Benno Overeinder
@bjo.bsky.social
Internet R&D, Open Standards and Open Source Sofware at NLnet Labs
Reposted by Benno Overeinder
OpenDNSSEC will reach End-of-Life in Oct 2027.
Since 2010, it’s been a trusted DNSSEC signer, pioneering automated key management and zone signing. As operational needs evolved, maintenance became complex. Our focus now shifts to Cascade, a modern, efficient successor.
nlnetlabs.nl/news/2025/Oc...
Since 2010, it’s been a trusted DNSSEC signer, pioneering automated key management and zone signing. As operational needs evolved, maintenance became complex. Our focus now shifts to Cascade, a modern, efficient successor.
nlnetlabs.nl/news/2025/Oc...
News - End-of-Life Roadmap for OpenDNSSEC
OpenDNSSEC will reach end of life in two years, October 2027.
nlnetlabs.nl
October 3, 2025 at 1:11 PM
OpenDNSSEC will reach End-of-Life in Oct 2027.
Since 2010, it’s been a trusted DNSSEC signer, pioneering automated key management and zone signing. As operational needs evolved, maintenance became complex. Our focus now shifts to Cascade, a modern, efficient successor.
nlnetlabs.nl/news/2025/Oc...
Since 2010, it’s been a trusted DNSSEC signer, pioneering automated key management and zone signing. As operational needs evolved, maintenance became complex. Our focus now shifts to Cascade, a modern, efficient successor.
nlnetlabs.nl/news/2025/Oc...
Kicking off this weekend in Madrid, #IETF123 began with the #IETFHackathon on Saturday and Sunday. A fantastic way to start the week coding and connecting. Nearly 500 people registered and almost 60 projects. The Hackathon rooms are buzzing!
July 19, 2025 at 12:37 PM
Kicking off this weekend in Madrid, #IETF123 began with the #IETFHackathon on Saturday and Sunday. A fantastic way to start the week coding and connecting. Nearly 500 people registered and almost 60 projects. The Hackathon rooms are buzzing!
Reposted by Benno Overeinder
Unbound 1.23.1 is out — a security update fixing the Rebirthday Attack (CVE‑2025‑5994), affecting DNS resolvers with ECS servers replying without ECS.
Details: nlnetlabs.nl/downloads/un...
Release: github.com/NLnetLabs/un...
Thanks to Xiang Li for reporting!
Details: nlnetlabs.nl/downloads/un...
Release: github.com/NLnetLabs/un...
Thanks to Xiang Li for reporting!
nlnetlabs.nl
July 16, 2025 at 9:55 AM
Unbound 1.23.1 is out — a security update fixing the Rebirthday Attack (CVE‑2025‑5994), affecting DNS resolvers with ECS servers replying without ECS.
Details: nlnetlabs.nl/downloads/un...
Release: github.com/NLnetLabs/un...
Thanks to Xiang Li for reporting!
Details: nlnetlabs.nl/downloads/un...
Release: github.com/NLnetLabs/un...
Thanks to Xiang Li for reporting!
Reposted by Benno Overeinder
...speaking about the Roto language: it was featured on the front page of Hacker News after @terts introduced it on our blog:
blog.nlnetlabs.nl/introducing-...
blog.nlnetlabs.nl/introducing-...
Introducing Roto: A Compiled Scripting Language for Rust
By Terts Diepraam
We are working on an embedded scripting language for Rust. This language, called Roto, aims to be a simple yet fast and reliable scripting language for Rust applications.
The nee...
blog.nlnetlabs.nl
May 26, 2025 at 3:21 PM
...speaking about the Roto language: it was featured on the front page of Hacker News after @terts introduced it on our blog:
blog.nlnetlabs.nl/introducing-...
blog.nlnetlabs.nl/introducing-...
Mijn grootvaders broer, Pieter Slooten, koos niet de makkelijke weg. Hij koos verzet. Vandaag denk ik aan hem, en aan allen die hun leven gaven voor iets groters dan henzelf. #4mei #dodenherdenking
www.dodenakkers.nl/herdenkings-...
www.dodenakkers.nl/herdenkings-...
May 4, 2025 at 12:05 PM
Mijn grootvaders broer, Pieter Slooten, koos niet de makkelijke weg. Hij koos verzet. Vandaag denk ik aan hem, en aan allen die hun leven gaven voor iets groters dan henzelf. #4mei #dodenherdenking
www.dodenakkers.nl/herdenkings-...
www.dodenakkers.nl/herdenkings-...
Reposted by Benno Overeinder
A new release of Rotonda, our composable, programmable #BGP engine, is now available. Version 0.4.0 'Bold and Undaunting Youth' features and #RPKI RTR component, as well as Route Origin Validation on incoming routes.
github.com/NLnetLabs/ro...
github.com/NLnetLabs/ro...
