About

NLnet Labs is a research and development group that focuses on those developments in Internet technology where bridges between theory and practical deployment need to be built; areas where engineering and standardization takes place.
It is our goal to play an active and relevant role in these areas through the development of open source software, through participating in development of open standards, and through the dissemination of knowledge.
All our deliverables are targeted to enhance the open, secure, and innovative nature of the Internet for all. » Read more.

NLnet Labs is a charitable not-for-profit foundation (ANBI) and our main source of income is a subsidy from the NLnet Foundation. We welcome your donation! » Read more.

Software updates

NSD 3.2.15 released

Mon, 4 Feb 2013
RRL, ILNP RR types, improved TSIG initialization, bugfixes.
NSD project page. Direct Download.

Net::DNS 0.72 released

Fri, 28 Dec 2012
Minor bugfix release which resolves issues with TSIG introduced in 0.69.
Net::DNS 0.72 release announcement. Project website. Direct Download. Changes.

Unbound 1.4.19 released

Thu, 12 December 2012
bugfixes, RSAMD5 deprecated
Unbound website. Direct Download. Changes.

OpenDNSSEC 1.3.12 released

Mon, 3 Dec 2012
Bugfix release. For downloads and more information about future release plans, visit the OpenDNSSEC website.
OpenDNSSEC website.

ldns 1.6.16 released

Tue, 13 Nov 2012
ldns 1.6.14 and ldns 1.6.15 had a bug in creating empty bitmaps for NSEC3 on empty non-terminals; and were unable to build a loadable pyldns module.
This release has those two bugs resolved.


ldns project page. Direct Download. Changes.

Credns 0.2.10 released

Fri, 22 Jun 2012
Software program aimed at fortifying DNSSEC by performing validation in the DNS notify/transfer-chain.
Details. Direct Download.

Dnssec-Trigger 0.11 released

Thu, 7 Jun 2012
experimental package that provides DNSSEC on personal computers. Bug fixes, hotspot detection, software update.
Details. Direct Download. Changes.

Publications

RFC6781: DNSSEC Operational Practices, Version 2

Mon, 24 Dec 2012
An updated set of practices for operating the DNS with security extensions (DNSSEC).
RFC6781.

Resilient OpenDNSSEC (MSc. thesis)

Mon, 20 Aug 2012
This thesis analyses error situations in securing DNS zones with OpenDNSSEC. Recommendations are presented to increase the resilience level that OpenDNSSEC can offer against such situations.
PDF.

Discovering Path MTU black holes on the Internet using RIPE Atlas (MSc. thesis)

Mon, 23 July 2012
Measurement and analysis of Path MTU black holes due to ICMP and packet fragment filtering on the Internet.
PDF.

RFC6672: DNAME redirection in the DNS

Mon, 18 June 2012
The DNAME record provides redirection for a subtree of the domain name tree in the DNS.
RFC6672.

RFC6635: RFC Editor Model (2)

Mon, 18 June 2012
This document describes the the RFC Series functions: the RFC Series Editor, the RFC Production Center, and the RFC Publisher.
RFC6635.

RFC 6605: ECDSA for DNSSEC

Mon, 18 June 2012
This document describes how to specify Elliptic Curve Digital Signature Algorithm (DSA) keys and signatures in DNS Security (DNSSEC).
RFC6605.

NLnet Labs Annual Report 2011

Fri, 8 June 2012
We are happy to present NLnet Labs Annual report 2011. It is intended to present an overview of Labs' various activities to those who support NLnet Labs financially, through grants or support contracts, and for those who have shown a general interest in our activities.
Annual Report 2011 (PDF).

Flexible and Robust Key Rollover in DNSSEC

Wed, 28 Mar 2012
Paper describing the OpenDNSSEC Enforcer NG design, presented at SATIN 2012.
PDF.

Other related news

We have a Blog

Fri, 14 Sep 2012
NLnet Labs now maintains a blog. We use it to publish (technical) background informagion about design and the use of our software and other material relevant to the community.
Blog Pages.

Roelof Meijer joins NLnet Labs' board

Thu, 4 June 2012
As of May 31 Roelof Meijer is a member of the NLnet Labs' Board. Roelof is the CEO of SIDN, the Dutch TLD-registry which is one of the major financial contributors of NLnet Labs.
About NLnet Labs.

Collaboration between SIDN and NLnet Labs

Mon, 23 Jan 2012
SIDN, the company behind .nl, today signed a five-year contract with NLnet Labs. NLnet Labs - the Dutch internet technology expertise centre - has a worldwide reputation for its work in the field of DNS and DNSSEC. Through its financial backing for NLnet Labs, SIDN aims to support not only the continued development of DNS applications such as Unbound and NSD, but also NLnet Labs' general internet R&D work, at least for the next five years.
Press Announcement.

Wed Jan 30 2013

© NLnet Labs

Science Park 400, 1098 XH Amsterdam, The Netherlands

labs@nlnetlabs.nl, subsidised by NLnet and SIDN.