The Curious Engineer

All blogs / Networking

The NLnet Labs Blog

blog.nlnetlabs.nl

Of Trees and Tries — The NLnet Labs Blog

NetworkingRustSecurity

’15’20’25
Posts
103 from 14 Sep 2012 to 20 Oct 2026
Posting
monthly (11 in the last year)
Kind
project news
Feed
https://blog.nlnetlabs.nl/rss/

2026 10

  1. NLnet Labs as an open-source software steward under the CRA
  2. Maintaining the love for coding in the time of AI
  3. Seven years of godspeed: Audit confirms Routinator's maturity
  4. Giving Back to Rust
  5. Cascade: Start your engines!
  6. One year of Roto, a compiled scripting language for Rust
  7. Dutch Internet pioneer Jaap Akkerhuis Knighted for Exceptional Contribution to Society
  8. The Winter 2026 newsletter
  9. Smaller, faster: NSD's refactored RDATA storage and compile time memory reduction options
  10. Introducing the NLnet Labs Community forum

2025 10

  1. The Fall 2025 newsletter
  2. Hope Is Not a Strategy
  3. DNSSEC Operations in 2026 – What Keeps 16 TLDs Up at Night
  4. Enabling more default features in NSD 4.13.0
  5. Introducing dnst — a DNS Toolbox for network operators
  6. Experimental support for AF_XDP sockets in NSD
  7. Overhauling Domain
  8. Introducing Roto: A Compiled Scripting Language for Rust
  9. Prometheus Metrics in NSD 4.12.0
  10. Domain Foundations – The first of our five year vision

2024 10

  1. DNS-over-QUIC in Unbound
  2. Supply chain security obligations for NIS2 regulated entities vs. developers of open source software
  3. Tracking CRA implementation for Free and Open Source Software and its Stewards
  4. Introducing new DNS Diagnostics Tooling
  5. The Spring 2024 Newsletter
  6. NLnet Labs 💞 Packagers
  7. What I learned in Brussels: the Cyber Resilience Act
  8. The Sovereign Tech Fund Bolsters Our Sustainable Open-Source Efforts
  9. Domain – DNS Building Blocks for Application Developers
  10. The Next Five Years of DNS at NLnet Labs

2023 2

  1. Destination: Brussels – Navigating the Open-Source Waters
  2. Running Krill Under RIPE NCC

2022 15

  1. DNS and Rust in Critical Infrastructure
  2. Open-source software vs. the proposed Cyber Resilience Act
  3. Somebody Told Me
  4. Cooking with SIMD
  5. ⛱ The Things We Did Last Summer
  6. Where Did My Packet Go? Measuring the Impact of RPKI ROV
  7. Journeying into XDP: XDPerimenting with DNS telemetry
  8. 🛠 A confidence building toolbox
  9. Zone verification, the feature formerly known as CreDNS, formerly known as dnSƧexy
  10. Running Krill under APNIC
  11. Running Krill under ARIN
  12. Extended DNS Error support for Unbound
  13. Newsletter: DNS-over-QUIC coming to Unbound
  14. The NLnet Labs Newsletter – Spring 2022
  15. Journeying into XDP: Fully-fledged DNS service augmentation

2021 6

  1. Braving the Waves with Krill
  2. Testing the Waters with Krill
  3. Making a Krill Sanctuary
  4. Dishing up Krill
  5. Of Donkeys, Mules & Horses
  6. How To Run Krill Behind an NGINX Reverse Proxy

2020 17

  1. Supporting DNSSEC Key Signing Ceremonies
  2. Moving RPKI Beyond Routing Security
  3. Introducing JDR: explore, inspect and troubleshoot the RPKI
  4. SAD DNS and NLnet Labs DNS software
  5. Why Routinator Doesn’t Fall Back to Rsync
  6. Journeying into XDP Part 1: Augmenting DNS
  7. Testing .. 123 Delegated RPKI
  8. DNS-over-HTTPS in Unbound
  9. Some Country for Old Men
  10. Journeying into XDP: Part 0
  11. Krill Gains Powerful ROA Management Based on BGP Routing
  12. IPv6 and Rust
  13. Adapting Radix Trees
  14. Tuning NSD for even better performance
  15. Evolving Krill
  16. Response Policy Zones in Unbound
  17. On adopting a Code of Conduct for NLnet Labs

2019 5

  1. Leaping through RPKI history with Ziggy
  2. Measuring the impact of DNS Flag Day
  3. Hackathon @ Africa Internet Summit 2019
  4. Prototyping Unbound extensions in minutes with Python and Docker
  5. Krill — A New RPKI Certificate Authority

2018 7

  1. The Ongoing Story of OpenINTEL: Measuring the DNS for Research, Policy and Protocol Improvements
  2. Sunrise DNS over TLS, sunset DNSSEC?
  3. Introducing the Routinator 3000
  4. Building a new home for NLnet Labs
  5. Aggressive use of the DNSSEC-Validated cache in Unbound
  6. The peculiar case of NSEC processing using expanded wildcard records
  7. Bringing DNS Security and Privacy to the End User

2017 2

  1. Privacy: Using DNS-over-TLS with the new Quad9 DNS Service
  2. Testdriving the CrypTech Alpha Board

2016 2

  1. Client based filtering in Unbound
  2. I Can’t Believe It’s Not DNS!

2015 1

  1. Algorithm Rollover in OpenDNSSEC 1.3

2014 4

  1. NSD 4.1: zonefile-mode and fork fix
  2. OpenDNSSEC project transferred to NLnet Labs
  3. Hackathon at TNW-2014
  4. Does Open Data Reveal National Critical Infrastructures?

2013 7

  1. How “National” is the Dutch Critical IP Infrastructure?
  2. RRL SLIP and Response Spoofing
  3. NSD4 TCP Performance
  4. NSD4 High Memory Usage
  5. NSD4 Performance Measurements
  6. Using PMTUD for a higher DNS responsiveness
  7. Open Recursor Blocked

2012 5

  1. NSD 4 migration and features
  2. NSD 4.0 Beta: NSD4 sees the light..
  3. DNS Response Rate Limiting as implemented in NSD
  4. Howto: Add new RRtypes to NSD
  5. NSD4 Features