And as always, I forgot the hashtags. How do feeds work again over here? Anyways, we did a Roto release! Check out this thread for the highlights. #rust #rustlang #opensource #roto

Forgot to tag @nlnetlabs.bsky.social properly! Darn you Bluesky let me edit my posts!

Kicking off this weekend in Madrid, #IETF123 began with the #IETFHackathon on Saturday and Sunday. A fantastic way to start the week coding and connecting. Nearly 500 people registered and almost 60 projects. The Hackathon rooms are buzzing!

Unbound 1.23.1 is out — a security update fixing the Rebirthday Attack (CVE‑2025‑5994), affecting DNS resolvers with ECS servers replying without ECS. Details: nlnetlabs.nl/downloads/un... Release: github.com/NLnetLabs/un... Thanks to Xiang Li for reporting!

Need a fast, safe scripting language for your Rust app? Terts Diepraam and the team at @nlnetlabs.bsky.social couldn’t find one that fit. So they built their own. It’s called Roto. And you’ll be hearing all about it at #EuroRust25. 👇🏼 🧵1/3

We updated DNS-over-QUIC in Unbound #DNS resolver to use the latest release of ngtcp2, version 1.13.0. It now also supports OpenSSL 3.5.0. In addition, this change now calls the new performance increase init for the ngtcp2 crypto library. #DoQ #OpenSource github.com/NLnetLabs/un...

When you make it to the top of Hacker News, you end up with lots of feedback that helps to improve your #OpenSource product. We're proud to introduce the latest version of our modular #BGP engine, Rotonda 0.4.2 'Bonjour des Pyrénées'. github.com/NLnetLabs/ro...

We just released Roto 0.6.0! Roto is the JIT compiled, strongly-typed, embedded scripting language for Rust used by Rotonda. This release features many fixes, quality of life improvements and an assignment operator! github.com/NLnetLabs/ro... @nlnetlabs.bsky.social #OpenSource #rustlang #BGP

We're proud to launch "dnst", our #DNS toolbox for network operators. With the "domain" #Rust crate acting as the natural successor to the "ldns" library, with "dnst" we are offering a modern drop-in replacement for the most widely used "ldns" utilities. #rustlang blog.nlnetlabs.nl/introducing-...

Small thread on recent developments with Roto! To recap, Roto is the statically-typed compiled scripting language we're working on at @nlnetlabs.bsky.social .

...speaking about the Roto language: it was featured on the front page of Hacker News after @terts introduced it on our blog: blog.nlnetlabs.nl/introducing-...

We've released Rotonda 0.4.1! It features improved support for RPKI route origin validation in the embedded `roto` language. github.com/NLnetLabs/ro...

We spent 2024 working on 'domain', our #DNS library for #Rust, as part of a grant from the Sovereign Tech Agency. As this work finished up and we approached 2025, we took a closer look at the foundations and realized the best way towards a more ergonomic and efficient 'domain' was to rework them.

Five months, several iterations, and tens of thousands of lines of code later, we're ecstatic to announce the release of domain v0.11.0. We'm so proud of the team, and Arya in particular. You can read about her experiences in this article. #opensource #rustlang blog.nlnetlabs.nl/overhauling-...

We spent 2024 working on 'domain', our #DNS library for #Rust, as part of a grant from the Sovereign Tech Agency. As this work finished up and we approached 2025, we took a closer look at the foundations and realized the best way towards a more ergonomic and efficient 'domain' was to rework them.

Hey look! I've been working on a thing! It's a statically typed, JIT compiled, hot-reloadable, embedded scripting language. blog.nlnetlabs.nl/introducing-...

A new release of Rotonda, our composable, programmable #BGP engine, is now available. Version 0.4.0 'Bold and Undaunting Youth' features and #RPKI RTR component, as well as Route Origin Validation on incoming routes. github.com/NLnetLabs/ro...

NSD 4.12.0 is now available. Our authoritative #DNS server now offers Prometheus metrics, along with several other enhancements. github.com/NLnetLabs/ns...

Unbound 1.23.0 is out! Our #DNS resolver now supports 'fast reload'—it reads new configs in a thread and only briefly pauses to apply them. Also includes Redis replica support, DNS Error Reporting, and bug fixes. nlnetlabs.nl/news/2025/Ap...

In equal honour to his induction into the Internet Hall of Fame, we have honoured our colleague of many years, Jaap Akkerhuis, by naming our meeting room after him. Jaap’s response was heartwarming, but as modest as he is, he said a broom closet would also be fine.

For 25 years, @nlnetlabs.bsky.social has made impactful contributions to secure, open, and resilient internet infrastructure. From DNS security to routing protocols, their work has shaped the digital world we rely on today.

Today's the day—NLnet Labs' 25th jubilee party! 🎉 As an independent non-profit, we keep making the Internet better & safer with #opensource & #openstandards. Used our #DNS or #routing software? Worked with us on #IETF, research, or policy? Share your story!

We need your help! We're making good progress with #XDP support for our #DNS software. However, to properly test it we need access to two metal boxes with 10Gb/s NICs that have XDP driver support, e.g. docs.cilium.io/en/latest/re.... Please contact us if you can help out. 💚

As we make steady progress towards offering a full-fledged #BGP route collector later this year, we're excited to release Rotonda 0.3.0 'Hempcrete & Hawthorn'. #OpenSource #rustlang github.com/NLnetLabs/ro...

Important commit of the day... #OpenSource #Anniversary github.com/NLnetLabs/.g...

Routinator offered support for #RPKI Autonomous System Provider Authorization (ASPA) as an experimental feature for quite some time. #IETF standardization has now progressed far enough to make #ASPA a core feature in Routinator 0.14.1. #OpenSource #OpenStandards github.com/NLnetLabs/ro...

Routinator 0.14.1 is out, fixing CVE-2025-0638, where non-ASCII characters in the file names listed in an #RPKI manifest lead to a crash of Routinator. You should also note CVE-2024-12084, fixing a flaw found in the rsync daemon. Please update both applications. nlnetlabs.nl/news/2025/Ja...

Even without some PRs merged and not counting all the spin off #DNS projects, the amount of changes in our #OpenSource `domain` #rustlang library in 2024 is massive. git diff --shortstat 5f40b97 f826b82 369 files changed, 89151 insertions(+), 7007 deletions(-) blog.nlnetlabs.nl/domain-found...

2024 has been a pivotal year for us. Our vision for #DNS, our commitment to #rustlang and, in its wake, the influx of new talent, all combined with the support from @sovereign.tech, we’ve been able to make a giant leap forward in realizing our #OpenSource goals. blog.nlnetlabs.nl/domain-found...

We have released NSD 4.11.0. One notable feature is that configuration can be reloaded and evaluated on SIGHUP, when enabled with the new "reload-config" option. Also, #DNS cookie secrets will be reevaluated from config. nlnetlabs.nl/news/2024/De...

Our #DNS toolkit for #rustlang using our domain crate is nearing completion. We'll offer tools to transform a DNSKEY RR to DS RR, create a #DNSSEC key pair, print out the NSEC3 hash for the given domain name, generate a DNSSEC signed zone, and more. github.com/NLnetLabs/dn...

We’re happy to announce our investment in @nlnetlabs.bsky.social's domain project, expanding this comprehensive, memory-safe library for building privacy & security-conscious DNS applications. This is another step towards a safer and more resilient internet: www.sovereigntechfund.de/tech/domain