NLnet Labs

Yes, we’ve got some shared history: NLnet Labs was started by board members of NLnet. But we’ve always been independent. And, as the saying goes: NLnet Labs writes code, NLnet writes checks.

Whiteboard with Hackathon room layout and the projects.

Picture of the Hackathon overflow room.

Picture of main Hackathon room.

Kicking off this weekend in Madrid, #IETF123 began with the #IETFHackathon on Saturday and Sunday. A fantastic way to start the week coding and connecting. Nearly 500 people registered and almost 60 projects. The Hackathon rooms are buzzing!

Unbound 1.23.1 is out — a security update fixing the Rebirthday Attack (CVE‑2025‑5994), affecting DNS resolvers with ECS servers replying without ECS.

Details: nlnetlabs.nl/downloads/un...
Release: github.com/NLnetLabs/un...

Thanks to Xiang Li for reporting!

Need a fast, safe scripting language for your Rust app? Terts Diepraam and the team at @nlnetlabs.bsky.social couldn’t find one that fit. So they built their own. It’s called Roto. And you’ll be hearing all about it at #EuroRust25. 👇🏼

🧵1/3

We updated DNS-over-QUIC in Unbound #DNS resolver to use the latest release of ngtcp2, version 1.13.0. It now also supports OpenSSL 3.5.0.

In addition, this change now calls the new performance increase init for the ngtcp2 crypto library. #DoQ #OpenSource github.com/NLnetLabs/un...

Release 0.4.2 'Bonjour des Pyrénées' · NLnetLabs/rotonda Released 2025-06-18. With this release, Rotonda switches to version 0.6.0 of the roto library. While many things have improved behind the scenes and under the hood, there are no breaking or otherwi...

When you make it to the top of Hacker News, you end up with lots of feedback that helps to improve your #OpenSource product. We're proud to introduce the latest version of our modular #BGP engine, Rotonda 0.4.2 'Bonjour des Pyrénées'. github.com/NLnetLabs/ro...

Release v0.6.0 · NLnetLabs/roto We're happy to announce Roto 0.6.0, which includes many bug fixes, quality of life improvements and an assignment operator! We'd like to thank @algernon for opening 9(!) excellent issues over this ...

We just released Roto 0.6.0!

Roto is the JIT compiled, strongly-typed, embedded scripting language for Rust used by Rotonda.

This release features many fixes, quality of life improvements and an assignment operator!

github.com/NLnetLabs/ro...

@nlnetlabs.bsky.social

#OpenSource #rustlang #BGP

Introducing dnst — a DNS Toolbox for network operators By Alex Band More than two decades ago, NLnet Labs started the ldns library, with the goal of letting developers easily create RFC compliant DNS software in the C programming language. The library in...

We're proud to launch "dnst", our #DNS toolbox for network operators. With the "domain" #Rust crate acting as the natural successor to the "ldns" library, with "dnst" we are offering a modern drop-in replacement for the most widely used "ldns" utilities. #rustlang blog.nlnetlabs.nl/introducing-...

Introducing Roto: A Compiled Scripting Language for Rust By Terts Diepraam We are working on an embedded scripting language for Rust. This language, called Roto, aims to be a simple yet fast and reliable scripting language for Rust applications. The nee...

Small thread on recent developments with Roto!

To recap, Roto is the statically-typed compiled scripting language we're working on at @nlnetlabs.bsky.social .

Introducing Roto: A Compiled Scripting Language for Rust By Terts Diepraam We are working on an embedded scripting language for Rust. This language, called Roto, aims to be a simple yet fast and reliable scripting language for Rust applications. The nee...

...speaking about the Roto language: it was featured on the front page of Hacker News after @terts introduced it on our blog:

blog.nlnetlabs.nl/introducing-...

GitHub - NLnetLabs/rotonda: Modular, programmable BGP Engine Modular, programmable BGP Engine. Contribute to NLnetLabs/rotonda development by creating an account on GitHub.

We've released Rotonda 0.4.1! It features improved support for RPKI route origin validation in the embedded `roto` language.

github.com/NLnetLabs/ro...

We are not the NLnet Foundation/ NGI Zero. We don’t believe they are on Bluesky.

We spent 2024 working on 'domain', our #DNS library for #Rust, as part of a grant from the Sovereign Tech Agency. As this work finished up and we approached 2025, we took a closer look at the foundations and realized the best way towards a more ergonomic and efficient 'domain' was to rework them.

Overhauling Domain By Arya K. Previously, we discussed the massive development our domain library underwent over 2024. However, the project has been around much, much longer than that – the very first commit was made a...

Five months, several iterations, and tens of thousands of lines of code later, we're ecstatic to announce the release of domain v0.11.0. We'm so proud of the team, and Arya in particular. You can read about her experiences in this article. #opensource #rustlang blog.nlnetlabs.nl/overhauling-...

Overhauling Domain By Arya K. Previously, we discussed the massive development our domain library underwent over 2024. However, the project has been around much, much longer than that – the very first commit was made a...

Five months, several iterations, and tens of thousands of lines of code later, we're ecstatic to announce the release of domain v0.11.0. We'm so proud of the team, and Arya in particular. You can read about her experiences in this article. #opensource #rustlang blog.nlnetlabs.nl/overhauling-...

We spent 2024 working on 'domain', our #DNS library for #Rust, as part of a grant from the Sovereign Tech Agency. As this work finished up and we approached 2025, we took a closer look at the foundations and realized the best way towards a more ergonomic and efficient 'domain' was to rework them.

