Skip to content
@NLnetLabs

NLnet Labs

Proudly serving the Internet community since 1999 with core infrastructure tools for DNS and BGP.

💚 Hello from NLnet Labs!

Founded in 1999, NLnet Labs is an independent, non-profit foundation based in the Netherlands. Our mission is to make the core of the Internet a better, safer place by developing open-source software, through applied research and by promoting and contributing to open standards.

🌱 Sustainable Open-Source

We believe in sustainable open-source software. NLnet Labs is not owned by a commercial organisation. We operate independently with 16 full-time developers and researchers on staff. We are funded by organisations who rely on our software and by those who think our work is important.

🤝 Our Commitment to You

  • Our software is, and always will be, open-source with a liberal license
  • We will have at least two developers on each of our projects
  • You will always get all features for free, we will never adopt a "freemium" model
  • We will only develop functionality that serves the general benefit of the Internet community
  • Because our software is used in mission critical environments, we offer support services with a service-level agreement
  • We guarantee continued maintenance of our software for at least two years in the unlikely event all funding would disappear

🫶 Support our Work

We cannot do any of our work without your support. If you depend on our software, please consider purchasing professional support and consultancy services with a service-level agreement for one of our products, sponsoring the development of new software or a feature for an existing product, or through a donation.

🌈 A Vibrant Community

At NLnet Labs, we are committed to an open mindset that encourages anyone to contribute to our software and discussions on Internet technology. To exchange ideas you can find us on Mastodon and we host several mailing lists. For DNS related topics you can also find us on the DNS-OARC Mattermost server and for discussions related to RPKI we maintain a Discord server. You are likely to run into one of us in real-life at industry events such as IETF or ICANN meetings, or at operator meetings such as RIPE or NANOG. We'd love to discuss ideas and hear your feedback!

Pinned Loading

  1. unbound unbound Public

    Unbound is a validating, recursive, and caching DNS resolver.

    C 4.1k 420

  2. nsd nsd Public

    The NLnet Labs Name Server Daemon (NSD) is an authoritative, RFC compliant DNS nameserver.

    C 525 115

  3. domain domain Public

    A DNS library for Rust.

    Rust 428 67

  4. cascade cascade Public

    A friendly DNSSEC signing solution: sensible defaults, controllability, observability and flexibility.

    Rust 49 3

  5. routinator routinator Public

    An RPKI Validator and RTR server written in Rust

    Rust 530 78

  6. rotonda rotonda Public

    Modular, programmable BGP Engine

    Rust 157 4

Repositories

Showing 10 of 117 repositories
  • incremental-deleg Public

    Incrementally Deployable Extensible Delegation for DNS

    NLnetLabs/incremental-deleg’s past year of commit activity
    Makefile 1 3 2 0 Updated Dec 25, 2025
  • unbound Public

    Unbound is a validating, recursive, and caching DNS resolver.

    NLnetLabs/unbound’s past year of commit activity
    C 4,129 BSD-3-Clause 420 307 41 Updated Dec 24, 2025
  • cascade Public

    A friendly DNSSEC signing solution: sensible defaults, controllability, observability and flexibility.

    NLnetLabs/cascade’s past year of commit activity
    Rust 49 BSD-3-Clause 3 104 10 Updated Dec 23, 2025
  • roto Public

    The strongly-typed, compiled embedded scripting language for Rust, used by Rotonda.

    NLnetLabs/roto’s past year of commit activity
    Rust 437 BSD-3-Clause 21 42 (2 issues need help) 8 Updated Dec 23, 2025
  • ldns Public

    LDNS is a DNS library that facilitates DNS tool programming

    NLnetLabs/ldns’s past year of commit activity
    C 341 BSD-3-Clause 101 62 6 Updated Dec 21, 2025
  • nsd Public

    The NLnet Labs Name Server Daemon (NSD) is an authoritative, RFC compliant DNS nameserver.

    NLnetLabs/nsd’s past year of commit activity
    C 525 BSD-3-Clause 115 49 13 Updated Dec 21, 2025
  • draft-yorgos-dnsop-dry-run-dnssec Public

    Work on --dry-run DNSSEC

    NLnetLabs/draft-yorgos-dnsop-dry-run-dnssec’s past year of commit activity
    Makefile 1 0 0 0 Updated Dec 19, 2025
  • kmip2pkcs11 Public

    A KMIP to PKCS#11 relay primarily for the Cascade project.

    NLnetLabs/kmip2pkcs11’s past year of commit activity
    Rust 3 BSD-3-Clause 0 8 2 Updated Dec 19, 2025
  • routecore Public

    BGP/Routing building blocks

    NLnetLabs/routecore’s past year of commit activity
    Rust 24 BSD-3-Clause 4 1 0 Updated Dec 18, 2025
  • rpki-rs Public

    An RPKI library for Rust

    NLnetLabs/rpki-rs’s past year of commit activity
    Rust 45 BSD-3-Clause 24 7 6 Updated Dec 17, 2025