NLnet Labs

https://social.nlnetlabs.nl/@nlnetlabs

Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy.

#Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, Cascade and much more...

Note: We are not NLnet (npub1n8y…l96n), nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!

Website: https://nlnetlabs.nl
FOSS: https://github.com/NLnetLabs
Community Forum: https://community.nlnetlabs.nl/
Support our Work: https://nlnetlabs.nl/funding/

Public Key

npub1tra3pvjmnn005gkvws58j368lqeds4qgstjh47hwq36ns352p43qv3q9a6

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs937cskfdeehh6ytx8g2regarlsvkc2syg9et6lthqgafcg69q6csprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqy2hwumn8ghj7un9d3shjtnwdaehgu3wdejhgqgcwaehxw309aex2mrp0yh8xmn0wf6zuum0vd5kzmqyn526r

Publishing to

relay.momostr.pink

relay.nostr.net

relay.snort.social

Author Public Key

npub1tra3pvjmnn005gkvws58j368lqeds4qgstjh47hwq36ns352p43qv3q9a6

Show more details

Published at

2026-07-18T11:16:50+02:00

Kind type

0 Metadata

Event JSON

{ "id": "ccb637369bd38728c1c3a4635866b217aa1b88e4e0b76f91aff7742bf3ddb6ee", "pubkey": "58fb10b25b9cdefa22cc7428794747f832d8540882e57afaee047538468a0d62", "created_at": 1784366210, "kind": 0, "tags": [ [ "t", "nonprofit" ], [ "t", "opensource" ], [ "t", "dns" ], [ "t", "bgp" ], [ "t", "clang" ], [ "t", "rustlang" ], [ "proxy", "https://social.nlnetlabs.nl/users/nlnetlabs", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://social.nlnetlabs.nl/users/nlnetlabs", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"NLnet Labs\",\"about\":\"Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. \\n\\n#Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, Cascade and much more...\\n\\nNote: We are not nostr:npub1n8y64vc26phwqu2ey5uztdrz9qusdlu06qdpk5tukgdlsdj0gu8sl3l96n, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!\\n\\nWebsite: https://nlnetlabs.nl\\nFOSS: https://github.com/NLnetLabs\\nCommunity Forum: https://community.nlnetlabs.nl/\\nSupport our Work: https://nlnetlabs.nl/funding/\\n\",\"website\":\"https://social.nlnetlabs.nl/@nlnetlabs\",\"picture\":\"https://cdn.masto.host/socialnlnetlabsnl/accounts/avatars/114/692/612/288/811/644/original/c71ef2ff59705665.png\",\"banner\":\"https://cdn.masto.host/socialnlnetlabsnl/accounts/headers/114/692/612/288/811/644/original/70b115571c29d2d8.jpeg\",\"nip05\":\"[email protected]\"}", "sig": "1f051c607489e22524083eecac0c3f80bc497ed67f0364ded16d9e07b5e2b3b9584cb59da8826cbe9f26dd2644f5be2c9cbd5eb35824f5be23607d2d3b295b57" }

Last Notes

2026-07-22 14:40:12 CEST

Another Unbound security release is now available, addressing a large set of multi-vendor vulnerabilities. In total, Unbound 1.25.2 fixes 24 CVEs.
Many thanks to the security researchers who responsibly reported these issues.
Release details: https://community.nlnetlabs.nl/t/unbound-1-25-2-released/3430
#DNS #DNSSEC #Security

2026-07-14 10:51:18 CEST

We're huge fans of Rust, and it's been helping us build mission-critical software for the last six years. We love the community and we try to give back where we can. Starting next week, we're giving back in a new way: in collaboration with @npub19jl…066u, we're giving our optimization-obsessed @npub1ppe…swq8 one day a week to speed up the Rust compiler. We're so excited to see what she can do!
#rustlang
https://blog.nlnetlabs.nl/giving-back-to-rust/

2026-06-30 13:41:16 CEST

We have been working incredibly hard on patching all of the LLM-assisted security reports for our authoritative #DNS server NSD.
Today, we're happy to launch the NSD 4.15.0rc1 pre-release so you can test the 20+ fixes that are included. This release also improves the Prometheus metrics, as a nice bonus.
https://community.nlnetlabs.nl/t/nsd-4-15-0rc1-pre-release/3421

2026-06-30 09:10:09 CEST

Several people have asked if they can use (parts of) our new LLM policy. Because we're all about sharing, the text is now licensed under Creative Commons BY 4.0.
https://nlnetlabs.nl/llm-policy/

2026-06-26 15:42:30 CEST

What we do ship this Friday, is a published policy on LLM use in the open source projects we maintain. We hope it’ll help potential contributors assess how to spend their time and ours in the most productive way. https://nlnetlabs.nl/llm-policy/

2026-04-24 11:45:11 CEST

To his complete surprise, our colleague Jaap Akkerhuis was awarded Knight of the Order of the Dutch Lion earlier today for Exceptional Contribution to Society. Akkerhuis is a Dutch Internet pioneer, protocol designer and expert on the internet's naming system.
More at https://blog.nlnetlabs.nl/dutch-internet-pioneer-jaap-akkerhuis-knighted-for-exceptional-contribution-to-society/ #internet #dns

