nlnetlabs

nlnetlabs, 12 days ago to rust

As part of our ‘domain' #DNS library project, we are including diagnostics tooling. Instead of simply reimplementing ‘dig' in #rustlang, we wanted to rethink what operators would want from such a command line tool. Today, we're happy to release version 0.1.0 of ‘dnsi’. https://crates.io/crates/dnsi

nlnetlabs, 12 days ago to rust

We love contributing to the #Rust community! For day 2 of @rustnl 2024, @alexband passed the hosting baton to the newest member of our #OpenSource dev team, @terts. 💚🦀 #rustlang

nlnetlabs, 12 days ago to random

Today we released Unbound 1.20.0. This release has a fix for the DNSBomb issue CVE-2024-33655, which had a low severity for our #DNS resolver. https://nlnetlabs.nl/news/2024/May/08/unbound-1.20.0-released/

nlnetlabs, 19 days ago to rust

We’re pleased to announce the release of version 0.10.0 of “domain”, our #rustlang crate for interacting with the #DNS. This release results from the first three months of increased focus on the library, with three full-time #Rust developers and a one-year commitment from @sovtechfund.

We included three major new features: the client side of sending DNS messages, its server counterpart, and the machinery for representing DNS zones. Read all about it in this post. https://nlnetlabs.nl/news/2024/Apr/29/domain-0.10.0-released/

nlnetlabs, 21 days ago to random

NLnet Labs co-founder Frances Brazier received a knighthood (“Ridder in de Orde van de Nederlandse Leeuw”) last Friday.

Frances has been a visionary in recognising the potential of IP-based networking. As a co-founder of NLnet @NGIZero, she played a crucial role in shaping the Dutch internet landscape.

Her commitment to an open and accessible internet continued with the creation of NLnet Labs, dedicated to research and development of open standards and software.

nlnetlabs, 25 days ago to opensource

The pre-release of NSD 4.10.0 is now available. This version of our #OpenSource authoritative #DNS server dramatically speeds up zone loading and IXFRs, up to almost four times faster than the previous implementation! 🏎️

Please test out this Release Candidate on every kind of architecture and operating system you can find to help us iron out the corner cases we haven’t found ourselves yet. 💚🙏 https://lists.nlnetlabs.nl/pipermail/nsd-users/2024-April/003302.html

nlnetlabs, 25 days ago to random

Our new SIMD-capable #DNS zonefile parser is now part of the NSD main branch as a submodule. We'll finish the latest tests today and then make it available as a pre-release to allow you to test the speed improvements. We're curious to hear how this performs in your systems! https://github.com/NLnetLabs/nsd/pull/328

fsfe, 29 days ago to random

💡 The @NGIZero initiative aims to build a more resilient, trustworthy and open Internet that empowers end users to control technology. 🚀

💥 The :fsfe: #FSFE is a partner of the Next Generation Internet Zero consortium, involved in several projects coordinated by @nlnetlabs! 👀

#NGI0 #NGIZero

ℹ️ Learn more about this EU initiative ⤵️
https://fsfe.org/activities/ngi/ngi.html

nlnetlabs, 1 month ago to opensource

A statement by @reseauxsansfil on the status of the SoftHSM #OpenSource project. https://github.com/opendnssec/SoftHSMv2/issues/712#issuecomment-2045162376

nlnetlabs, 1 month ago to rust

Heading into the weekend, our #DNS #rustlang team delivered an absolutely massive milestone with initial server capabilities for our ‘domain' library. On Monday, we'll package it up with a report for @sovtechfund. 🎁 https://github.com/NLnetLabs/domain/pull/274

nlnetlabs, 1 month ago to opensource

We're super happy to release version 4.9.0 of NSD, our #OpenSource authoritative #DNS server. This release adds support for Catalog Zones (RFC 9432) version "2". https://lists.nlnetlabs.nl/pipermail/nsd-users/2024-April/003297.html

dansup, 1 month ago to fediverse

Fun fact, Pixelfed was the first #fediverse project that NGI funded back in early 2020 😎

waag, 1 month ago (edited 1 month ago) to fdroid Dutch

Our smartphones, operating systems and apps are dominated by Google & Apple. "[...] these two Silicon Valley profit-driven companies decide which apps are or aren't allowed, and moderate what our mobile software looks like." says @danlammerhirt from @waag working on the Mobifree project (together with a.o. @efoundation @fdroid @NGIZero @murena @microg @delta