Release 0.4.0 'Bold and Undaunting Youth' · NLnetLabs/rotonda
Released 2025-04-24.
Breaking changes
Roto filter names have changed, as dashes are replaced with underscores.
New
An RTR component is introduced, enabling Rotonda to receive RPKI information fr...
github.com
April 24, 2025 at 12:04 PM
A new release of Rotonda, our composable, programmable #BGP engine, is now available. Version 0.4.0 'Bold and Undaunting Youth' features and #RPKI RTR component, as well as Route Origin Validation on incoming routes.
github.com/NLnetLabs/ro...
github.com/NLnetLabs/ro...
Reposted by Benno Overeinder
NSD 4.12.0 is now available. Our authoritative #DNS server now offers Prometheus metrics, along with several other enhancements.
github.com/NLnetLabs/ns...
github.com/NLnetLabs/ns...
Release NSD 4.12.0 · NLnetLabs/nsd
This release introduces Prometheus metrics that can be configured with
enable-metrics (see nsd.conf(5)).
nsd 4.12.0
FEATURES:
Merge #418: Support for DSYNC, EID, NIMLOC, SINK, TALINK, DOA,
AMTRELA...
github.com
April 24, 2025 at 10:03 AM
NSD 4.12.0 is now available. Our authoritative #DNS server now offers Prometheus metrics, along with several other enhancements.
github.com/NLnetLabs/ns...
github.com/NLnetLabs/ns...
Reposted by Benno Overeinder
Unbound 1.23.0 is out! Our #DNS resolver now supports 'fast reload'—it reads new configs in a thread and only briefly pauses to apply them. Also includes Redis replica support, DNS Error Reporting, and bug fixes.
nlnetlabs.nl/news/2025/Ap...
nlnetlabs.nl/news/2025/Ap...
News - Unbound 1.23.0 released
fast reload, redis replica, error reporting, and bug fixes.
nlnetlabs.nl
April 24, 2025 at 9:58 AM
Unbound 1.23.0 is out! Our #DNS resolver now supports 'fast reload'—it reads new configs in a thread and only briefly pauses to apply them. Also includes Redis replica support, DNS Error Reporting, and bug fixes.
nlnetlabs.nl/news/2025/Ap...
nlnetlabs.nl/news/2025/Ap...
Reposted by Benno Overeinder
Our Director of DNS Engineering, Ondřej Surý, is now a co-chair of the DNS operations working group in the IETF. Congratulations!
datatracker.ietf.org/group/dnsop/...
datatracker.ietf.org/group/dnsop/...
Domain Name System Operations (dnsop)
datatracker.ietf.org
April 16, 2025 at 2:44 PM
Our Director of DNS Engineering, Ondřej Surý, is now a co-chair of the DNS operations working group in the IETF. Congratulations!
datatracker.ietf.org/group/dnsop/...
datatracker.ietf.org/group/dnsop/...
Reposted by Benno Overeinder
Deadline extended to 29 April 2025 – still time to submit your papers
Call for papers: ACM/IRTF Applied Networking Research Workshop 2025 www.irtf.org/anrw/2025/
Please consider submitting your work to ANRW 2025, which will co-locate with #IETF123 in Madrid in the week of 19-25 July 2025.
1/3
Please consider submitting your work to ANRW 2025, which will co-locate with #IETF123 in Madrid in the week of 19-25 July 2025.
1/3
April 14, 2025 at 9:44 PM
Deadline extended to 29 April 2025 – still time to submit your papers
Reposted by Benno Overeinder
In equal honour to his induction into the Internet Hall of Fame, we have honoured our colleague of many years, Jaap Akkerhuis, by naming our meeting room after him. Jaap’s response was heartwarming, but as modest as he is, he said a broom closet would also be fine.
April 8, 2025 at 2:15 PM
In equal honour to his induction into the Internet Hall of Fame, we have honoured our colleague of many years, Jaap Akkerhuis, by naming our meeting room after him. Jaap’s response was heartwarming, but as modest as he is, he said a broom closet would also be fine.
The #IETF122 Hackathon is halfway through the first day, with a good atmosphere and plenty of discussions and coding underway. The venue is spacious, with daylight, and is working well for us!
#IETFHackathon #OpenSource #OpenStandards
#IETFHackathon #OpenSource #OpenStandards
March 15, 2025 at 10:05 AM
The #IETF122 Hackathon is halfway through the first day, with a good atmosphere and plenty of discussions and coding underway. The venue is spacious, with daylight, and is working well for us!
#IETFHackathon #OpenSource #OpenStandards
#IETFHackathon #OpenSource #OpenStandards
Reposted by Benno Overeinder
The DNSOP WG has two sessions at #IETF122—Monday and Thursday!
