustlang #BGP
https://cdn.fosstodon.org/media_attachments/files/114/595/892/700/500/626/original/f8eec1594d12f58e.png

2025-05-28 09:26:11 UTC

One of the side effects of making a drop-in replacement for `ldns` in #rustlang is finding and fixing bugs in the original, along the way. #DNS #OpenSource https://github.com/NLnetLabs/ldns/issues/277

2025-05-26 14:21:25 UTC

Encouraged by the rest of the team, @nprofile…t0hh had quite the rollercoaster ride building #XDP support for our authoritative #DNS nameserver NSD. You can read about his experiences in this article and then try it our for yourself. 🎢 https://blog.nlnetlabs.nl/experimental-support-for-af_xdp-sockets-in-nsd/

2025-05-26 12:37:17 UTC

Last week, @nprofile…xfz7 introduced our new #DNSSEC signing solution ‘Nameshed’ at the #CENTRJamboree25. When we offer a production-grade Nameshed release later this year, this will coincide with the End-of-Life announcement of OpenDNSSEC. You can find the full presentation here: https://nlnetlabs.nl/downloads/presentations/Nameshed-CENTR-Jamboree-20250522.pdf #DNS #rustlang #OpenSource
https://cdn.fosstodon.org/media_attachments/files/114/574/166/124/331/653/original/820c0c6b3d3e17c5.png

2025-05-26 11:54:38 UTC

...speaking about the Roto language: it was featured on the front page of Hacker News after @nprofile…v5vq introduced it on our blog
https://blog.nlnetlabs.nl/introducing-roto-a-compiled-scripting-language-for-rust/

2025-05-26 11:52:48 UTC

We've released Rotonda 0.4.1! It features improved support for RPKI route origin validation in the embedded `roto` language.
github.com/NLnetLabs/rotonda

2025-05-14 07:34:32 UTC

What a day! @nprofile…xfz7 and @nprofile…v5vq were proud to be your hosts. You can find lots of NLnet Labs developers as volunteers or attendees at #RustWeek. Find us if you want to discuss #OpenSource #DNS and #BGP in #rustlang. https://fosstodon.org/@rustnl/114501330240026844

2025-04-25 21:13:06 UTC

- reply

@nprofile…uflw Jannik signed the latest NSD release. We publish keys here: https://nlnetlabs.nl/people/

2025-04-24 14:21:56 UTC

And to finish off this release-packed Thursday, we're happy to offer the first Release Candidate of our #RPKI proxy RTRTR, version 0.3.2-rc1. This release adds #ASPA support to the JSON input and output, and more… https://github.com/NLnetLabs/rtrtr/releases/tag/v0.3.2-rc1

2025-04-24 13:11:31 UTC

- reply

@nprofile…a5y4 From a *very* quick look by our team it seems that valkey can be configured with read-only-replicas as well and then the same redis options would work. If you already use the Unbound redis options with valkey, then it should just work if you point to valkey servers. There is nothing special about the options, just where to send READ/WRITE requests.

2025-04-24 11:12:56 UTC

A new release of Rotonda, our composable, programmable #BGP engine, is now available. Version 0.4.0 'Bold and Undaunting Youth' features and #RPKI RTR component, as well as Route Origin Validation on incoming routes. https://github.com/NLnetLabs/rotonda/releases/tag/v0.4.0

2025-04-24 09:00:53 UTC

NSD 4.12.0 is now available. Our authoritative #DNS server now offers Prometheus metrics, along with several other enhancements. https://github.com/NLnetLabs/nsd/releases/tag/NSD_4_12_0_REL

2025-04-24 08:55:52 UTC

Unbound 1.23.0 is now available. Our #DNS resolver now features ‘fast reload’, allowing it to read the new config in a thread, and when done only briefly pauses the server to update the settings. This version also contains redis replica support, DNS Error Reporting, and several bug fixes. https://nlnetlabs.nl/news/2025/Apr/24/unbound-1.23.0-released/

2025-04-17 12:41:38 UTC

At our 25th year anniversary party, we asked friends to deliver talks about a subject they are passionate about outside of work #DNS, #routing, #foss, ..
Mirjam gave a talk about #ArtBrut/Outsider Art, which was very well received. Now, one of the collections she talked about, the Collection Prinzhorn, that preserved art even through WWII, is now at risk.
She asked us to raise awareness, and we are inspired to help. Care? Donate or join their association of friends https://www.freundeprinzhorn.de/index-en.html

