2026-06-07T14:17:12Z https://yabu.me NLnet Labs https://yabu.me/npub1zhtwpj08uj5ezzmndqxsmk8r0vrtgg8h6sdej7724z7h752qqagqvsalfy https://cdn.fosstodon.org/accounts/avatars/109/262/826/617/293/067/original/67f6d6f7ac36e83a.png https://cdn.fosstodon.org/accounts/avatars/109/262/826/617/293/067/original/67f6d6f7ac36e83a.png https://yabu.me/nevent1qqsrk5xgruzjxhxz7fkuualqdt84metx67mww6zhvr7g7s6qxjpws8czyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4qancgv8 ‘dnst&#39; is about twice as fast as ‘ldns’ for #DNSSEC signing. This is our result with a test zone containing about 10M RRs, and using ECDSAP256SHA256 algorithm 13. <br/><br/>Note that for our upcoming signer-pipeline Nameshed we&#39;ll make signing multi-threaded, boosting performance even more. #DNS #OpenSource #rustlang <a href="https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/">https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/</a> 2025-06-05T12:12:36Z https://yabu.me/nevent1qqsqygkj643all26p3ekuyrmn7gdzay4hfm953uyxaj4nd77y65h88qzyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4qrlm06z A new release of Rotonda, our composable, programmable #BGP engine, is now available. Version 0.4.0 &#39;Bold and Undaunting Youth&#39; features and #RPKI RTR component, as well as Route Origin Validation on incoming routes. <a href="https://github.com/NLnetLabs/rotonda/releases/tag/v0.4.0">https://github.com/NLnetLabs/rotonda/releases/tag/v0.4.0</a> 2025-04-24T11:12:56Z https://yabu.me/nevent1qqsphysa9hhje99pceg69909hvp3zvpvt0p5mzfpng76mvmhyfe2cxszyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4q0h9hw5 In light of a recent motion of the Dutch parliament, keeping with the trend of internet centralisation and considering the general state of the world, we are bringing the full DNS chain to a doormat close to you.<br/>(Re-)introducing The Phone Book of the Internet.<br/><br/><a href="https://nlnetlabs.nl/news/2025/Apr/01/phonebook-of-the-internet/">https://nlnetlabs.nl/news/2025/Apr/01/phonebook-of-the-internet/</a> 2025-04-01T11:36:27Z https://yabu.me/nevent1qqsptxc4z3sll4lpr0ww2txmvxd9cvyz4nxpfu6sn93vh9268ahkqwszyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4q9ntsxe NLnet Labs celebrates twenty-five years as an independent, non-profit foundation working on #opensource and #openstandards.<br/>Our mission remains to make the core of the Internet a better, safer place by developing open-source software, through applied research and by promoting and contributing to open standards.<br/>Have you been along for the ride as a user of our #DNS or #routing software, worked with us on #IETF standardisation, applied research or policy advocacy? Share your story!<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/114/029/849/455/169/371/original/6d9fe3de25a90a01.jpeg"> <br/> 2025-02-19T09:37:21Z https://yabu.me/nevent1qqsgvtqfm7uyzjxnvn0std86qd9e2jyyfz6cz22r9dgs904zss65u7gzyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4q69dfx8 We need your help! We&#39;re making good progress with #XDP support for our #DNS software. However, to properly test it we need access to two metal boxes with 10Gb/s NICs that have XDP driver support, e.g. <a href="https://docs.ebpf.io/linux/program-type/BPF_PROG_TYPE_XDP/#driver-support">https://docs.ebpf.io/linux/program-type/BPF_PROG_TYPE_XDP/#driver-support</a> Please contact us if you can help out. 💚 2025-02-03T10:12:56Z https://yabu.me/nevent1qqsph6g05lnu027v8u964s9tedl60djxt3unf84adq75cesxex3k56szyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4qdp0qge Important commit of the day... #OpenSource #Anniversary <a href="https://github.com/NLnetLabs/.github/commit/7c353c209b4f5a035492aad88cf0402a6c8df145">https://github.com/NLnetLabs/.github/commit/7c353c209b4f5a035492aad88cf0402a6c8df145</a><br/> <img src="https://cdn.fosstodon.org/media_attachments/files/113/901/274/232/030/074/original/8254663b7bee1ae5.png"> <br/> 2025-01-27T16:32:01Z https://yabu.me/nevent1qqsdkc3wgj8spa7gq5cz9mc8g4dpk8952e6jelvzv6hrqs5xhqv4klgzyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4qwe88x9 2024 has been a pivotal year for NLnet Labs. Our vision for #DNS, our commitment to the #rustlang programming language and, in its wake, the influx of new talent joining our team, all combined with the support we received from <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1yng6dx32zrl2qhp2kq26al7uzkwqkugrkaxf4gsycs9r5snrkjdqlznhrk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Sovereign Tech Agency</span> (<span class="italic">npub1yng…nhrk</span>)</a></span>, we’ve been able to make a giant leap forward in realizing our #OpenSource goals. We are eager to maintain the momentum! <br/><br/>In the first of a series of articles, we look back at 2024 and set the stage for things to come. <br/><br/><a href="https://blog.nlnetlabs.nl/domain-foundations-the-first-of-our-five-year-vision/">https://blog.nlnetlabs.nl/domain-foundations-the-first-of-our-five-year-vision/</a> 2025-01-07T09:23:56Z https://yabu.me/nevent1qqsw3qk0y4trrn5uwfwz5zz049p4nsnqdkqzgy6ncyxh5wdslhvsjfczyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4q438gvf Our #DNS toolkit for #rustlang, using our domain crate, is nearing completion.<br/><br/>We&#39;ll offer the commands to transform a DNSKEY RR to DS RR (key2ds), create a #DNSSEC key pair (keygen), print out the NSEC3 hash for the given domain name (nsec3-hash), generate a DNSSEC signed zone (signzone), send a NOTIFY message to DNS servers and lastly for now, define functions to perform UPDATE queries.<br/><br/>Up next are the finishing touches, with fuzzing support, packages and man pages. <a href="https://github.com/NLnetLabs/dnst/pulls">https://github.com/NLnetLabs/dnst/pulls</a> 2024-11-14T11:28:06Z https://yabu.me/nevent1qqsvu99nfjvcav6hfgz4rkrd7yycpkvkveaphdxf697390pt9muqyygzyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4qcwlhs4 We&#39;re in the final stint of our one-year commitment to <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1yng6dx32zrl2qhp2kq26al7uzkwqkugrkaxf4gsycs9r5snrkjdqlznhrk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Sovereign Tech Agency</span> (<span class="italic">npub1yng…nhrk</span>)</a></span> to build a memory-safe library for #DNS. <br/><br/>By the end of 2024, our `domain` crate for #rustlang will feature a caching stub resolver, zone transfers, #DNSSEC validation and signing, request routing and a proxy, along with tooling for DNS inspection (dnsi) and manipulation (dnst). <br/><br/>In 2025, we&#39;ll continue building at the same pace with the same team and we&#39;re eager to hear what you would like to see us build most. Let us know! 2024-10-24T08:07:49Z https://yabu.me/nevent1qqs80prtwqazy9lpl4qcw4ppcd4j2cqgts76d6n2p8vvhhqvd9lg3sqzyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4q374rnv With #DNSoverQUIC released in Unbound 1.22.0, we turn our attention to finalizing the review to deploy Fast Reload. As the name suggests it allows reloading the #DNS resolver configuration with no noticeable interruption of the service. #OpenSource #DoQ #QUIC <a href="https://github.com/NLnetLabs/unbound/pull/1042">https://github.com/NLnetLabs/unbound/pull/1042</a> 2024-10-18T06:31:04Z https://yabu.me/nevent1qqsgqnydshfm6puqgncag9fe9vz77kusmlk2l6g8tw4zxdp0jukcsugzyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4qnve8pq It&#39;s been a long road, but we&#39;re happy that #DNS over #QUIC is now merged into the main branch of Unbound resolver. We’re now preparing a release. #DoQ #OpenSource <a href="https://github.com/NLnetLabs/unbound/pull/871">https://github.com/NLnetLabs/unbound/pull/871</a> 2024-10-09T08:38:13Z https://yabu.me/nevent1qqstswda87xw06yew6cjzaakpcyd54r200q33cm8jh3x9lhxw3thatszyq2adcxfulj2nygtwd5q6rwcudasddpq7l2phxtme25t6l63gqr4qjue58l Jeroen Koekkoek, one of our lead developers, has collaborated with <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1yyzfa58nge2wznqhlagjlhrafztuxwy26f2hs9d05hfth6ez3jpsuxdawd" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Daniel Lemire</span> (<span class="italic">npub1yyz…dawd</span>)</a></span> to create a blazingly #DNS fast zone file parser that is now part of our authoritative nameserver NSD. <br/><br/>They have now published a paper outlining how they enhanced parsing throughput using data parallelism, specifically Single Instruction Multiple Data (#SIMD) instructions available on commodity processors. #programming <a href="https://www.authorea.com/1222979">https://www.authorea.com/1222979</a><br/> <img src="https://cdn.fosstodon.org/media_attachments/files/113/089/551/209/722/714/original/10f3f5b97a8256fe.png"> <br/> 2024-09-06T08:00:11Z