We’ve got a full agenda with ongoing WG drafts and new work. Check out the agenda and see how you can participate (including remotely) here: datatracker.ietf.org/doc/agenda-1....
Looking forward to seeing you! #DNS #IETF
We’ve got a full agenda with ongoing WG drafts and new work. Check out the agenda and see how you can participate (including remotely) here: datatracker.ietf.org/doc/agenda-1....
Looking forward to seeing you! #DNS #IETF
Agenda IETF122: dnsop
datatracker.ietf.org
March 12, 2025 at 10:29 AM
The DNSOP WG has two sessions at #IETF122—Monday and Thursday!
We’ve got a full agenda with ongoing WG drafts and new work. Check out the agenda and see how you can participate (including remotely) here: datatracker.ietf.org/doc/agenda-1....
Looking forward to seeing you! #DNS #IETF
We’ve got a full agenda with ongoing WG drafts and new work. Check out the agenda and see how you can participate (including remotely) here: datatracker.ietf.org/doc/agenda-1....
Looking forward to seeing you! #DNS #IETF
This weekend, the #IETF122 Hackathon is happening in Bangkok! Over 400 people have registered for the #IETFHackathon, including 50 remote participants!
Check out the listed projects or add your own on the Hackathon wiki: wiki.ietf.org/en/meeting/1....
See you all on Saturday and Sunday!
Check out the listed projects or add your own on the Hackathon wiki: wiki.ietf.org/en/meeting/1....
See you all on Saturday and Sunday!
IETF 122 Hackathon
wiki.ietf.org
March 12, 2025 at 10:17 AM
This weekend, the #IETF122 Hackathon is happening in Bangkok! Over 400 people have registered for the #IETFHackathon, including 50 remote participants!
Check out the listed projects or add your own on the Hackathon wiki: wiki.ietf.org/en/meeting/1....
See you all on Saturday and Sunday!
Check out the listed projects or add your own on the Hackathon wiki: wiki.ietf.org/en/meeting/1....
See you all on Saturday and Sunday!
Best job in the world, working at @nlnetlabs.bsky.social!
Today's the day—NLnet Labs' 25th jubilee party! 🎉 As an independent non-profit, we keep making the Internet better & safer with #opensource & #openstandards.
Used our #DNS or #routing software? Worked with us on #IETF, research, or policy? Share your story!
Used our #DNS or #routing software? Worked with us on #IETF, research, or policy? Share your story!
February 21, 2025 at 9:16 AM
Best job in the world, working at @nlnetlabs.bsky.social!
Reposted by Benno Overeinder
We need your help! We're making good progress with #XDP support for our #DNS software. However, to properly test it we need access to two metal boxes with 10Gb/s NICs that have XDP driver support, e.g. docs.cilium.io/en/latest/re.... Please contact us if you can help out. 💚
https://docs.cilium.io/en/latest/refer…
February 3, 2025 at 10:24 AM
We need your help! We're making good progress with #XDP support for our #DNS software. However, to properly test it we need access to two metal boxes with 10Gb/s NICs that have XDP driver support, e.g. docs.cilium.io/en/latest/re.... Please contact us if you can help out. 💚
Reposted by Benno Overeinder
We’re heading to Brussels! 🇧🇪
Our team will be in the heart of Europe this week for a packed schedule of events, and we’d love to connect with you. Whether you're attending the same events or just in the area, don’t hesitate to say hi.
Our team will be in the heart of Europe this week for a packed schedule of events, and we’d love to connect with you. Whether you're attending the same events or just in the area, don’t hesitate to say hi.
January 27, 2025 at 12:39 PM
We’re heading to Brussels! 🇧🇪
Our team will be in the heart of Europe this week for a packed schedule of events, and we’d love to connect with you. Whether you're attending the same events or just in the area, don’t hesitate to say hi.
Our team will be in the heart of Europe this week for a packed schedule of events, and we’d love to connect with you. Whether you're attending the same events or just in the area, don’t hesitate to say hi.
Reposted by Benno Overeinder
Routinator 0.14.1 is out, fixing CVE-2025-0638, where non-ASCII characters in the file names listed in an #RPKI manifest lead to a crash of Routinator.
You should also note CVE-2024-12084, fixing a flaw found in the rsync daemon.
Please update both applications.
nlnetlabs.nl/news/2025/Ja...
You should also note CVE-2024-12084, fixing a flaw found in the rsync daemon.
Please update both applications.
nlnetlabs.nl/news/2025/Ja...
News - Routinator 0.14.1 ‘Black Cats and Voodoo Dolls’ released
CVE-2025-0638, less disk consumption, ASPA
nlnetlabs.nl
January 23, 2025 at 10:57 AM
Routinator 0.14.1 is out, fixing CVE-2025-0638, where non-ASCII characters in the file names listed in an #RPKI manifest lead to a crash of Routinator.