2025-04-08 14:10:21 UTC

In equal honour to his induction into the Internet Hall of Fame, we have honoured our colleague of many years, Jaap Akkerhuis, by naming our meeting room after him. Jaap’s response was heartwarming, but as modest as he is, he said a broom closet would also be fine.
https://cdn.fosstodon.org/media_attachments/files/114/302/741/213/144/125/original/66fd3b863ee1a88e.jpeg

2025-04-08 09:43:30 UTC

It's been a long time in the works, but now you can try out Fast Reload in our recursive #DNS resolver Unbound 1.23rc1. This feature allows the server to read the new config in a thread, and when done only briefly pause the server to update the settings.
https://lists.nlnetlabs.nl/pipermail/unbound-users/2025-April/008518.html

2025-04-01 15:29:23 UTC

- reply

@nprofile…hdfx Well, as mentioned in the article, +31 85 369 5573. 👻⚡️ ☎️

2025-04-01 13:45:25 UTC

- reply

@nprofile…ktvk Maybe RFC 9230? 😜

2025-04-01 13:04:47 UTC

- reply

@nprofile…g800 At the ICANN Tech Day in March 2016, .tr shared a post-mortem and recommendations following their incident. Details here: https://archive.icann.org/meetings/icann55/marrakech/downloads/presentation-ddos-07mar16-en.pdf.
I remember out-of-band communication (telephone numbers) and for TLDs contact IANA/ICANN.

2025-04-01 11:36:27 UTC

In light of a recent motion of the Dutch parliament, keeping with the trend of internet centralisation and considering the general state of the world, we are bringing the full DNS chain to a doormat close to you.
(Re-)introducing The Phone Book of the Internet.
https://nlnetlabs.nl/news/2025/Apr/01/phonebook-of-the-internet/

2025-03-24 17:36:04 UTC

And with that, Prometheus #metrics are now merged in NSD, our authoritative #DNS server. Next up, Unbound… https://github.com/NLnetLabs/nsd/pull/429

2025-02-07 11:45:05 UTC

- reply

@nprofile…7det Awesome! We’ll send you a DM.

2025-02-03 10:12:56 UTC

We need your help! We're making good progress with #XDP support for our #DNS software. However, to properly test it we need access to two metal boxes with 10Gb/s NICs that have XDP driver support, e.g. https://docs.cilium.io/en/latest/reference-guides/bpf/progtypes/index.html#xdp-drivers Please contact us if you can help out. 💚

2025-01-27 16:32:01 UTC

Important commit of the day... #OpenSource #Anniversary https://github.com/NLnetLabs/.github/commit/7c353c209b4f5a035492aad88cf0402a6c8df145
https://cdn.fosstodon.org/media_attachments/files/113/901/274/232/030/074/original/8254663b7bee1ae5.png

2025-01-17 12:26:08 UTC

“… require contracted providers of Internet services to agencies to adopt and deploy Internet routing security technologies, including publishing Route Origin Authorizations and performing Route Origin Validation filtering."
In light of this Executive Order; if you need #RPKI solutions that are continually developed, have a proven track record, are trusted by the world’s largest operators and are supported with a service-level agreement, we're here for you. #OpenSource
https://www.whitehouse.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/

2025-01-13 18:09:38 UTC

Willem’s new dev machine.
https://cdn.fosstodon.org/media_attachments/files/113/822/385/735/081/704/original/bee5a5fc5ecbcfa6.jpeg

2025-01-13 16:40:53 UTC

After spending a year building new functionality for 'domain’, our #DNS library for #rustlang, we're took a step back to reflect and refactor. Tomorrow, we'll do an al-hands meeting to kick off the development work for 2025, featuring #DNSSEC signing with a new hidden primary and making connect-by-name a reality. Stay tuned! https://blog.nlnetlabs.nl/domain-foundations-the-first-of-our-five-year-vision/

2025-01-10 20:06:38 UTC

- reply

@nprofile…lfwr You are very welcome, we hope you enjoy your weekend!

