Stichting NLnet Labs (NLnet Labs for short) is a not-for-profit foundation founded in 1999 in the Netherlands. Its statutes define its objectives: to develop Open Source software and open standards for the benefit of the Internet.
NLnet Labs' mission is:
To provide globally recognized innovations and expertise for those technologies that turn a network of networks into an Open Internet for All.
» Read more about Labs.

NLnet Labs is a charitable foundation (ANBI) and our main source of income is a subsidy from SIDN and a subsidy from the NLnet Foundation. As we're moving forward and need to ensure our continuity, we welcome your support! In order to develop a sustainable income, we invite you to consider our Support and SLA services, provided by Open Netlabs BV being a 100% subsidiary of NLnet Labs.
» Read more about our funding.

Software updates

NSD 3 end of support May 20th, 2016

Tue, 20 May 2015
With this notification, NLnet Labs makes known the end-of-support for NSD 3. Support for NSD 3 will be continued for one year (date May 20th, 2016).
NSD project page. Email announcement.

NSD 4.1.2 released

Tue, 14 Apr 2015
log level 1 improvements, log notify serial, zone reader crash fixes, integer overflow bugfixes.
NSD project page. Direct Download.

getdns 0.1.7 released

Wed, 8 Apr 2015
Bugfixes, internal rework and printing of JSON dicts
Announcement. Direct Download. API specification.

Unbound 1.5.3 released

Tue, 10 March 2015
Fix daemon exit after reload, and Solaris portability.
Unbound website. Direct Download. Changes.

Net::DNS 0.83 released

Thu, 26 Feb 2015

Unbound 1.5.2 released

Thu, 19 February 2015
Fix validation failure, poison issue with harden-glue off, and add RPZ-style 'inform' local-zone, and control over unix pipes.
Unbound website. Direct Download. Changes.

Net::DNS::SEC 0.22 released

Wed, 11 Feb 2015
RRSIG inception and exception in time values, ECDSA and Gost signature creation and verification, Version requirements detection for optional modules
Net::DNS::SEC 0.22 release announcement. Project website. Direct Download. Changes.

NSD 4.1.1 released

Tue, 3 Feb 2015
zonestatistics, DNAME's CNAME TTL. Fixes for database growth, spinning, and other bugfixes.
NSD project page. Direct Download.

NSD 3.2.18 released

Mon, 28 Jul 2014

Dnssec-Trigger 0.12 released

Thu, 22 May 2014
experimental package that provides DNSSEC on personal computers. Bug fixes, ip address change in default config, software update.
Details. Direct Download. Changes.

ldns 1.6.17 released

Fri, 10 Jan 2014
Many bugfixes, All current (draft) RR types implemented, Better ldns-verify-zone performance and Perl5 bindings with the DNS::LDNS module.
ldns project page. Direct Download. Changes.


NLnet Labs Annual Report 2013

Wed, 27 MAy 2013
We are happy to present NLnet Labs Annual report 2013. In it we present an overview of Labs' various activities and describe their impact.
Annual Report 2013 (PDF).

Open Data Analysis to Retrieve Sensitive Information Regarding National-Centric Critical Infrastructures

Mon, 3 Feb 2014
Open Data repositories store a variety of information from country governments and private sectors. A concern is that with publishing data, sensitive information can be obtained by visual analytic techniques. The report shows that it is possible to retrieve precise locations where critical infrastructures overlap.
MSc. report (PDF).

Securing the last mile of DNS with CGA-TSIG

Tue, 8 Jan 2014
TSIG with shared keys is not scalable as a solution for the DNS last mile problem. CGA-TSIG extends TSIG with CGA so that shared secrets are no longer required. This research investigates the CGA-TSIG proposal by doing a security analysis and by making a PoC implementation in ldns.
MSc. report (PDF).

DNSSEC Audit Framework

Mon, 30 Dec 2013
In collaboration with SWITCH, the .CH and .LI registry, we have created a DNSSEC audit framework, that can be used to conduct a review of your or someone else's DNSSEC implementation.

NLnet Labs Strategic Plan 2014

Wed, 9 Oct 2013
This is the first time we post this type of plan publicly. With this plan we intend to communicate who we are and where we are going, it serves the NLnet Labs Board and Staff but also the parties that support our mission and want to contribute financially.
Strategic Plan(PDF).

Experiences with MPTCP in an International OpenFlow Network

Tue, 3 Sep 2013
Keeping up with the network demand in order to transfer these data sets over the Internet is a challenge. Single links do not have enough capacity anymore. Therefore we need to install more interfaces in the servers and use all available paths in the network. In this paper we describe two new technologies that help to optimally use the capacity of all multiple paths simultaneously: OpenFlow and Multipath TCP (MPTCP).
TNC2013 paper (PDF).


Akkerhuis selected for DNS Root Zone KSK design team

Thu, 5 Feb 2015
Jaap Akkerhuis from NLnet Labs has been selected for the DNS Root Zone KSK rollover plan design team.
ICANN Announcements.

ISC and NLnet Labs Joins Forces

Mon, 10 Nov 2014
ISC and NLnet Labs have signed an agreement to make available a combined Advance Security Notification subscription on their software products.
Press release.

Recent blog posts

Fri, 19 Sep 2014 by wouter
NSD 4.1: zonefile-mode and fork fix Use zone files and not nsd.db NSD 4.1 has been released and it contains a new feature where NSD does not use the nsd.db file, but uses the zonefiles directly.  The feature can be turned on by configuring one line in nsd.conf, it can also be turned off by ...
Mon, 15 Sep 2014 by benno
NLnet Labs announces that it will take full responsibility for continuing the activities of both the OpenDNSSEC softwareproject as well as the support activities of the Swedish OpenDNSSEC AB. OpenDNSSEC was created as an open source turn-key solution for DNSSEC, managing the security of domain names on the Internet. The project drives adoption of Domain ...
Mon, 02 Jun 2014 by olaf
July 11 I  will be leaving NLnet Labs to join the Internet Society as Chief Internet Technology Officer. During the last one-and half decade I have tried to push the needle to a more secure, resilient, and dependable Internet. For the last eight and a half years I did this at NLnet Labs by leading a ...
Thu, 01 May 2014 by wouter
Wouter Wijngaards en Olaf Kolkman Context At NLnet Labs we believe that DNSSEC allows for security innovations that will change the global security and privacy landscape. Innovations like DANE, a technology that allows people to use the global DNS to bootstrap a encrypted channel, are only the start of currently unimaginable technical innovation. The deployment ...

Fri Feb 27 2015

© Stichting NLnet Labs

Science Park 400, 1098 XH Amsterdam, The Netherlands

labs@nlnetlabs.nl, subsidised by NLnet and SIDN.