The NLnet Labs Blog
  • Home
  • DNS
  • Routing
  • Research
  • Newsletter
  • Website
  • GitHub
  • Mastodon
Sign in Subscribe

Cascade

Cascade DNSSEC Signer
Hope Is Not a Strategy
DNSSEC

Hope Is Not a Strategy

Open source software is often the unglamorous workhorse in your server rack, the silent operator in your stack, and the punk soul in your operations pipeline.  It's thoroughly tested and trusted for all the right reasons. But when your business depends on it, you still need a lifeline.
18 Sep 2025 3 min read
The Illusion of Five Nines
Cascade

The Illusion of Five Nines

In most industries, service providers boast about five nines availability — 99.999%. That sounds impressive: just five minutes of downtime per year. But DNS isn’t like most industries. For top-level domains, downtime is not acceptable. If a registry goes dark, hospitals, banking systems, and e-commerce all go offline with
03 Sep 2025 2 min read
The DNSSEC Illusion: 16 TLDs revealed the hidden fragility in DNSSEC ops
Cascade

The DNSSEC Illusion: 16 TLDs revealed the hidden fragility in DNSSEC ops

For years, a European TLD ran their DNSSEC toolchain without incident. Everything “just worked.” Updates were rare, and no one touched the setup. Then their only DNSSEC expert left. What looked like stability turned out to be fragility. The system wasn’t resilient — it was dependent on one person’s
01 Sep 2025 1 min read
Page 1 of 1
The NLnet Labs Blog © 2025
Powered by Ghost