DNS Supporting DNSSEC Key Signing Ceremonies Over the past decade, uptake of DNSSEC has grown significantly. The vast majority of top-level domains (TLDs) is now DNSSEC-signed. While key signing ceremonies are now deployed in many places in the DNSSEC community, what is lacking is a common approach, especially related to tooling. NLnet Labs 1 Dec 2020 • 13 min read
RPKI Introducing JDR: explore, inspect and troubleshoot the RPKI Today we launch the first version of JDR, our hosted tool to check anything in the RPKI. While not yet 100% feature complete, we think it already offers useful insights NLnet Labs 18 Nov 2020 • 5 min read
Research Journeying into XDP Part 1: Augmenting DNS How can eXpress Data Path (XDP) augment existing DNS software? We share our experiences of implementing Response Rate Limiting in XDP. NLnet Labs 23 Oct 2020 • 12 min read
Research Journeying into XDP: Part 0 Network programming using XDP has been on our radar for a while now. As tooling around this technology has vastly improved, we decided that it was time to finally get our hands dirty and see what this technology is all about. NLnet Labs 20 Jul 2020 • 10 min read
Research Adapting Radix Trees NLnet Labs continuously strives to push the performance of its products. Over the course of the past year we researched improvements to main-memory databases for our authorative nameserver, NSD. NLnet Labs 11 Jun 2020 • 7 min read
Research Leaping through RPKI history with Ziggy RPKI, the Resource Public Key Infrastructure, is an important cornerstone in securing the BGP routing system on the Internet. In its… NLnet Labs 30 Aug 2019 • 14 min read
Research Measuring the impact of DNS Flag Day DNS Flag Day 2019 stimulated a lot of awareness, and as a result, the Internet got a little better. NLnet Labs 19 Aug 2019 • 8 min read
Dev Hackathon @ Africa Internet Summit 2019 The main objectives of the NLnet Labs foundation are the development of Open Source Software and Open Standards; this combination creates… NLnet Labs 4 Jul 2019 • 5 min read
Research The Ongoing Story of OpenINTEL: Measuring the DNS for Research, Policy and Protocol Improvements Measuring the DNS for Research, Policy and Protocol Improvements. NLnet Labs 4 Dec 2018 • 7 min read
Research Does Open Data Reveal National Critical Infrastructures? This blog post is based on the report “Open Data Analysis to Retrieve Sensitive Information Regarding National-Centric Critical Infrastructures” by Renato Fontana. Democratization of Public DataThe ideas of Open Data NLnet Labs 21 Feb 2014 • 3 min read
Research How “National” is the Dutch Critical IP Infrastructure? This blog post is based on the report “Discovery and Mapping of the Dutch National Critical IP Infrastructure” by Fahimeh Alizadeh and Razvan Oprea. ProblemAfter the publication of the Critical NLnet Labs 24 Sep 2013 • 6 min read
Research Using PMTUD for a higher DNS responsiveness By Willem Toorop Motiviation In May 2011 we were notified (from a Japan based enthusiast) that our site wasn’t reachable over IPv6 unless the user lowered the MTU on NLnet Labs 4 Jun 2013 • 7 min read