You should also note CVE-2024-12084, fixing a flaw found in the rsync daemon.
Please update both applications.
nlnetlabs.nl/news/2025/Ja...
You should also note CVE-2024-12084, fixing a flaw found in the rsync daemon.
Please update both applications.
nlnetlabs.nl/news/2025/Ja...
Reposted by Benno Overeinder
Routinator offered support for #RPKI Autonomous System Provider Authorization (ASPA) as an experimental feature for quite some time. #IETF standardization has now progressed far enough to make #ASPA a core feature in Routinator 0.14.1. #OpenSource #OpenStandards github.com/NLnetLabs/ro...
Release 0.14.1 ‘Black Cats and Voodoo Dolls’ · NLnetLabs/routinator
This release fixes a crash when the file names listed in a manifest contain illegal characters. We recommend all users to upgrade to this version.
New
ASPA support is now always compiled in and av...
github.com
January 23, 2025 at 11:35 AM
Routinator offered support for #RPKI Autonomous System Provider Authorization (ASPA) as an experimental feature for quite some time. #IETF standardization has now progressed far enough to make #ASPA a core feature in Routinator 0.14.1. #OpenSource #OpenStandards github.com/NLnetLabs/ro...
Reposted by Benno Overeinder
January 27, 2025 at 5:50 PM
Reposted by Benno Overeinder
First blog of year!
Why You Should Be Using a Privacy-Centric DNS Service in 2025
www.quad9.net/news/blog/wh...
#DNS #privacy #security
Why You Should Be Using a Privacy-Centric DNS Service in 2025
www.quad9.net/news/blog/wh...
#DNS #privacy #security
January 17, 2025 at 1:38 PM
First blog of year!
Why You Should Be Using a Privacy-Centric DNS Service in 2025
www.quad9.net/news/blog/wh...
#DNS #privacy #security
Why You Should Be Using a Privacy-Centric DNS Service in 2025
www.quad9.net/news/blog/wh...
#DNS #privacy #security
Reposted by Benno Overeinder
2024 has been a pivotal year for us. Our vision for #DNS, our commitment to #rustlang and, in its wake, the influx of new talent, all combined with the support from @sovereign.tech, we’ve been able to make a giant leap forward in realizing our #OpenSource goals. blog.nlnetlabs.nl/domain-found...
Domain Foundations – The first of our five year vision
By Arya Khanna, Martin Hoffmann and Alex Band
About a year ago, we unveiled our vision for the next five years of DNS at NLnet Labs. In this series of articles, we’d like to provide you with an updat...
blog.nlnetlabs.nl
January 7, 2025 at 9:31 AM
2024 has been a pivotal year for us. Our vision for #DNS, our commitment to #rustlang and, in its wake, the influx of new talent, all combined with the support from @sovereign.tech, we’ve been able to make a giant leap forward in realizing our #OpenSource goals. blog.nlnetlabs.nl/domain-found...
Reposted by Benno Overeinder
💸 Open Source Software: The $9 Trillion Resource Companies Take for Granted
— Harvard Business School
#opensource #funding
— Harvard Business School
#opensource #funding
Open Source Software: The $9 Trillion Resource Companies Take for Granted | Working Knowledge
Measuring open source impact
www.library.hbs.edu
December 31, 2024 at 11:00 AM
💸 Open Source Software: The $9 Trillion Resource Companies Take for Granted
— Harvard Business School
#opensource #funding
— Harvard Business School
#opensource #funding
Reposted by Benno Overeinder
We have released NSD 4.11.0. One notable feature is that configuration can be reloaded and evaluated on SIGHUP, when enabled with the new "reload-config" option. Also, #DNS cookie secrets will be reevaluated from config.
nlnetlabs.nl/news/2024/De...
nlnetlabs.nl/news/2024/De...
News - NSD 4.11.0 released
SIGHUP reloads config, bug fixes.
nlnetlabs.nl
December 18, 2024 at 11:35 AM
We have released NSD 4.11.0. One notable feature is that configuration can be reloaded and evaluated on SIGHUP, when enabled with the new "reload-config" option. Also, #DNS cookie secrets will be reevaluated from config.
nlnetlabs.nl/news/2024/De...
nlnetlabs.nl/news/2024/De...
Reposted by Benno Overeinder
Registration for #IETF122 Bangkok (15-21 March 2025) is open! All the details are at: www.ietf.org/meeting/122/
November 14, 2024 at 4:16 PM
Registration for #IETF122 Bangkok (15-21 March 2025) is open! All the details are at: www.ietf.org/meeting/122/