From pemensik at redhat.com Fri Oct 17 10:59:45 2025 From: pemensik at redhat.com (=?UTF-8?B?UGV0ciBNZW7FocOtaw==?=) Date: Fri, 17 Oct 2025 12:59:45 +0200 Subject: [ldns-users] Introducing "dnst": drop-in replacements for ldns example programs In-Reply-To: <483CA916-7866-4BA6-AB49-87EEE4134A14@nlnetlabs.nl> References: <483CA916-7866-4BA6-AB49-87EEE4134A14@nlnetlabs.nl> Message-ID: Hi Alex! I personally use most often ldns-testns tool to write some tests for various dns software, because mentioned tools have usually alternatives in utilities provided by bind9. ldns-compare-zones would be more interesting to me as well. Maybe it is unusual to most people, but we write some dns software test at lest partially in shell. ldns utilities are very useful for it, but not those already implemented. My blocker for packaging these nice tools in Fedora (and EPEL) is domain crate required for them is not released with own release version, not even release candidate tag. Thank you for the ongoing work in any case! Cheers, Petr On 04/06/2025 12:23, Alex Band via ldns-users wrote: > Dear list, > > Twenty years ago, we introduced the ldns C-library, along with a collection of example utilities. We'll continue to make occasional use of ldns in an experimental setting, such as during an IETF Hackathon to build a proof of concept for an Internet Draft. However, ldns has been in maintenance mode since 2020, with no plans for major features. > > Today, we're proud to launch "dnst", our new DNS toolbox for network operators. > > With the domain Rust crate acting as the natural successor to the ldns library, with dnst we are offering a modern, well-maintained replacement for the most widely used ldns example programs. > > In the first Release Candidate of dnst we?re offering drop-in replacements for these six utilities: > > ? key2ds > ? keygen > ? nsec3hash > ? signzone > ? notify > ? update > > We main development goal is backwards compatibility, but we?ve made some improvements, such as faster signing, and we ironed out some quirks along the way. > > You can learn more about this project here: > > https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/ > > We are eager to hear your feedback. > > Kind regards, > > Alex Band > NLnet Labs > _______________________________________________ > ldns-users mailing list > ldns-users at lists.nlnetlabs.nl > https://lists.nlnetlabs.nl/mailman/listinfo/ldns-users -- Petr Men??k Senior Software Engineer, RHEL Red Hat, https://www.redhat.com/ PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB From marco.davids at sidn.nl Fri Oct 17 11:38:46 2025 From: marco.davids at sidn.nl (Marco Davids) Date: Fri, 17 Oct 2025 13:38:46 +0200 Subject: [ldns-users] Introducing "dnst": drop-in replacements for ldns example programs In-Reply-To: References: <483CA916-7866-4BA6-AB49-87EEE4134A14@nlnetlabs.nl> Message-ID: <0c529078-e886-43a4-b553-0daf61a96619@sidn.nl> > ldns-compare-zones would be more interesting to me as well. May I opt for ldns-dane ? -- Marco >> In the first Release Candidate of dnst we?re offering drop-in >> replacements for these six utilities: >> We are eager to hear your feedback. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 5067 bytes Desc: S/MIME-cryptografische ondertekening URL: From alex at nlnetlabs.nl Fri Oct 17 18:28:44 2025 From: alex at nlnetlabs.nl (Alex Band) Date: Fri, 17 Oct 2025 20:28:44 +0200 Subject: [ldns-users] Introducing "dnst": drop-in replacements for ldns example programs In-Reply-To: References: <483CA916-7866-4BA6-AB49-87EEE4134A14@nlnetlabs.nl> Message-ID: Hi Petr, Over the last couple of months we?ve been super busy with Cascade, to replace OpenDNSSEC. This is why it has been a bit quiet around the dnst tools to replace the ldns example programs. Most of the dnst-related activities have gone into ?keyset?, the key manager that used for Cascade: https://github.com/NLnetLabs/dnst/tree/keyset We need to clean this all up and do a proper release. After this has stabilized a bit, hopefully we can have a look at expanding the set of ldns reimplementations in the coming months. We already have some code ldns-testns: https://github.com/NLnetLabs/dnst/pull/56 We?ll also look into ldns-compare-zones, along with ldns-dane for Marco. Cheers, Alex > Op 17 okt 2025, om 12:59 heeft Petr Men??k via ldns-users het volgende geschreven: > > Hi Alex! > > I personally use most often ldns-testns tool to write some tests for various dns software, because mentioned tools have usually alternatives in utilities provided by bind9. ldns-compare-zones would be more interesting to me as well. > > Maybe it is unusual to most people, but we write some dns software test at lest partially in shell. ldns utilities are very useful for it, but not those already implemented. > > My blocker for packaging these nice tools in Fedora (and EPEL) is domain crate required for them is not released with own release version, not even release candidate tag. > > Thank you for the ongoing work in any case! > > Cheers, > Petr > > On 04/06/2025 12:23, Alex Band via ldns-users wrote: >> Dear list, >> >> Twenty years ago, we introduced the ldns C-library, along with a collection of example utilities. We'll continue to make occasional use of ldns in an experimental setting, such as during an IETF Hackathon to build a proof of concept for an Internet Draft. However, ldns has been in maintenance mode since 2020, with no plans for major features. >> >> Today, we're proud to launch "dnst", our new DNS toolbox for network operators. >> >> With the domain Rust crate acting as the natural successor to the ldns library, with dnst we are offering a modern, well-maintained replacement for the most widely used ldns example programs. >> >> In the first Release Candidate of dnst we?re offering drop-in replacements for these six utilities: >> >> ? key2ds >> ? keygen >> ? nsec3hash >> ? signzone >> ? notify >> ? update >> >> We main development goal is backwards compatibility, but we?ve made some improvements, such as faster signing, and we ironed out some quirks along the way. >> >> You can learn more about this project here: >> >> https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/ >> >> We are eager to hear your feedback. >> >> Kind regards, >> >> Alex Band >> NLnet Labs >> _______________________________________________ >> ldns-users mailing list >> ldns-users at lists.nlnetlabs.nl >> https://lists.nlnetlabs.nl/mailman/listinfo/ldns-users > > -- > Petr Men??k > Senior Software Engineer, RHEL > Red Hat, https://www.redhat.com/ > PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB > > _______________________________________________ > ldns-users mailing list > ldns-users at lists.nlnetlabs.nl > https://lists.nlnetlabs.nl/mailman/listinfo/ldns-users