2025-01-08 13:55:32 UTC

Even without some of the PRs merged and not counting all the spin off #DNS projects like mimir (proxy), dnsi (inspection) and dnst (toolbox), the amount of changes in our #OpenSource `domain` #rustlang library is massive.
git diff --shortstat 5f40b97 f826b82
369 files changed, 89151 insertions(+), 7007 deletions(-)
https://blog.nlnetlabs.nl/domain-foundations-the-first-of-our-five-year-vision/

2025-01-07 09:23:56 UTC

2024 has been a pivotal year for NLnet Labs. Our vision for #DNS, our commitment to the #rustlang programming language and, in its wake, the influx of new talent joining our team, all combined with the support we received from @nprofile…du6g, we’ve been able to make a giant leap forward in realizing our #OpenSource goals. We are eager to maintain the momentum!
In the first of a series of articles, we look back at 2024 and set the stage for things to come.
https://blog.nlnetlabs.nl/domain-foundations-the-first-of-our-five-year-vision/

2024-12-13 09:01:11 UTC

We have released NSD 4.11.0. One notable feature is that configuration can be reloaded and evaluated on SIGHUP, when enabled with the new "reload-config" option. Also, #DNS cookie secrets will be reevaluated from config. :blobcatcookienom: https://nlnetlabs.nl/news/2024/Dec/12/nsd-4.11.0-released/

2024-11-14 11:28:06 UTC

Our #DNS toolkit for #rustlang, using our domain crate, is nearing completion.
We'll offer the commands to transform a DNSKEY RR to DS RR (key2ds), create a #DNSSEC key pair (keygen), print out the NSEC3 hash for the given domain name (nsec3-hash), generate a DNSSEC signed zone (signzone), send a NOTIFY message to DNS servers and lastly for now, define functions to perform UPDATE queries.
Up next are the finishing touches, with fuzzing support, packages and man pages. https://github.com/NLnetLabs/dnst/pulls

2024-11-13 18:05:23 UTC

- reply

@npub17sv…n5dz @npub1xdv…udn5 @npub18kf…npv5 We love Gerben, but he is working for @nlnet and not @npub1xhz…kaka.

2024-11-13 15:43:25 UTC

- reply

@npub1rml…xa6t It would be fair to say that the lessons learned from the implementation of GetDNS and the connect-by-name prototypes form the foundation for our plans with the domain crate in 2025 and beyond. #DNS #rustlang https://blog.nlnetlabs.nl/the-next-five-years-of-dns-at-nlnet-labs/

2024-08-28 08:00:01 UTC

When building a library, it's not just about providing features but getting the ergonomics right so that developers can take maximum advantage of the functionality provided. After several approaches, we're finally happy with #DNS Zone Transfers for our #OpenSource `domain` crate for #rustlang. #CodingInTheOpen #IXFR #AXFR #TSIG
https://github.com/NLnetLabs/domain/pull/375

2024-08-15 09:07:51 UTC

We're happy to release version 1.21.0 of Unbound, our recursive #DNS resolver. This release has a fix for the CAMP and CacheFlush issues, along with several smaller bug fixes. #OpenSource #security https://nlnetlabs.nl/news/2024/Aug/15/unbound-1.21.0-released/

2024-07-19 12:25:59 UTC

So what if you don’t like any of the tools at your disposal to accomplish your goals? You build your own tools… #OpenSource #rustlang // @npub1srn…ahgh https://crates.io/crates/hexview
https://cdn.fosstodon.org/media_attachments/files/112/813/143/186/630/677/original/d971b1b7bd849edb.png

2024-07-12 15:37:20 UTC

For our #OpenSource `domain` library, Philip just opened a PR with a proof of concept for query routing. The example query-routing shows how to route to different #DNS upstreams based on the qname. https://github.com/NLnetLabs/domain/pull/353

2024-07-02 08:24:26 UTC

Now that both Debian 10 and Red Hat Enterprise Linux 7 (and, with it, CentOS 7) have reached the end of their Security Support (or in the Debian case, Long Term Support), we've clarified our policy on the packages we offer for some of our products. https://nlnetlabs.nl/packages/

2024-06-27 15:42:25 UTC

We're happy to introduce not one, but two releases of Krill, our software that seamlessly lets you manage and publish #RPKI ROAs under one or multiple RIRs. Both versions 0.13.2 and 0.14.5 contain important fixes; we urge you to carefully read the release notes and upgrade at your earliest convenience. #OpenSource #security #BGP https://lists.nlnetlabs.nl/pipermail/rpki/2024-June/000532.html

2024-06-24 10:35:07 UTC

Thanks for all the feature requests for our #DNS investigation tool `dnsi` so far! We’ve updated the README with all possible contact options to streamline the feedback. Next up: #JSON output https://github.com/NLnetLabs/dnsi/pull/32

2024-06-21 07:18:08 UTC

We now publish Debian/Ubuntu/RHEL packages for our #DNS investigation tool `dnsi`.
https://cdn.fosstodon.org/media_attachments/files/112/653/387/942/494/934/original/6d05e016a7126ced.png

2024-06-20 19:50:43 UTC

Our #DNS investigation tool `dnsi` has many options for each command. To learn more about them, use `--help` for a complete overview, or `-h` for a summary, e.g. `dnsi query -h`.
https://cdn.fosstodon.org/media_attachments/files/112/650/684/982/967/093/original/b1ecf5d4256741e9.png

2024-06-20 15:24:10 UTC

We've had lots of fun developing version 0.2.0 of our #DNS investigation tool `dnsi`. In this release, there are lots of goodies!
First, we now offer packages on our package repository, so you can easily install `dnsi` on Debian, Ubuntu, RHEL and compatible systems.
Second, there are a number of new party tricks, such as the ‘lookup' command, ‘friendly' and ‘table' output format, and TLS and Reverse DNS support. #OpenSource #rustlang
https://github.com/NLnetLabs/dnsi/releases/tag/v0.2.0

2024-06-20 12:18:21 UTC

We’re happy to release version 0.14.0 of our #RPKI Relying Party software Routinator. In this release, we revamped how Routinator stores the local copy of RRDP repositories. This will prevent running out of inodes and save some disk space. We’re also including a new #React-based user interface and updated one of our dependencies in response to a security advisory related to the HTTP server. https://nlnetlabs.nl/news/2024/Jun/20/routinator-0.14.0-released/

2024-06-19 15:07:35 UTC

There is now a PR for #TLS support in our #DNS investigation tool `dnsi`. #OpenSource https://github.com/NLnetLabs/dnsi/pull/24
https://cdn.fosstodon.org/media_attachments/files/112/643/909/347/171/398/original/185856125ff4fa37.png

2024-06-19 13:01:14 UTC

While implementing #DNSSEC validation for the `domain` crate, we’ve once again noted down all quirks, oddities and clarifications for the history books. #DNS #OpenSource #OpenStandards https://dnsimpl.readthedocs.io/en/latest/general-dnssec.html

2024-06-17 11:59:28 UTC

In this PR we propose a revised policy for minimum supported #rustlang versions for 'domain’. #MSRV #DNS #OpenSource https://github.com/NLnetLabs/domain/pull/330

2024-06-17 11:37:57 UTC

Drawing inspiration from our team outing last Friday, @npub1rgu…wk0a made some bumper stickers for us.
https://cdn.fosstodon.org/media_attachments/files/112/631/760/404/086/864/original/518682ad5727569a.jpeg

2024-06-13 11:02:20 UTC

We are super-excited to release version 4.10.0 of our #OpenSource authoritative #DNS nameserver NSD. This release introduces blazingly fast zone file parsing by replacing our Flex+Bison-based implementation with our new SIMDzone project. Especially loading zones and IXFRs are drastically improved. https://lists.nlnetlabs.nl/pipermail/nsd-users/2024-June/003309.html

2024-06-12 07:13:00 UTC

While Philip is heading towards the finish line with #DNSSEC Validation for our `domain` #DNS library for #rustlang, @npub1jj9…090l now has a public draft PR for Zone Transfers. #OpenSource https://github.com/NLnetLabs/domain/pull/335

2024-06-10 18:38:35 UTC

You can now sink your teeth in a new Release Candidate of Routinator 0.14.0, our #RPKI Validator. https://github.com/NLnetLabs/routinator/releases/tag/v0.14.0-rc1

