NLnet Labs launches community forum for DNS projects
NLnet Labs consolidates its open-source DNS and security project discussions onto a new Discourse platform, phasing out mailing lists while preserving archives.
NLnet Labs has officially launched community.nlnetlabs.nl, a new centralized platform designed to host discussions about its various open-source software projects. The organization announced the move on January 5, 2026, aiming to consolidate a growing number of collaboration tools into a single system that better serves its developer and user base.
The decision to adopt Discourse followed research into available options. NLnet Labs selected this platform because it offers a unified tool capable of handling the breadth of their development work. For users, this transition means they can participate in discussions either through email or directly via a web browser, providing flexibility in how they engage with the community.
The migration follows a three-phase approach. In the first phase, which is currently active, NLnet Labs is introducing Discourse categories for products that previously lacked a dedicated discussion space. These include Cascade, a DNSSEC signing pipeline; Rotonda, a BGP routing engine; and Roto, a strongly-typed, compiled scripting language. Additionally, the RPKI mailing list, which was previously used for discussions regarding Krill, Routinator, and RTRTR, has been archived and moved to this new home.
The second phase focuses on unifying discussions for all remaining tools and libraries. This includes ldns for C and domain for Rust, as well as supporting utilities such as DNSThought, dnsi, dnst, and mimir. Some of these projects already had low-volume mailing lists, while others had no dedicated place at all. These are now being integrated into the new community structure.
The final phase is dedicated to NSD and Unbound. These two foundational DNS projects have a long history and possess valuable mailing list archives containing significant community knowledge. NLnet Labs aims to preserve these conversations to ensure they remain searchable for future reference. Subscribers to the existing mailing lists will receive further communication regarding this transition when the time comes.
To respect user privacy, NLnet Labs will not automatically import existing mailing list subscribers to the new community platform. Individuals must choose to join manually. The organization also emphasized the importance of maintaining an open environment where users of free, open-source software can help one another. For those requiring private support for critical infrastructure, NLnet Labs continues to offer support contracts with various service levels.
Beyond organizational changes, NLnet Labs recently published insights on maintaining coding practices in the era of Large Language Models (LLMs). They noted that LLMs have had profound effects on their work, particularly in community contributions and security reports. Furthermore, an audit by X41 D-Sec confirmed the maturity of Routinator after seven years, noting good security levels and effective use of Rust’s safety features. The team has also highlighted their adoption of the Rust programming language over the last six years, citing its reliability and efficiency.
For everyday internet users and IT teams, this consolidation signals a more structured way to access expert advice on DNS security tools. While the forum is primarily for developers, understanding how these underlying tools like Unbound and NSD operate helps highlight the importance of using secure, up-to-date DNS resolution. Choosing a privacy-first, encrypted DNS resolver like AEU DNS ensures that your connection to these essential internet services remains protected from interception and tracking, complementing the security efforts of the open-source community.
Termini spiegati
- DNSSEC
- A set of security extensions to DNS that adds digital signatures to help verify that the website address you look up is correct and hasn't been spoofed.
- BGP
- Border Gateway Protocol, the system that routes traffic between different networks on the internet, similar to how postal services route mail between cities.
- RPKI
- Resource Public Key Infrastructure, a framework that helps secure the BGP routing system by verifying that organizations have the right to use certain internet addresses.
- Rust
- A modern programming language known for its focus on safety and performance, which helps prevent common coding errors that can lead to security flaws.
- DoH
- DNS over HTTPS, a method of encrypting DNS requests so that intermediaries cannot see or modify the domain name lookups you perform.
Come proteggerti
- Use a reputable, privacy-focused DNS resolver that encrypts your queries to prevent ISPs or hackers from seeing what websites you visit.
- Keep your computer and router firmware updated to protect against known vulnerabilities in network hardware.
- Enable DNSSEC validation on your device or router if possible, as it helps verify that DNS responses are authentic and not tampered with.
- Be cautious of public Wi-Fi networks and avoid entering sensitive information unless you are using a secure, encrypted connection.
- Regularly review the privacy settings of your internet browser to minimize tracking by third-party advertisers.