🛡OpenBLD.net — Forced DNSSEC Under the Hood

A lot has been achieved over the years, but this past month we’ve rolled out a major update: forced domain digital signature verification (DNSSEC) at the deepest levels of the OpenBLD ecosystem.

A lot has been achieved over the years, but this past month we’ve rolled out a major update: forced domain digital signature verification (DNSSEC) at the deepest levels of the OpenBLD ecosystem.

While you were sleeping (or maybe not), I rebuilt the “engine” of our update system. Meet benZine — the fuel that hunts malicious DNS signatures all over the world and pumps them straight into OpenBLD servers.
Over the past year, benZine has evolved from a simple script into a powerful ecosystem. The code has been rewritten and delivery fully optimized — now:

2026 is a great moment to look back and sum things up. Three years of stable operation. Three years of continuous support. Three years with zero failures.
AlphaVPS continues to support OpenBLD.net, and this is an important infrastructure milestone.
Over the years, AlphaVPS has proven itself as a Fast & Cheap VPS provider — exactly as stated on their official website.

After six months of tuning the monitoring and DGA-domain blocking system, along with the rollout of the updated RTL release, it’s time to cut dynamic noise out of the main traffic flow.

Over the past months, I’ve been working on a major upgrade of the zBLD core.
The focus is clear — acceleration, resilience, and predictable performance under load.

The OpenBLD infrastructure has expanded — DNS is now closer to users in Europe.