NLnet Labs

NLnet Labs's avatar
NLnet Labs
🛡️ nlnetlabs_at_fosstodon.org@momostr.pink
npub1zhtw...alfy
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not nostr:npub1n8y64vc26phwqu2ey5uztdrz9qusdlu06qdpk5tukgdlsdj0gu8sl3l96n, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though! Website: https://nlnetlabs.nl FOSS: https://github.com/NLnetLabs Technical Assistance: https://nlnetlabs.nl/services/contracts/ Support our Work: https://nlnetlabs.nl/funding/
‘dnst' is about twice as fast as ‘ldns’ for #DNSSEC signing. This is our result with a test zone containing about 10M RRs, and using ECDSAP256SHA256 algorithm 13. Note that for our upcoming signer-pipeline Nameshed we'll make signing multi-threaded, boosting performance even more. #DNS #OpenSource #rustlang
The NLnet Labs Blog
Introducing dnst — a DNS Toolbox for network operators
By Alex Band More than two decades ago, NLnet Labs started the ldns library, with the goal of letting developers easily create RFC compliant DNS s...
A new release of Rotonda, our composable, programmable #BGP engine, is now available. Version 0.4.0 'Bold and Undaunting Youth' features and #RPKI RTR component, as well as Route Origin Validation on incoming routes.
GitHub
Release 0.4.0 'Bold and Undaunting Youth' · NLnetLabs/rotonda
Released 2025-04-24. Breaking changes Roto filter names have changed, as dashes are replaced with underscores. New An RTR component is introduce...
NLnet Labs celebrates twenty-five years as an independent, non-profit foundation working on #opensource and #openstandards. Our mission remains to make the core of the Internet a better, safer place by developing open-source software, through applied research and by promoting and contributing to open standards. Have you been along for the ride as a user of our #DNS or #routing software, worked with us on #IETF standardisation, applied research or policy advocacy? Share your story! image
2024 has been a pivotal year for NLnet Labs. Our vision for #DNS, our commitment to the #rustlang programming language and, in its wake, the influx of new talent joining our team, all combined with the support we received from @Sovereign Tech Agency, we’ve been able to make a giant leap forward in realizing our #OpenSource goals. We are eager to maintain the momentum! In the first of a series of articles, we look back at 2024 and set the stage for things to come.
The NLnet Labs Blog
Domain Foundations – The first of our five year vision
In this series we’ll update you on our accomplishments in 2024 and our future plans. First we will focus on the work on our domain library for...
Our #DNS toolkit for #rustlang, using our domain crate, is nearing completion. We'll offer the commands to transform a DNSKEY RR to DS RR (key2ds), create a #DNSSEC key pair (keygen), print out the NSEC3 hash for the given domain name (nsec3-hash), generate a DNSSEC signed zone (signzone), send a NOTIFY message to DNS servers and lastly for now, define functions to perform UPDATE queries. Up next are the finishing touches, with fuzzing support, packages and man pages.
GitHub
Pull requests · NLnetLabs/dnst
A DNS administration toolbox including re-implementations of important ldns programs - Pull requests · NLnetLabs/dnst
We're in the final stint of our one-year commitment to @Sovereign Tech Agency to build a memory-safe library for #DNS. By the end of 2024, our `domain` crate for #rustlang will feature a caching stub resolver, zone transfers, #DNSSEC validation and signing, request routing and a proxy, along with tooling for DNS inspection (dnsi) and manipulation (dnst). In 2025, we'll continue building at the same pace with the same team and we're eager to hear what you would like to see us build most. Let us know!
With #DNSoverQUIC released in Unbound 1.22.0, we turn our attention to finalizing the review to deploy Fast Reload. As the name suggests it allows reloading the #DNS resolver configuration with no noticeable interruption of the service. #OpenSource #DoQ #QUIC
GitHub
Fast Reload Option by wcawijngaards · Pull Request #1042 · NLnetLabs/unbound
The branch continues the fast-reload work, and adds more config options to fast-reload. This is a good idea, since otherwise, old references cause ...