mastodon
4.6.6
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy.
#Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more...
Note: We are not @nlnet@social.nlnet.nl, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
We have just released the second release candidate for Krill 0.15.0. The release contains a lot of internal refactoring, along with a couple of changes.
The most important one is the way multi-user authentication works.If you are not running Krill with just the admin token, you may want to read https://krill.docs.nlnetlabs.nl/en/v0.15.0-rc2/multi-user.html. We’ll write a migration guide before the full 0.15.0 release. #RPKI #OpemSource #rustlang https://github.com/NLnetLabs/krill/releases
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
Little Friday shout-out to @andreas@mastodon.arrakis.se for setting us up with a YubiHSM so we can test our KMIP and PKCS#11 code for our #DNSSEC signer Nameshed. 💚 Thanks a lot for supporting #OpenSource! #DNS #rustlang https://github.com/NLnetLabs/kmip2pkcs11
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
A kind reminder to please provide your feedback on the #XDP implementation we did for NSD, our authoritative #DNS server.
With zero-copy disabled, weI saw a 1.7x improvement in handled queries per second compared to UDP through the network stack. We expect the improvement to be higher with a driver that fully supports AF_XDP zero-copy mode.
We're curious to hear about your experiences!
https://blog.nlnetlabs.nl/experimental-support-for-af_xdp-sockets-in-nsd/
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
@jpmens@mastodon.social We’d love to add more functionality to `dnst` by adding a drop-in replacement for `ldns-verify-zone` and include new functionality to make it comparable to validns, if desired.
As it stands, offering a prototype for Nameshed has our priority now, so that we can release a production grade #DNSSEC signer later in the year.
That being said, perhaps one of the developers needs to scratch an itch over the summer. 😉
#DNS #OpenSource #rustlang https://github.com/NLnetLabs/dnst
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
Philip explains Nameshed's #DNSSEC key management design at the ICANN83 DNSSEC And Security Workshop. Presentation starts at 58:32. #DNS #OpenSource #rustlang https://icann.zoom.us/rec/play/rZO4WQ43FXCBle-B2aMGbyuxoMqmt4-HU9PJVfjsZA4DYxv2k9X0IyhR8f0F_SSZwRbSgCIO3KxUtVuF.v4W-DaCIkkBU7JmJ?eagerLoadZvaPages=sidemenu.billing.plan_management&accessLevel=meeting&canPlayFromShare=true&from=share_recording_detail&startTime=1749475871000&componentName=rec-play&originRequestUrl=https%3A%2F%2Ficann.zoom.us%2Frec%2Fshare%2FnEPUGP0kRV04R3oQaAt0i2c_UQhxb2UHzg16VylkViD-EomNkaaPiiuSzWsWooUC.3ieFTG4o1XsG-TDW%3FstartTime%3D1749475871000
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
At the ICANN83 DNSSEC And Security Workshop, we presented the flexible key management we have designed for our new #DNSSEC signing solution Nameshed. Philip explains how we avoid loading an unknown shared library into the signer process and how we keep track of state. #DNS #OpenSource #rustlang Slides: https://static.sched.com/hosted_files/icann83/09/2.5%20Homburg%20-%20Flexible%20Key%20Management%20in%20Nameshed.pdf?_gl=1*36t2bs*_gcl_au*MjAzNDMxMTY4MS4xNzQ5NDc3NDU4
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
Question in relation to our #DNSSEC signing project Nameshed: does anyone have operational experiences with #KMIP for interfacing with HSMs, as an alternative to PKCS#11? We'd love to hear from you. — Boosts appreciated 💚 #DNS #OpenSource #rustlang
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
‘dnst' is about twice as fast as ‘ldns’ for #DNSSEC signing. This is our result with a test zone containing about 10M RRs, and using ECDSAP256SHA256 algorithm 13.
Note that for our upcoming signer-pipeline Nameshed we'll make signing multi-threaded, boosting performance even more. #DNS #OpenSource #rustlang https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
We're proud to launch "dnst", our #DNS toolbox for network operators. Twenty years ago, we introduced the "ldns" C-library, along with a collection of example utilities for generating keys, signing a zone, and more. With the "domain" #Rust crate acting as the natural successor to the "ldns" library, with "dnst" we are offering a modern, well-maintained drop-in replacement for the most widely used "ldns" utilities. #OpenSource #rustlang https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
Another milestone in making Nameshed, our new #DNSSEC solution, a reality: @ximon18@fosstodon.org just merged a drop-in replacement for `ldns signzone` - with several improvements for good measure. #DNS #OpenSource #rustlang
https://github.com/NLnetLabs/dnst/pull/8
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
When your project makes it to the top of Hacker News. https://news.ycombinator.com/item?id=44050222 #OpenSource #rustlang #BGP
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
One of the side effects of making a drop-in replacement for `ldns` in #rustlang is finding and fixing bugs in the original, along the way. #DNS #OpenSource https://github.com/NLnetLabs/ldns/issues/277
Dutch #NonProfit foundation proudly serving the Internet community since 1999 with #OpenSource software for #DNS and #BGP. Applied research, open standards advocates, bridging technology and policy. #Clang origins, now #rustlang aficionados. The people behind Unbound, NSD, Routinator, domain and much more... Note: We are not @nlnet, nor are we funded by them or affiliated with them. Lots of 💚 for what they do though!
2024 has been a pivotal year for NLnet Labs. Our vision for #DNS, our commitment to the #rustlang programming language and, in its wake, the influx of new talent joining our team, all combined with the support we received from @sovtechfund@mastodon.social, we’ve been able to make a giant leap forward in realizing our #OpenSource goals. We are eager to maintain the momentum!
In the first of a series of articles, we look back at 2024 and set the stage for things to come.
https://blog.nlnetlabs.nl/domain-foundations-the-first-of-our-five-year-vision/