By Jannik Peters We have been developing support for AF_XDP sockets in NSD. They allow handling a higher rate of network packets than through the Linux network stack on supported hardware[1]—For a list of supported drivers (and by extension hardware) and their minimum Linux kernel version| The NLnet Labs Blog
By Jannik Peters We finally implemented a Prometheus metrics endpoint, providing the statistics you know from nsd-control stats/stats_noreset in Prometheus format via HTTP. To enable the Prometheus metrics endpoint, specify the option metrics-enable: yes in the config's server section. You can then point your Prometheus exporter at http:| The NLnet Labs Blog
NLnet Labs' authoritative nameserver NSD currently supports two different data structures for its main memory database: red-black tree en radix tree. Both data structures have their strengths and weaknesses, red-black tree implementation is more memory efficient and the radix tree is more performant (faster). Jeroen Koekkoek explores a new data …| NLnet Labs
NLnet Labs is pleased to announce version 4.6.0 of NSD. This release integrates and revives zone verification, a feature previously shipped in a separate product called CreDNS, which had its last release (0.2.10) in June 2012.| The NLnet Labs Blog
This one is a little boring in that it’s not a new bug, but tracking it down was still real exciting. A while back, Stripe started experiencing some serious intermittent sadness with our internal DNS servers. DNS queries would time out or fail to return, and our DNS servers would periodically OOM kill, despite no application appearing to use much memory. This incident was during the era of our consul battles, so we suspected consul, but were unable to prove its complicity in any way. Finall...| nelhage debugs shit
In the last 25 years we have delivered on our mission to make DNS more dependable and trustworthy. These are our plans for the next five years.| The NLnet Labs Blog