2024-06-06 14:27:04 UTC

- reply

@npub1s78…e7xh ARRR 🏴‍☠️🏴‍☠️

2024-06-06 14:23:52 UTC

While we are gearing up for a new release of Routinator, we're happy to release a new version of its side-kick, #RPKI data proxy RTRTR. Version 0.3.0 features a new "merge" unit, new config options for the HTTP client and a host of other features, metrics, logging options and fixes. #rustlang #OpenSource https://github.com/NLnetLabs/rtrtr/releases/tag/v0.3.0

2024-06-04 06:54:42 UTC

- reply

@npub14np…u9sz You can find the Unbound RPZ documentation here: https://unbound.docs.nlnetlabs.nl/en/latest/topics/filtering/rpz.html

2024-06-03 16:59:09 UTC

Next up in our `domain` #DNS library for #rustlang: #DNSSEC validation. https://github.com/NLnetLabs/domain/pull/328

2024-06-03 15:24:57 UTC

We're happy to release version 0.10.1 of `domain`, our #OpenSource #DNS library for #rustlang. This release contains several user-contributed bug fixes, which we're very grateful for. It's fantastic to see this #Rust project being used so broadly in the wild! https://github.com/NLnetLabs/domain/releases/tag/v0.10.1

2024-05-28 13:12:21 UTC

We plan to implement #JSON output in our #DNS investigation tool `dnsi`. There is informational RFC 8427 for representing DNS messages in JSON, but we’d like to see if there is a more ergonomic way of representing such a format. We'd love to hear about your use cases and wishes. https://github.com/NLnetLabs/dnsi/issues/12

2024-05-22 15:03:31 UTC

While Willem was chairing the #DNS working group at #RIPE88, the crew back in the office was hard at work with fancy new `dnsi` features. https://blog.nlnetlabs.nl/newsletter-may/
https://cdn.fosstodon.org/media_attachments/files/112/485/348/619/521/564/original/9746a7b664cf2d85.png

2024-05-08 15:04:10 UTC

As part of our ‘domain' #DNS library project, we are including diagnostics tooling. Instead of simply reimplementing ‘dig' in #rustlang, we wanted to rethink what operators would want from such a command line tool. Today, we're happy to release version 0.1.0 of ‘dnsi’. https://crates.io/crates/dnsi

2024-05-08 09:27:17 UTC

Today we released Unbound 1.20.0. This release has a fix for the DNSBomb issue CVE-2024-33655, which had a low severity for our #DNS resolver. https://nlnetlabs.nl/news/2024/May/08/unbound-1.20.0-released/

2024-05-01 11:32:03 UTC

- reply

Lots more to come in “domain”: #DNSSEC validation and signing, proxy support, diagnostics tooling and many other #OpenSource #DNS goodies for #rustlang. https://blog.nlnetlabs.nl/domain-dns-building-blocks-for-rust-application-developers/

2024-04-27 14:47:31 UTC

- reply

@npub1msr…383z Unbound resolves names for the global DNS, rooted with the rootzone maintained by IANA. For freename.io you need to use their own DNS servers as they have set up their own namespace.

2024-04-25 16:34:21 UTC

The pre-release of NSD 4.10.0 is now available. This version of our #OpenSource authoritative #DNS server dramatically speeds up zone loading and IXFRs, up to almost four times faster than the previous implementation! 🏎️
Please test out this Release Candidate on every kind of architecture and operating system you can find to help us iron out the corner cases we haven’t found ourselves yet. 💚🙏 https://lists.nlnetlabs.nl/pipermail/nsd-users/2024-April/003302.html

2024-04-25 08:52:51 UTC

Our new SIMD-capable #DNS zonefile parser is now part of the NSD main branch as a submodule. We'll finish the latest tests today and then make it available as a pre-release to allow you to test the speed improvements. We're curious to hear how this performs in your systems! https://github.com/NLnetLabs/nsd/pull/328

2024-02-19 16:59:27 UTC

Catalog Zones for NSD is now properly documented, courtesy of @npub1zaq…lrug. #DNS #OpenSource #Docs https://nsd.docs.nlnetlabs.nl/en/latest/catalog-zones.html

2022-12-14 15:53:15 UTC

We've always had an excellent relationship with Infoblox, who don't just sponsor our #DNS work on Unbound, but also contribute code such as the `reload_keep_cache` option that was just merged. This way you can reload the server but try to keep the RRset and message cache if (re)configuration allows for it. #OpenSource https://github.com/NLnetLabs/unbound/pull/569