2026-04-17 07:48:06 CEST

RE: https://fosstodon.org/@iscdotorg/116416426577631380
In case you’re wondering: while not as extreme as illustrated by ISC (we don’t offer a bug bounty program), NLnet Labs suffers from a similar situation, in particular for Unbound.
Handling vulnerability reports, both valid ones and false positives, has now become a full time job for the entire Unbound team.
You can argue that it ultimately makes our resolver more secure, it also means we cannot work on building and releasing new features, like:
https://github.com/NLnetLabs/unbound/pulls/wcawijngaards
#DNS #OpenSource #AI
#note1x4m…cyz6

2026-03-10 16:38:51 CET

Back in May 2019, we said goodbye to SVN and Bugzilla and migrated to Git and GitHub [1]. Since then, we accumulated 188 repositories. 🙀
We're now making a list to decide which ones we're moving to @npub1fh7…ee83 and which are going to be archived and left behind.
While we're doing that, we signed NLnet Labs up as a Codeberg e.V. member!
[1] https://lists.nlnetlabs.nl/pipermail/unbound-users/2019-April/006130.html
#OpenSource #FOSS #DigitalSovereignty #DNS #BGP
https://cdn.masto.host/socialnlnetlabsnl/media_attachments/files/116/205/625/506/544/162/original/20b9b341db1af697.png

2026-01-29 09:18:55 CET

🕵️‍♀️ In our recursive resolver Unbound, many of you depend on Response Policy Zones (RPZ), allowing you to customize #DNS responses to for example block malicious domains or phishing sites.
⚡️ With very large RPZ zones, this could be slow. So solve this, we have brought our SIMD capable zone file parser for NSD to Unbound. This is now ready for review.
https://github.com/NLnetLabs/unbound/pull/1397
https://github.com/NLnetLabs/unbound/pull/1399
🧡 Funding for the development of this functionality is organised by @npub1jxp…glgf and provided by @npub1j23…a0nv.

2026-01-27 14:38:01 CET

In our journey to #DigitalSovereignty, here's where we are:
- Domain registration: TransIP and Prolocation 🇳🇱
- Email, calendar, collaborative writing, and more: mailbox.org 🇩🇪
- Document store: Tresorit 🇨🇭
- Critical infra hosting: Hetzner 🇩🇪
- Discourse hosting: Communiteq 🇳🇱
- Security: 1Password.eu 🇨🇦/🇪🇺 and Yubico 🇸🇪
Next up: GitHub —> Codeberg 🇩🇪
To-do: Slack —> Zulip, Matrix, Mattermost?
#OpenSource #DNS #BGP

2026-01-14 14:26:54 CET

#Debian question: Looks like the Debian kernel does not have the CONFIG_TCP_AO setting enabled by default.
How would one go about asking to maybe get that enabled?

2025-11-24 08:46:36 CET

Thanks to @npub1q39…mc8z we now have documentation for Cascade describing how to integrate with a Nitrokey NetHSM to store your DNSSEC keys.
Thanks a lot! 🧡
#DNS #DNSSEC #HSM #OpenSource
https://cascade.docs.nlnetlabs.nl/en/latest/nethsm.html

2025-09-09 08:07:44 CEST

Tomorrow we drop details on the DNSSEC signer we built.
Today, we're dropping the pretence.
Before we wrote a line of code, we asked 16 TLDs:
"What keeps you up at night?"
We expected shop talk.
We got meaningful discussions that taught us DNSSEC in 2025 isn’t just a tech issue.
It’s a control issue.
And the fear of losing it is real.
👉 Read the full report: https://blog.nlnetlabs.nl/dnssec-operations-in-2026-what-keeps-16-tlds-up-at-night/
#DNS #DNSSEC #infosec #TLD #devops #OpenSource

2025-09-04 08:17:31 CEST

A shift begins.
Before writing a line of code for our new #OpenSource toolset, we asked sixteen TLD operators a simple question:
What keeps you up at night?
We expected answers about tooling.
Instead, we heard about trust, continuity, and compliance.
That changed everything.
🗓️ Report drops Tuesday.
From Tuesday on, we’ll show what #DNSSEC resilience looks like.
We’re very excited.
And you’re all invited.
#DNS #Resilience #TLD

2025-06-23 07:53:39 CEST

We're looking for a creative web developer who is all in on #OpenSource!
We plan to build a website using an open source static site generator (your choice, as long as it sings), and need a #freelancer to help us bring our new brand identity and content to life across every screen.
Clean code, fast load times, beautiful design — that’s the goal.
Interested? Reach out for the details. Sharing is caring. 💚

2025-06-16 17:47:10 CEST

This year, NLnet Labs celebrates twenty-five years as an independent, non-profit foundation working on #opensource and #openstandards.
Our mission remains to make the core of the Internet a better, safer place by developing open-source software, through applied research and by promoting and contributing to open standards.
https://cdn.masto.host/socialnlnetlabsnl/media_attachments/files/114/693/778/085/086/716/original/1b9c0cda8d99eb2a.jpeg