Introducing Roto: A Compiled Scripting Language for Rust By Terts Diepraam We are working on an embedded scripting language for Rust. This language, called Roto, aims to be a simple yet fast and reliable scripting language for Rust applications. The nee...

Hey look! I've been working on a thing!

It's a statically typed, JIT compiled, hot-reloadable, embedded scripting language.

blog.nlnetlabs.nl/introducing-...

Release 0.4.0 'Bold and Undaunting Youth' · NLnetLabs/rotonda Released 2025-04-24. Breaking changes Roto filter names have changed, as dashes are replaced with underscores. New An RTR component is introduced, enabling Rotonda to receive RPKI information fr...

A new release of Rotonda, our composable, programmable #BGP engine, is now available. Version 0.4.0 'Bold and Undaunting Youth' features and #RPKI RTR component, as well as Route Origin Validation on incoming routes.
github.com/NLnetLabs/ro...

Release NSD 4.12.0 · NLnetLabs/nsd This release introduces Prometheus metrics that can be configured with enable-metrics (see nsd.conf(5)). nsd 4.12.0 FEATURES: Merge #418: Support for DSYNC, EID, NIMLOC, SINK, TALINK, DOA, AMTRELA...

NSD 4.12.0 is now available. Our authoritative #DNS server now offers Prometheus metrics, along with several other enhancements.
github.com/NLnetLabs/ns...

News - Unbound 1.23.0 released fast reload, redis replica, error reporting, and bug fixes.

Unbound 1.23.0 is out! Our #DNS resolver now supports 'fast reload'—it reads new configs in a thread and only briefly pauses to apply them. Also includes Redis replica support, DNS Error Reporting, and bug fixes.

nlnetlabs.nl/news/2025/Ap...

A bronze plaque that reads "Jaap Akkerhuis-zaal" in the NLnet Labs' office.

In equal honour to his induction into the Internet Hall of Fame, we have honoured our colleague of many years, Jaap Akkerhuis, by naming our meeting room after him. Jaap’s response was heartwarming, but as modest as he is, he said a broom closet would also be fine.

For 25 years, @nlnetlabs.bsky.social has made impactful contributions to secure, open, and resilient internet infrastructure. From DNS security to routing protocols, their work has shaped the digital world we rely on today.

25 years of NLnet Labs logo: A globe with a circular band around it, featuring the text '25 Years of NLnet Labs'.

Today's the day—NLnet Labs' 25th jubilee party! 🎉 As an independent non-profit, we keep making the Internet better & safer with #opensource & #openstandards.

Used our #DNS or #routing software? Worked with us on #IETF, research, or policy? Share your story!

We need your help! We're making good progress with #XDP support for our #DNS software. However, to properly test it we need access to two metal boxes with 10Gb/s NICs that have XDP driver support, e.g. docs.cilium.io/en/latest/re.... Please contact us if you can help out. 💚

Release 0.3.0 'Hempcrete & Hawthorn' · NLnetLabs/rotonda Released 2025-01-30. Breaking changes In the embedded roto the define and apply blocks are gone. Users can now define variables and functions throughout the script. Arguments to filter-maps in ...

As we make steady progress towards offering a full-fledged #BGP route collector later this year, we're excited to release Rotonda 0.3.0 'Hempcrete & Hawthorn'. #OpenSource #rustlang github.com/NLnetLabs/ro...

Important commit of the day... #OpenSource #Anniversary github.com/NLnetLabs/.g...

Release 0.14.1 ‘Black Cats and Voodoo Dolls’ · NLnetLabs/routinator This release fixes a crash when the file names listed in a manifest contain illegal characters. We recommend all users to upgrade to this version. New ASPA support is now always compiled in and av...

Routinator offered support for #RPKI Autonomous System Provider Authorization (ASPA) as an experimental feature for quite some time. #IETF standardization has now progressed far enough to make #ASPA a core feature in Routinator 0.14.1. #OpenSource #OpenStandards github.com/NLnetLabs/ro...

News - Routinator 0.14.1 ‘Black Cats and Voodoo Dolls’ released CVE-2025-0638, less disk consumption, ASPA

Routinator 0.14.1 is out, fixing CVE-2025-0638, where non-ASCII characters in the file names listed in an #RPKI manifest lead to a crash of Routinator.

You should also note CVE-2024-12084, fixing a flaw found in the rsync daemon.

Please update both applications.
nlnetlabs.nl/news/2025/Ja...

Domain Foundations – The first of our five year vision In this series we’ll update you on our accomplishments in 2024 and our future plans. First we will focus on the work on our domain library for DNS

Even without some PRs merged and not counting all the spin off #DNS projects, the amount of changes in our #OpenSource `domain` #rustlang library in 2024 is massive.

git diff --shortstat 5f40b97 f826b82
369 files changed, 89151 insertions(+), 7007 deletions(-)

blog.nlnetlabs.nl/domain-found...

Domain Foundations – The first of our five year vision By Arya Khanna, Martin Hoffmann and Alex Band About a year ago, we unveiled our vision for the next five years of DNS at NLnet Labs. In this series of articles, we’d like to provide you with an updat...

2024 has been a pivotal year for us. Our vision for #DNS, our commitment to #rustlang and, in its wake, the influx of new talent, all combined with the support from @sovereign.tech, we’ve been able to make a giant leap forward in realizing our #OpenSource goals. blog.nlnetlabs.nl/domain-found...