Skip to content
@NLnetLabs

NLnet Labs

Proudly serving the Internet community since 1999 with core infrastructure tools for DNS and BGP.

💚 Hello from NLnet Labs!

Founded in 1999, NLnet Labs is an independent, non-profit foundation based in the Netherlands. Our mission is to make the core of the Internet a better, safer place by developing open-source software, through applied research and by promoting and contributing to open standards.

🌱 Sustainable Open-Source

We believe in sustainable open-source software. NLnet Labs is not owned by a commercial organisation. We operate independently with 16 full-time developers and researchers on staff. We are funded by organisations who rely on our software and by those who think our work is important.

🤝 Our Commitment to You

  • Our software is, and always will be, open-source with a liberal license
  • We will have at least two developers on each of our projects
  • You will always get all features for free, we will never adopt a "freemium" model
  • We will only develop functionality that serves the general benefit of the Internet community
  • Because our software is used in mission critical environments, we offer support services with a service-level agreement
  • We guarantee continued maintenance of our software for at least two years in the unlikely event all funding would disappear

🫶 Support our Work

We cannot do any of our work without your support. If you depend on our software, please consider purchasing professional support and consultancy services with a service-level agreement for one of our products, sponsoring the development of new software or a feature for an existing product, or through a donation.

🌈 A Vibrant Community

At NLnet Labs, we are committed to an open mindset that encourages anyone to contribute to our software and discussions on Internet technology. To exchange ideas you can use our Discourse community forum, find us on Mastodon or use one of our mailing lists.

You are likely to run into one of us in real-life at industry events such as IETF or ICANN meetings, or at operator meetings such as RIPE or DNS-OARC. We'd love to discuss ideas and hear your feedback!

Pinned Loading

  1. unbound unbound Public

    Unbound is a validating, recursive, and caching DNS resolver.

    C 4.9k 451

  2. nsd nsd Public

    The NLnet Labs Name Server Daemon (NSD) is an authoritative, RFC compliant DNS nameserver.

    C 570 125

  3. domain domain Public

    A DNS library for Rust.

    Rust 465 76

  4. cascade cascade Public

    A friendly DNSSEC signing solution: sensible defaults, controllability, observability and flexibility.

    Rust 74 13

  5. routinator routinator Public

    An RPKI Validator and RTR server written in Rust

    Rust 571 86

  6. rotonda rotonda Public

    (Moved to Codeberg) Modular, programmable BGP Engine

    Rust 202 6

Repositories

Showing 10 of 118 repositories
  • roto Public

    (Codeberg mirror) The statically-typed, compiled embedded scripting language for Rust, used by Rotonda.

    NLnetLabs/roto's past year of commit activity
    Rust 555 BSD-3-Clause 27 43 2 Updated Sep 10, 2026
  • krill Public

    RPKI Certificate Authority and Publication Server written in Rust

    NLnetLabs/krill's past year of commit activity
    Rust 367 MPL-2.0 56 81 12 Updated Sep 10, 2026
  • unbound Public

    Unbound is a validating, recursive, and caching DNS resolver.

    NLnetLabs/unbound's past year of commit activity
    C 4,872 BSD-3-Clause 451 335 52 Updated Sep 10, 2026
  • dnst Public

    A DNS administration toolbox including re-implementations of important ldns programs

    NLnetLabs/dnst's past year of commit activity
    Rust 42 BSD-3-Clause 8 33 (1 issue needs help) 10 Updated Sep 10, 2026
  • rotonda Public

    (Moved to Codeberg) Modular, programmable BGP Engine

    NLnetLabs/rotonda's past year of commit activity
    Rust 202 MPL-2.0 6 12 0 Updated Sep 10, 2026
  • nsd Public

    The NLnet Labs Name Server Daemon (NSD) is an authoritative, RFC compliant DNS nameserver.

    NLnetLabs/nsd's past year of commit activity
    C 570 BSD-3-Clause 125 55 20 Updated Sep 10, 2026
  • cascade Public

    A friendly DNSSEC signing solution: sensible defaults, controllability, observability and flexibility.

    NLnetLabs/cascade's past year of commit activity
    Rust 74 BSD-3-Clause 13 228 13 Updated Sep 10, 2026
  • incremental-deleg Public

    Incrementally Deployable Extensible Delegation for DNS

    NLnetLabs/incremental-deleg's past year of commit activity
    Makefile 1 2 2 0 Updated Sep 10, 2026
  • krill-sync Public

    A tool to synchronize an RRDP and/or Rsync server with a "hidden" remote RFC 8182 RRDP publication point.

    NLnetLabs/krill-sync's past year of commit activity
    Rust 16 BSD-3-Clause 6 1 0 Updated Sep 8, 2026
  • routinator Public

    An RPKI Validator and RTR server written in Rust

    NLnetLabs/routinator's past year of commit activity
    Rust 571 BSD-3-Clause 86 25 10 Updated Sep 8, 2026