NLnet Labs ORG

Unbound is a validating, recursive, and caching DNS resolver.

The NLnet Labs Name Server Daemon (NSD) is an authoritative, RFC compliant DNS nameserver.

A DNS library for Rust.

A friendly DNSSEC signing solution: sensible defaults, controllability, observability and flexibility.

An RPKI Validator and RTR server written in Rust

Modular, programmable BGP Engine

(Codeberg mirror) The statically-typed, compiled embedded scripting language for Rust, used by Rotonda.

RPKI Certificate Authority and Publication Server written in Rust

LDNS is a DNS library that facilitates DNS tool programming

Fast and standards compliant DNS zone parser

A tool to investigate the DNS.

Example programs fot the Journeying into XDP blogs

An RPKI library for Rust

An RPKI Data Proxy

A DNS administration toolbox including re-implementations of important ldns programs

Reusable packaging workflow for Rust projects

Dnssec trigger enables the end-host to use DNSSEC protection for the DNS traffic.

BGP/Routing building blocks

The RPKI Documentation

Handling of BER, CER, and DER encoded data in Rust.

Unbound is a validating recursive DNS resolver. This is an old export of the subversion repository. For the current export, please use

No description.

The Official Unbound User Manual

The NLnet Labs Name Server Daemon (NSD) is an authoritative RFC compliant DNS nameserver. This is an outdated export of the subversion repository. For the current export, head to

A community driven FAQ for the Resource Public Key Infrastructure (RPKI)

A tool to synchronize an RRDP and/or Rsync server with a "hidden" remote RFC 8182 RRDP publication point.

(Codeberg mirror)

RRDP IT: A disk to RPKI Delta Protocol tool.

IP prefixes storage and retrieval

A tool for deploying and testing network routers in the cloud.

A DNS Proxy

Export of the official subversion repository on https://www.net-dns.org/svn/net-dns/

API for connecting with services over IP networks by name

Abstraction layer over various key-value store backends in Rust

Ziggy: the RPKI Wayback Machine

A user interface for Routinator

The Krill User Manual

A KMIP to PKCS#11 bridge for the Cascade project.

KMIP TTLV message protocol library.

A Discord bot that fetches and displays the RPKI validity of a route

OpenINTEL DNSSEC Checker

A command line tool to manually generate RPKI objects.

(Codeberg mirror) A tree-sitter grammar for Roto

A simple Dockerfile that builds Unbound 1.13.1 --with-pythonmodule support and includes a simple Hello World style Python # module to demonstrate the --with-pythonmodule functionality.

A Rust crate for abstracting over octet sequences.

Scripting to create consolidate NRO stats from the RIRs

A user interface for Krill

No description.

proc-macros for rotonda

A user interface for Krill

Processing of dnthought data. Results can be seen here: https://dnsthought.nlnetlabs.nl/

Work on catalog zones

RPKI deployment related tooling developed for/by NLnet Labs.

The base for a daemon service.

DNSSEC Key Management Tools - Documentation Repository

No description.

Sorts zones with 140,000,000 names in 120 seconds (writing the sorted zone takes another 110 seconds)

No description.

BGP routing related tools written in Rust

HTML/CSS/JavaScript files for the browser-based RPKI test ("Smiley")

KMIP HSM signing support for the Domain crate.

Work on --dry-run DNSSEC

No description.

RPKI RTR library for Rust.

Course material used at the Cyber Security Workshop DNS Focused in Bangkok 8-9 May 2019

RPKI Wayback Machine 2.0

Incrementally Deployable Extensible Delegation for DNS

Tools for building web services with hyper.

No description.

No description.

IETF draft for a proxy authoritative DNS server

No description.

No description.

Processing of dnsthought measurements (see http://dnsthought.nlnetlabs.nl/ )

Documentation for Rotonda

Draft for listing Alt-Svc records in the DNS

This draft is an extension on RFC 8914 and proposes a set of new Extended DNS Error (EDE) codes.

Algorithms for Domain Name System (DNS) Cookies construction

IETF draft for XFR over TLS

Presentations and accompanying material for the TMA PhD School 2019

Course material for Nominet DNS course

Repository to work on draft-fujiwara-dnsop-ranking-data

A command line tool to assist with migration from OpenDNSSEC to Cascade.

No description.

Handling of KMIP TTLV encoded data in Rust.

The Relying Party Resiliency Project source code

No description.

Make Debian packages directly from Rust/Cargo projects

No description.

No description.

IETF draft for ds and dnskeyref SVCB parameters for incremental-deleg

No description.

No description.

LDNS is a DNS library that facilitates DNS tool programming

No description.

Delegation Revalidation by DNS Resolvers

The sources of dnsimpl.readthedocs.io.

RSSAC047 initial implementation

No description.

No description.

NLnet Labs package repository signing key for Debian(-derivatives)

test package - manipulate tests

A method for name servers to signal programs outside of the name server software

Testbed for testing recursive resolvers

IETF client proxy protocol draft

No description.

The Routinator User Manual

Collection of plugins for the Pelican static site generator

A Rust crate to help testing network protocol implementations.

Pilot program for CVE submission through GitHub

Layered infrastructure as code for running Krill as a highly available scalable service with integration points for monitoring and log analysis.

DNSSEC Offline KSK Ceremony Tools

Draft for YANG model for configuring Domain Name System (DNS) Zone Provisioning on Authoritative Nameservers

A Pelican plugin that creates a URL hierarchy for pages that matches the filesystem hierarchy of their sources.

A Pelican plugin that adds a page_order attribute to all pages if one is not defined.

'estimated reading time' plugin

Plugin for Pelican to allow flexible referencing of static content.

Plugin for Pelican to allow flexible generation of thumbnails.