https://waag.org/en/article/why-smartphones-are-key-better-internet/

nlnetlabs, 1 month ago to random

The first Release Candidate of NSD 4.9.0 is now available, which adds support for #DNS Catalog Zones (RFC 9432) version "2". https://lists.nlnetlabs.nl/pipermail/nsd-users/2024-March/003294.html

nlnetlabs, 2 months ago to random

We're implementing fast_reload in Unbound #DNS resolver. It works by creating a thread that reads the configuration and allocates memory. Then, it quickly halts the other threads, updates the config and swaps the trees of forwards and stubs in place, and continues the other threads. A test with thousands of forwards has a reload time of 0.027s with 0.0003s spent in halting the other threads. https://github.com/NLnetLabs/unbound/pull/1015

nlnetlabs, 2 months ago to random

Since last November, we've been quite busy with security releases for Unbound. Now, with this latest bug fix release out the door, our aim is to get some features released we've been preparing, such as DNS-over-QUIC and upstream #DNS cookies. 🍪🍪 #DoQ https://github.com/NLnetLabs/unbound/milestone/3

nlnetlabs, 2 months ago to random

We're happy to introduce Unbound 1.9.3. This a bug fix release of our #DNS resolver, fixing a smörgåsbord of small issues. https://nlnetlabs.nl/news/2024/Mar/14/unbound-1.19.3-released/

shaft, 3 months ago to random

The #DNS client #drill handles EDE in a funny way : it dumps the extra text in hexadecimal and then a decoded version.

It is funny because the EXTRA-TEXT field is clearly defined as a UTF-8 encoded field (RFC 8914 section 2).

I guess that @nlnetlabs are so used to handle text field just defined as binary stuff (eg TXT records) that they did not pay attention to that :')

$ drill -D dnssec-failed.org
;; ->>HEADER<<- opcode: QUERY, rcode: SERVFAIL, id: 24
47
...
; EDE: 6 (DNSSEC Bogus): 76 61 6c 69 [...] (validation failure [...])

nlnetlabs, 3 months ago to rust

We are incredibly excited that @terts has joined our team! In addition to being a super nice person, his experience in #rustlang with his work on #uutils will be fantastic to have onboard. Now, what will it be? #DNS or #BGP… 👋

nlnetlabs, 3 months ago to opensource

Catalog Zones for NSD is now properly documented, courtesy of @willem. #DNS #OpenSource #Docs https://nsd.docs.nlnetlabs.nl/en/latest/catalog-zones.html

nlnetlabs, 3 months ago to opensource

Merged and already battle-tested in production by @sunet: Catalog Zones for our authoritative #DNS nameserver NSD. This implementation does the task from within the transfer daemon (xfrd). #OpenSource #Catz 😻 https://github.com/NLnetLabs/nsd/pull/304

nlnetlabs, 3 months ago to opensource

It's a busy time for our package maintainers again, so today, we want to express #love and appreciation for the many packaging efforts for our projects. It's what makes #OpenSource great! 💌💌 #ValentinesDay #DNS #BGP https://blog.nlnetlabs.nl/nlnet-labs-loves-packagers/

nlnetlabs, 3 months ago to security

Coordinating and responsibly disclosing today’s two #DNSSEC #security vulnerabilities has been a huge coordination effort amongst researchers, #DNS implementers and early-access testing by our collective customers. It is a true testament to #OpenSource security and resilience. Our thanks go out to everyone involved! 💚🛡️💚 https://nlnetlabs.nl/projects/unbound/security-advisories/

nlnetlabs, 3 months ago to security

🚨 We have released version 1.19.1 of Unbound #DNS resolver, which contains #security fixes for CVE-2023-50387 and CVE-2023-50868. ⚠️ Please update as soon as possible in order to mitigate two #DNSSEC validation vulnerabilities that affect all well-known resolvers. https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/

nlnetlabs, 3 months ago to rust

The NLnet Labs crew had a blast at #FOSDEM last weekend. @partim presented in the #DNS Devroom on the ‘domain' crate, a library in #rustlang serving as building blocks for developers. Development is commissioned by the @sovtechfund in 2024 and covers client, server and proxy functionality. Watch the recording here: https://fosdem.org/2024/schedule/event/fosdem-2024-2853-domain-a-modular-rust-dns-toolkit/ or read the blog post here: https://blog.nlnetlabs.nl/domain-dns-building-blocks-for-rust-application-developers/