Dev - The NLnet Labs Blog

Sign in Subscribe

Dev

A collection of 19 posts

Introducing Roto: A Compiled Scripting Language for Rust

Introducing Roto: A Compiled Scripting Language for Rust

By Terts Diepraam We are working on an embedded scripting language for Rust. This language, called Roto, aims to be a simple yet fast and reliable scripting language for Rust applications. The need for Roto comes from Rotonda, our BGP engine written in Rust. Mature BGP applications usually feature some

Domain Foundations – The first of our five year vision

Domain Foundations – The first of our five year vision

By Arya K., Martin Hoffmann and Alex Band About a year ago, we unveiled our vision for the next five years of DNS at NLnet Labs. In this series of articles, we’d like to provide you with an update on our accomplishments last year and our plans for 2025

DNS-over-QUIC in Unbound

DNS-over-QUIC in Unbound

By Wouter Wijngaards, with contributions from Yorgos Thessalonikefs DNS-over-QUIC (DoQ) uses the QUIC transport mechanism to encrypt queries and responses. The DoQ transport for DNS is defined in RFC 9250. With the recent release, Unbound can be configured to support DoQ clients downstream. This feature is not a standard component

NLnet Labs 💞 Packagers

NLnet Labs 💞 Packagers

We are at our best when we can focus on Internet protocols and building elegant implementations in software. That is why we love it when others help out with packaging and distributing our software. And, on February 14th, it feels appropriate to express some love and appreciation for the many

Domain – DNS Building Blocks for Application Developers

Domain – DNS Building Blocks for Application Developers

In the previous article of this series, we presented our vision for DNS for the coming five years. In this post, we'll outline this year's milestones for expanding the domain crate, our Rust library serving as a collection of building blocks to include components of the

The Next Five Years of DNS at NLnet Labs

The Next Five Years of DNS at NLnet Labs

2024 marks 25 years of NLnet Labs. We have delivered on our mission to make the domain name system (DNS) more dependable and trustworthy, and we are full of ambitions for the future. DNS standards and operations have evolved significantly in the last decades as technology advances and increasingly sophisticated

Routing Featured

Of Donkeys, Mules & Horses

A quest for the perfect data-structure to store and retrieve a full table of IP Prefixes, while maintaining the hierarchical relations.

Moving RPKI Beyond Routing Security

Moving RPKI Beyond Routing Security

Resource Tagged Attestations, or RTAs, are a new type of RPKI object that is being proposed by authors from APNIC and NLnet Labs in the IETF. They allow any arbitrary file to be signed ‘with resources’ by one or more parties.

IPv6 and Rust

How difficult is it to use Rust and its ecosystem to write network applications that support IPv6?

Tuning NSD for even better performance

Tuning NSD for even better performance

NLnet Labs is pleased to announce version 4.3.0 of NSD. This release contains, among bug fixes, features to tune NSD for even better performance. Most notably, processor affinity.

Hackathon @ Africa Internet Summit 2019

Hackathon @ Africa Internet Summit 2019

The main objectives of the NLnet Labs foundation are the development of Open Source Software and Open Standards; this combination creates…

Prototyping Unbound extensions in minutes with Python and Docker

Prototyping Unbound extensions in minutes with Python and Docker

How, theoretically, could one lower the barrier to trying out the connection testing feature of the Internet.nl application.

Testdriving the CrypTech Alpha Board

Testdriving the CrypTech Alpha Board

Experiences with the open source hardware cryptographic engine.

I Can’t Believe It’s Not DNS!

I Can’t Believe It’s Not DNS!

Experiences with “I Can’t Believe It’s Not DNS!”, an authoritative DNS server on the Espressif ESP8266, written in MicroPython.

NSD 4.1: zonefile-mode and fork fix

NSD 4.1: zonefile-mode and fork fix

NSD 4.1 has a new feature where it does not use the nsd.db file, but uses the zonefiles directly.

Hackathon at TNW-2014

Hackathon at TNW-2014

At NLnet Labs we believe that DNSSEC allows for security innovations that will change the global security and privacy landscape.

NSD 4.0 Beta: NSD4 sees the light..

NSD 4.0 Beta: NSD4 sees the light..

By Wouter Wijngaards We are proud to announce a beta version of NSD4.0. With this beta release NSD4.0 is feature complete. Earlier [https://www.nlnetlabs.nl/blog/2012/09/14/nsd4-features/] we described our high-level plans with NSD4; below we describe the features that are available in NSD4.

DNS Response Rate Limiting as implemented in NSD

DNS Response Rate Limiting as implemented in NSD

By Wouter Wijngaards (Note 10 Oct 2012: Rate limiting is worked on at this time, and is being tested, it is not available in NSD production code yet). (Update 10 Dec 2012 : changed title to indicate it is based on Vixie and Schryver’s work) Rate Limits Rate limiting is

Howto: Add new RRtypes to NSD

Howto: Add new RRtypes to NSD

People like to put stuff in the DNS. While we could put everything in a TXT record, in general it is better to define a new record type (RRtype). The latest addition is the TLSA record, to support the DANE protocol. The RRtype was added to NSD just one day after the RFC was published.