# Install ldns with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper DNS library written in C. Version 1.9.2 via Homebrew; verified 2026-06-22. ## Install ```sh sudo av install brew:ldns ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install ldns ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install ldns ``` Evidence: MacPorts ports tree: net/ldns/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add drill ``` Evidence: Alpine Linux edge package indexes: drill from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install ldnsutils ``` Evidence: Debian stable package indexes: ldnsutils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install ldns ``` Evidence: Fedora Rawhide package metadata: ldns from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#ldns ``` Evidence: nixpkgs package indexes: pkgs/by-name/ld/ldns/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S ldns ``` Evidence: Arch Linux sync databases: ldns from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz - zypper (92%): ```sh sudo zypper install ldns ``` Evidence: openSUSE Tumbleweed package metadata: ldns from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:ldns - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.9.2 - **Source summary:** DNS library written in C - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** BSD-3-Clause - **Source archive:** - **Last updated:** 2026-06-22T14:05:09-07:00 - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - ldns-chaos (cli) - ldns-compare-zones (cli) - ldns-config (cli) - ldns-dane (cli) - ldns-dpa (cli) - ldns-gen-zone (cli) - ldns-key2ds (cli) - ldns-keyfetcher (cli) - ldns-keygen (cli) - ldns-mx (cli) - ldns-notify (cli) - ldns-nsec3-hash (cli) - ldns-read-zone (cli) - ldns-resolver (cli) - ldns-revoke (cli) - ldns-rrsig (cli) - ldns-signzone (cli) - ldns-test-edns (cli) - ldns-testns (cli) - ldns-update (cli) - ldns-verify-zone (cli) - ldns-version (cli) - ldns-walk (cli) - ldns-zcat (cli) - ldns-zsplit (cli) - ldnsd (cli) - ldns-chaos (alias) - ldns-compare-zones (alias) - ldns-config (alias) - ldns-dane (alias) - ldns-dpa (alias) - ldns-gen-zone (alias) - ldns-key2ds (alias) - ldns-keyfetcher (alias) - ldns-keygen (alias) - ldns-mx (alias) - ldns-notify (alias) - ldns-nsec3-hash (alias) - ldns-read-zone (alias) - ldns-resolver (alias) - ldns-revoke (alias) - ldns-rrsig (alias) - ldns-signzone (alias) - ldns-test-edns (alias) - ldns-testns (alias) - ldns-update (alias) - ldns-verify-zone (alias) - ldns-version (alias) - ldns-walk (alias) - ldns-zcat (alias) - ldns-zsplit (alias) - ldnsd (alias) ## Dependencies - openssl@3 - python@3.14 ## Build dependencies - swig ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.9.2 - Package-manager updated: 2026-06-22 - Local data: ok - Upstream repository: https://nlnetlabs.nl/projects/ldns/ - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage ldns is NLnet Labs' C library for DNS and DNSSEC programming, accompanied by command-line tools such as drill and many DNSSEC utilities. NLnet Labs describes its goal as simplifying DNS programming in C while supporting low-level DNS and DNSSEC operations. ### Project history The project appeared in 2005 during the period when DNSSEC tooling was maturing. Its changelog records a first usable 0.50 release in May 2005, an online repository in June 2005, and a 1.0.0 release in October 2005 that added drill to ldns, zonefile parsing, an experimental signer, and a BSD license. ldns evolved into both a library and a toolbox. Drill, originally important enough that documentation says part of ldns was derived from it, became included in ldns releases from version 1.0.0 onward. The examples directory grew into a collection of practical DNSSEC and zone tools, including signers, validators, key helpers, and packet utilities. Later releases tracked DNS standards work. The changelog records additions such as NSEC3-related utilities, DANE support in 2012, SVCB/HTTPS support in the 1.8 series, and newer resource-record handling in the 1.9 series. NLnet Labs stated that ldns entered maintenance mode in 2020, with ongoing fixes and occasional experimental use rather than broad feature expansion. ### Adoption history ldns gained adoption among DNS implementers, operators, and package maintainers because it offered a C API plus ready-to-run diagnostic tools. Distribution packaging reflects that split: some systems package the tools as ldnsutils or drill while others package the library and tools together. The project also became a bridge between DNS research and production packaging. NLnet Labs explicitly notes use for proof-of-concept work around Internet Drafts, while the maintained command-line tools made it useful for operators who needed DNSSEC-aware zone inspection, signing, verification, and query tracing. ### How it is used Developers use the library through ldns structures such as resource records, packets, zones, and resolvers. Command-line users most often encounter drill as a dig-like DNS inspection tool and the ldns-* utilities for DNSSEC key, zone, signing, walking, comparison, and verification workflows. The documentation stresses OpenSSL-backed cryptographic features, optional builds without OpenSSL, IPv4/IPv6 support, TSIG, DNSSEC signing and verification, manual pages, and API documentation. ### Why package nerds care ldns matters to package nerds because it is a compact DNSSEC lab in package form: a C library, a resolver/query tool, many small executables, optional crypto features, Python bindings, and a long changelog tied to RFC and draft support. It is also a good example of an upstream declaring a maintenance-mode successor path while keeping old Unix packages useful. NLnet Labs names the Rust domain library as the natural successor to the ldns library, dnst as drop-in replacements for common example utilities, and dnsi as a reimagined DNS inspection tool. That makes ldns a legacy-but-alive package with clear lineage into newer NLnet Labs DNS tooling. ### Timeline - May 2005: First usable ldns 0.50 release with basic DNS and DNSSEC validation. - 13 Jun 2005: 0.65 records the repository as online and adds documentation. - 18 Oct 2005: 1.0.0 adds drill to ldns, zonefile parsing, an experimental signer, and BSD licensing. - 7 Jul 2006: 1.1.0 adds tutorials, documentation, examples, and drill improvements. - 28 Nov 2007: 1.2.2 adds ldns-compare-zones and DNSSEC utility fixes. - 23 Oct 2012: 1.6.14 adds DANE support, including the ldns-dane example tool. - 2020: NLnet Labs places ldns in maintenance mode. - 26 Nov 2021: 1.8.0 adds ZONEMD support and SVCB/HTTPS draft support. - 4 Dec 2025: 1.9.0 records compact denial of existence support and additional resource-record updates. ### Related projects - Related NLnet Labs projects include Unbound, NSD, the Rust domain library, dnst, and dnsi. Related DNS standards areas include DNSSEC, TSIG, DANE, NSEC3, ZONEMD, and SVCB/HTTPS. ### Sources - - - - ## Security Notes library-like package without higher-risk signals. - **Geiger risk:** green / low - library-like package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** ldns - **Version Scheme:** 0 - **Revision:** 0 - **Conflicts With:** drill - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - ldnsutils - 1.8.4-2+b1: normalized package name match | Debian stable package indexes: ldnsutils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | ldns library for DNS programming - tools (includes drill tool) | https://www.nlnetlabs.nl/projects/ldns/about/ - Debian apt - libldns-dev - 1.8.4-2+b1: normalized package name match | Debian stable package indexes: libldns-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | ldns library for DNS programming - development files | https://www.nlnetlabs.nl/projects/ldns/about/ - Debian apt - libldns3t64 - 1.8.4-2+b1: normalized package name match | Debian stable package indexes: libldns3t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | ldns library for DNS programming - shared library | https://www.nlnetlabs.nl/projects/ldns/about/ - Debian apt - python3-ldns - 1.8.4-2+b1: normalized package name match | Debian stable package indexes: python3-ldns from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | ldns library for DNS programming - Python3 bindings | https://www.nlnetlabs.nl/projects/ldns/about/ - Nix - ldns: normalized package name match | nixpkgs package indexes: pkgs/by-name/ld/ldns/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - ldnsutils - 1.8.3-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: ldnsutils from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ldns library for DNS programming - tools (includes drill tool) | https://www.nlnetlabs.nl/projects/ldns/about/ - Ubuntu apt - libldns-dev - 1.8.3-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libldns-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ldns library for DNS programming - development files | https://www.nlnetlabs.nl/projects/ldns/about/ - Ubuntu apt - libldns3t64 - 1.8.3-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libldns3t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ldns library for DNS programming - shared library | https://www.nlnetlabs.nl/projects/ldns/about/ - Ubuntu apt - python3-ldns - 1.8.3-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: python3-ldns from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ldns library for DNS programming - Python3 bindings | https://www.nlnetlabs.nl/projects/ldns/about/ - apk - drill - 1.8.4-r1: normalized package name match | Alpine Linux edge package indexes: drill from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | DNS(SEC) query tool ala dig | https://nlnetlabs.nl/projects/ldns/ - apk - ldns - 1.8.4-r1: normalized package name match | Alpine Linux edge package indexes: ldns from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Lowlevel DNS(SEC) library | https://nlnetlabs.nl/projects/ldns/ - apk - ldns-dev - 1.8.4-r1: normalized package name match | Alpine Linux edge package indexes: ldns-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Lowlevel DNS(SEC) library (development files) | https://nlnetlabs.nl/projects/ldns/ - apk - ldns-doc - 1.8.4-r1: normalized package name match | Alpine Linux edge package indexes: ldns-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Lowlevel DNS(SEC) library (documentation) | https://nlnetlabs.nl/projects/ldns/ - apk - ldns-static - 1.8.4-r1: normalized package name match | Alpine Linux edge package indexes: ldns-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Lowlevel DNS(SEC) library (static library) | https://nlnetlabs.nl/projects/ldns/ - apk - ldns-tools - 1.8.4-r1: normalized package name match | Alpine Linux edge package indexes: ldns-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | ldns example tools | https://nlnetlabs.nl/projects/ldns/ - dnf - ldns - 1.9.0-8.fc45: normalized package name match | Fedora Rawhide package metadata: ldns from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Low-level DNS(SEC) library with API | https://www.nlnetlabs.nl/ldns/ ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [python@3.14](https://www.automicvault.com/pkg/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [swig](https://www.automicvault.com/pkg/brew/swig/) - Build dependency declared by Homebrew. - [dnsperf](https://www.automicvault.com/pkg/brew/dnsperf/) - Popular package that depends on this formula. - [freeswitch](https://www.automicvault.com/pkg/brew/freeswitch/) - Popular package that depends on this formula. - [openssh](https://www.automicvault.com/pkg/brew/openssh/) - Popular package that depends on this formula. - [redwax-tool](https://www.automicvault.com/pkg/brew/redwax-tool/) - Popular package that depends on this formula. - [bind](https://www.automicvault.com/pkg/brew/bind/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [getdns](https://www.automicvault.com/pkg/brew/getdns/) - Shares av.db curated category or tags: c-library, cli, dns, dnssec, networking. - [knot](https://www.automicvault.com/pkg/brew/knot/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [knot-resolver](https://www.automicvault.com/pkg/brew/knot-resolver/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [unbound](https://www.automicvault.com/pkg/brew/unbound/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [c-ares](https://www.automicvault.com/pkg/brew/c-ares/) - Shares av.db curated category or tags: cli, dns, library, networking. - [chinadns-c](https://www.automicvault.com/pkg/brew/chinadns-c/) - Shares av.db curated category or tags: cli, dns, networking. - [ddclient](https://www.automicvault.com/pkg/brew/ddclient/) - Shares av.db curated category or tags: cli, dns, networking. - [nsd](https://www.automicvault.com/pkg/brew/nsd/) - Local package facts share a topical domain. Shared terms: cli, dns, networking, openssl, openssl-3. - [dnsviz](https://www.automicvault.com/pkg/brew/dnsviz/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, dns, dnssec, networking, openssl. ## Combined YAML source View the package source record on GitHub. [combined/ldns.yml](https://github.com/automic-vault/db/blob/main/combined/ldns.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph