# Installer ldns avec Homebrew, apk, dnf, MacPorts, Nix, pacman, zypper, apt

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de ldns pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:ldns
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install ldns
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install ldns
```

  Preuve: MacPorts ports tree: net/ldns/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add ldns
```

  Preuve: Alpine Linux edge package indexes: ldns from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- dnf (92%):

```sh
sudo dnf install ldns
```

  Preuve: Fedora Rawhide package metadata: ldns from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#ldns
```

  Preuve: nixpkgs package indexes: pkgs/by-name/ld/ldns/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S ldns
```

  Preuve: Arch Linux sync databases: ldns from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz

- zypper (92%):

```sh
sudo zypper install ldns
```

  Preuve: openSUSE Tumbleweed package metadata: ldns from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

- Debian apt (92%):

```sh
sudo apt install ldnsutils
```

  Preuve: Debian stable package indexes: ldnsutils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

## Faits du paquet

- **Clé du paquet:** brew:ldns
- **Gestionnaire de paquets:** Homebrew
- **Version:** 1.9.2
- **Résumé source:** DNS library written in C
- **Page d'accueil:** <https://nlnetlabs.nl/projects/ldns/>
- **Dernière mise à jour:** 2026-06-22T14:05:09-07:00
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- drill (alias)
- ldns-chaos (alias)
- ldns-compare-zones (alias)
- ldns-config (alias)
- ldns-dane (alias)
- ldns-dpa (alias)
- ldns-gen-zone (alias)
- ldns-key2ds (alias)
- ldns-keyfetcher (alias)
- ldns-keygen (alias)
- ldns-mx (alias)
- ldns-notify (alias)
- ldns-nsec3-hash (alias)
- ldns-read-zone (alias)
- ldns-resolver (alias)
- ldns-revoke (alias)
- ldns-rrsig (alias)
- ldns-signzone (alias)
- ldns-test-edns (alias)
- ldns-testns (alias)
- ldns-update (alias)
- ldns-verify-zone (alias)
- ldns-version (alias)
- ldns-walk (alias)
- ldns-zcat (alias)
- ldns-zsplit (alias)
- ldnsd (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 1.9.2
## Historique du projet et usages

ldns is NLnet Labs' C library for DNS and DNSSEC programming, accompanied by command-line tools such as drill and many DNSSEC utilities. NLnet Labs describes its goal as simplifying DNS programming in C while supporting low-level DNS and DNSSEC operations.

### Historique du projet

The project appeared in 2005 during the period when DNSSEC tooling was maturing. Its changelog records a first usable 0.50 release in May 2005, an online repository in June 2005, and a 1.0.0 release in October 2005 that added drill to ldns, zonefile parsing, an experimental signer, and a BSD license.

ldns evolved into both a library and a toolbox. Drill, originally important enough that documentation says part of ldns was derived from it, became included in ldns releases from version 1.0.0 onward. The examples directory grew into a collection of practical DNSSEC and zone tools, including signers, validators, key helpers, and packet utilities.

Later releases tracked DNS standards work. The changelog records additions such as NSEC3-related utilities, DANE support in 2012, SVCB/HTTPS support in the 1.8 series, and newer resource-record handling in the 1.9 series. NLnet Labs stated that ldns entered maintenance mode in 2020, with ongoing fixes and occasional experimental use rather than broad feature expansion.

### Historique d'adoption

ldns gained adoption among DNS implementers, operators, and package maintainers because it offered a C API plus ready-to-run diagnostic tools. Distribution packaging reflects that split: some systems package the tools as ldnsutils or drill while others package the library and tools together.

The project also became a bridge between DNS research and production packaging. NLnet Labs explicitly notes use for proof-of-concept work around Internet Drafts, while the maintained command-line tools made it useful for operators who needed DNSSEC-aware zone inspection, signing, verification, and query tracing.

### Modes d'utilisation

Developers use the library through ldns structures such as resource records, packets, zones, and resolvers. Command-line users most often encounter drill as a dig-like DNS inspection tool and the ldns-* utilities for DNSSEC key, zone, signing, walking, comparison, and verification workflows.

The documentation stresses OpenSSL-backed cryptographic features, optional builds without OpenSSL, IPv4/IPv6 support, TSIG, DNSSEC signing and verification, manual pages, and API documentation.

### Pourquoi les passionnés de paquets s'y intéressent

ldns matters to package nerds because it is a compact DNSSEC lab in package form: a C library, a resolver/query tool, many small executables, optional crypto features, Python bindings, and a long changelog tied to RFC and draft support. It is also a good example of an upstream declaring a maintenance-mode successor path while keeping old Unix packages useful.

NLnet Labs names the Rust domain library as the natural successor to the ldns library, dnst as drop-in replacements for common example utilities, and dnsi as a reimagined DNS inspection tool. That makes ldns a legacy-but-alive package with clear lineage into newer NLnet Labs DNS tooling.

### Chronologie

- May 2005: First usable ldns 0.50 release with basic DNS and DNSSEC validation.
- 13 Jun 2005: 0.65 records the repository as online and adds documentation.
- 18 Oct 2005: 1.0.0 adds drill to ldns, zonefile parsing, an experimental signer, and BSD licensing.
- 7 Jul 2006: 1.1.0 adds tutorials, documentation, examples, and drill improvements.
- 28 Nov 2007: 1.2.2 adds ldns-compare-zones and DNSSEC utility fixes.
- 23 Oct 2012: 1.6.14 adds DANE support, including the ldns-dane example tool.
- 2020: NLnet Labs places ldns in maintenance mode.
- 26 Nov 2021: 1.8.0 adds ZONEMD support and SVCB/HTTPS draft support.
- 4 Dec 2025: 1.9.0 records compact denial of existence support and additional resource-record updates.

### Related projects

- Related NLnet Labs projects include Unbound, NSD, the Rust domain library, dnst, and dnsi. Related DNS standards areas include DNSSEC, TSIG, DANE, NSEC3, ZONEMD, and SVCB/HTTPS.

### Sources

- <https://nlnetlabs.nl/documentation/ldns/>
- <https://nlnetlabs.nl/projects/ldns/about/>
- <https://raw.githubusercontent.com/NLnetLabs/ldns/master/Changelog>
- <https://raw.githubusercontent.com/NLnetLabs/ldns/master/README>


## Notes de sécurité

library-like package without higher-risk signals.

- **Risque Geiger:** vert / faible
- library-like package without higher-risk signals

## Autres enregistrements de gestionnaires de paquets

- Debian apt - ldnsutils - 1.8.4-2+b1: normalized package name match | Debian stable package indexes: ldnsutils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | ldns library for DNS programming - tools (includes drill tool) | https://www.nlnetlabs.nl/projects/ldns/about/
- Debian apt - libldns-dev - 1.8.4-2+b1: normalized package name match | Debian stable package indexes: libldns-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | ldns library for DNS programming - development files | https://www.nlnetlabs.nl/projects/ldns/about/
- Debian apt - libldns3t64 - 1.8.4-2+b1: normalized package name match | Debian stable package indexes: libldns3t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | ldns library for DNS programming - shared library | https://www.nlnetlabs.nl/projects/ldns/about/
- Debian apt - python3-ldns - 1.8.4-2+b1: normalized package name match | Debian stable package indexes: python3-ldns from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | ldns library for DNS programming - Python3 bindings | https://www.nlnetlabs.nl/projects/ldns/about/
- Nix - ldns: normalized package name match | nixpkgs package indexes: pkgs/by-name/ld/ldns/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - ldnsutils - 1.8.3-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: ldnsutils from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ldns library for DNS programming - tools (includes drill tool) | https://www.nlnetlabs.nl/projects/ldns/about/
- Ubuntu apt - libldns-dev - 1.8.3-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libldns-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ldns library for DNS programming - development files | https://www.nlnetlabs.nl/projects/ldns/about/
- Ubuntu apt - libldns3t64 - 1.8.3-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libldns3t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ldns library for DNS programming - shared library | https://www.nlnetlabs.nl/projects/ldns/about/
- Ubuntu apt - python3-ldns - 1.8.3-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: python3-ldns from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ldns library for DNS programming - Python3 bindings | https://www.nlnetlabs.nl/projects/ldns/about/
- apk - drill - 1.9.2-r0: normalized package name match | Alpine Linux edge package indexes: drill from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | DNS(SEC) query tool ala dig | https://nlnetlabs.nl/projects/ldns/
- apk - ldns - 1.9.2-r0: normalized package name match | Alpine Linux edge package indexes: ldns from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Lowlevel DNS(SEC) library | https://nlnetlabs.nl/projects/ldns/
- apk - ldns-dev - 1.9.2-r0: normalized package name match | Alpine Linux edge package indexes: ldns-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Lowlevel DNS(SEC) library (development files) | https://nlnetlabs.nl/projects/ldns/
- apk - ldns-doc - 1.9.2-r0: normalized package name match | Alpine Linux edge package indexes: ldns-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Lowlevel DNS(SEC) library (documentation) | https://nlnetlabs.nl/projects/ldns/
- apk - ldns-static - 1.9.2-r0: normalized package name match | Alpine Linux edge package indexes: ldns-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Lowlevel DNS(SEC) library (static library) | https://nlnetlabs.nl/projects/ldns/
- apk - ldns-tools - 1.9.2-r0: normalized package name match | Alpine Linux edge package indexes: ldns-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | ldns example tools | https://nlnetlabs.nl/projects/ldns/
- dnf - ldns - 1.9.2-6.fc45: normalized package name match | Fedora Rawhide package metadata: ldns from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Low-level DNS(SEC) library with API | https://www.nlnetlabs.nl/ldns/


## Combined YAML source

View the package source record on GitHub. [combined/ldns.yml](https://github.com/mxcl/pkgdb/blob/main/combined/ldns.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph