- Joined
- Mar 29, 2014
- Messages
- 2,496
- Reaction score
- 948
A .UK registry is putting £650,000, about US$860,000, into open source DNS infrastructure
Nominet, the registry operator behind the United Kingdom’s .UK domain namespace, has opened the second application window for its DNS Fund.
The new window makes up to £650,000, about US$860,000, available for open source projects and maintainers working on the Domain Name System, better known as DNS.
For readers outside the UK, Nominet may not be a familiar name. It is the organisation that runs the .UK registry, one of the largest country code namespaces in the world. Nominet says it has operated since 1996 and protects and connects more than 10 million domains within the .UK namespace.
This funding programme is not only about .UK. The DNS Fund is aimed at the shared technical infrastructure that the global domain industry depends on: DNS software, DNSSEC tools, cryptographic libraries, validation systems, resolvers, testbeds and related open source components.
Applications opened on 25 June 2026 and close on 17 August 2026 at 9am BST.
The approximate USD conversions in this article use a simple rate of £1 = US$1.32.
Why this matters beyond .UK
Every registrar, registry, hosting company, domain investor, DNS operator and online business relies on DNS working correctly.
Most internet users never think about DNS. They type a domain name, click a link, send an email, or open an app, and expect it to work. Behind that simple experience sits a large ecosystem of software and infrastructure that translates domain names into the addresses computers use to connect.
Much of that ecosystem depends on open source software. Some of it is maintained by non-profit organisations, small teams, researchers, or individual developers. Many of those maintainers do work that is critical to the internet, but difficult to fund commercially.
Nominet’s DNS Fund is trying to address that gap.
The fund is not aimed at general charity work, marketing projects, or standalone academic research. It is aimed at practical DNS infrastructure that helps keep the internet secure, stable and resilient.
What the DNS Fund supports
Nominet describes the DNS Fund as support for open source infrastructure relevant to the development, deployment and operation of the global DNS.
Examples of eligible areas include:
Nominet says the Fund is not designed for standalone research. Hardware may be considered where it is core to DNS operation, for example performance testing, but general equipment is deprioritised.
That distinction matters. This is not a general internet innovation fund. It is a fund for the technical plumbing that keeps domain names usable and trustworthy.
What is available in the second window
The 2026 application window is larger and more flexible than the first round.
Key details:
The multi-year element is important. Open source infrastructure maintenance does not always fit neatly into short project cycles. Sometimes the work is about bug fixes, compatibility updates, testing, documentation, and keeping key tools alive over time.
Nominet says only a limited number of applicants will receive funding for the full multi-year duration.
How applications will be assessed
Applications will be assessed by the DNS Fund Expert Advisory Panel, which makes recommendations to Nominet.
The assessment principles are:
In practical terms, applicants need to show that their work supports safe, secure and resilient DNS infrastructure, that the need is real, that the project has a credible route to deployment, and that the team or maintainer can deliver it.
The advisory panel listed by Nominet includes Sara Dickinson, Michele Neylon, Peter Stevens, Roy Arends and Cailean Osborne.
For the international domain industry, Michele Neylon of Blacknight will be a familiar registrar and internet governance name. Peter Stevens of Mythic Beasts brings hosting and infrastructure experience. Roy Arends is known for DNSSEC and ICANN research work. Sara Dickinson has deep DNS and DNS privacy experience. Cailean Osborne brings open source funding and ecosystem knowledge.
The first funded projects
Nominet announced the first five successful DNS Fund applicants on 25 March 2026.
The first cohort was:
These are not UK-only projects. ISC, OARC and OpenSSL Foundation are based in the United States. NLnet Labs is based in the Netherlands. Quad9 Foundation is based in Switzerland.
That gives the DNS Fund a global profile. A national registry operator is using part of its public benefit work to support infrastructure that helps the wider internet, not only its own country code namespace.
How much has already been committed
Nominet says £370,000, about US$489,000, of funding is supporting the first-round projects. The new 2026 window makes up to £650,000, about US$860,000, available.
The publicly stated figures are:
Nominet has not publicly broken down the exact amount awarded to each first-round project. It has also not published a full list of unsuccessful applicants, individual payment schedules, or detailed milestone reports.
That means the industry can see the total first-round figure and the selected projects, but not yet a full project-by-project financial breakdown.
BIND 9 by ISC
BIND 9 is one of the most widely used DNS server software projects in the world. It is used by many root, TLD and second-level domain operators.
The funded ISC project focuses on replacing the BIND 9 scalability and performance test bed.
This is highly practical work. DNS software must be tested against modern hardware, growing traffic levels and operational realities. A better testbed helps developers identify performance issues earlier and keep BIND 9 reliable as demand grows.
For registries and DNS operators that rely on BIND, this is the sort of work that may never make headlines but matters enormously.
validns by OARC
OARC’s validns is a DNS and DNSSEC zone file validator.
Its purpose is to check DNS data before it is published. Bad zone data can cause outages, broken resolution, DNSSEC validation failures, and security problems.
Nominet describes validns as a tool that can check large sets of internet address data quickly and efficiently before publication.
For registries, this is very relevant. A validation tool helps catch mistakes before they become live problems. It is exactly the kind of shared infrastructure that benefits many operators at once.
OpenSSL Library
The OpenSSL Foundation received support for work on the OpenSSL Library.
OpenSSL is not only a DNS project, but it is one of the most important cryptographic libraries on the internet. It supports secure communication for websites, applications, devices and infrastructure.
The funded work focuses on improving OpenSSL testing, including unit testing, memory validation testing, mocking capabilities and testing infrastructure.
That may sound technical and quiet, but better testing in a critical library can reduce risk across a very large number of systems.
For the domain industry, this matters because modern internet trust depends on secure cryptographic foundations. DNSSEC, encrypted DNS transport, websites, APIs and registry systems all sit inside a wider security stack.
Cascade by NLnet Labs
NLnet Labs received support for Cascade, a new DNSSEC signing solution.
Cascade is designed to be a modern DNSSEC signer, initially aimed at top-level domain operators. It focuses on transparency, control and operational confidence.
DNSSEC signing is a sensitive operational area. Operators need tools that are understandable, reliable and suitable for real-world deployment. If a signer is difficult to understand or operate, it increases risk.
NLnet Labs has already shown visible progress. Cascade beta 1 was released in June 2026. NLnet Labs has also said that Nominet DNS Fund support allowed it to dedicate five developers to the project.
For TLD operators and large DNS operators, Cascade may become one of the most directly relevant projects from the first cohort.
Quad9 Foundation
Quad9 Foundation operates a public-interest DNS resolver service with a focus on security, privacy and accessibility.
Quad9 blocks known malicious domains using threat intelligence from multiple partners. It is run as a non-profit service rather than as an advertising or data-driven resolver product.
Nominet says its support will help Quad9 tackle technical debt, strengthen infrastructure and continue providing safer DNS services to users and communities around the world.
This is important because Quad9 is not just software. It is live operational infrastructure. Resolver services need servers, networks, monitoring, updates and continued maintenance.
What has been achieved so far
The first cohort was only announced in March 2026, so many outcomes are still likely in progress.
Publicly visible progress includes:
The clearest public technical milestone so far appears to be Cascade beta 1.
Other projects appear to be in the resourcing, tooling, equipment or delivery stage. That is normal for infrastructure grants announced only a few months ago.
What is still not public
The DNS Fund is useful and relevant, but there are still gaps in public information.
Nominet has not publicly disclosed:
For an infrastructure fund, more transparency would be valuable. It would help the wider domain community understand what DNS maintenance actually costs, which types of work are being prioritised, and what measurable outcomes are produced.
This is especially relevant because Nominet is a registry operator. Registry-funded public benefit work is often watched closely by members, registrars and the wider internet community.
Why the domain industry should care
This story is bigger than one registry.
The domain industry depends on shared infrastructure, but shared infrastructure is often underfunded. Everyone benefits when DNS tools are maintained, but not everyone contributes to keeping them healthy.
Nominet’s DNS Fund sends a useful signal: maintaining open source DNS infrastructure is not someone else’s problem.
The first cohort shows the practical nature of the programme:
For registrars, registries, domain investors and hosting companies, these are not abstract projects. They are part of the environment in which domain names operate.
A possible model for other registries
One of the most interesting aspects of the DNS Fund is the example it sets.
If more registries, registrars and infrastructure companies funded open source DNS maintenance, the entire industry could become more resilient.
The domain market benefits from a trusted namespace. That trust is not created only by registration rules or dispute policies. It also depends on the technical systems beneath the market working reliably.
Funding DNS tools, validators, signers, resolvers and cryptographic libraries is not glamorous. But it is directly connected to the health of the internet.
Key dates for applicants
Who can apply
Eligible applicants include formally registered legal entities and individual maintainers.
The limits are:
Applicants must not be based in sanctioned regimes or listed on UK, EU, US or UN sanctions lists. Current Nominet employees, Nominet Board members, DNS Fund Advisory Panel members and their immediate families are not eligible.
Conclusion
Nominet’s second DNS Fund window is a notable development for the global domain industry, not only the UK market.
A major country code registry is putting up to £650,000, about US$860,000, into open source DNS infrastructure, following £370,000, about US$489,000, of first-round support for projects including BIND 9, validns, OpenSSL, Cascade and Quad9.
The Fund supports the quiet but essential work that keeps domain names resolving, DNSSEC functioning, cryptographic libraries tested, and resolver infrastructure operating.
The programme would benefit from more public detail on individual grant amounts, application numbers, milestones and impact reports. But the direction is positive.
For the wider domain industry, this is a reminder that the market depends on more than registrations, auctions and sales. It depends on the open source infrastructure underneath it all.
Applications are open now and close on 17 August 2026 at 9am BST.
Sources
Nominet, the registry operator behind the United Kingdom’s .UK domain namespace, has opened the second application window for its DNS Fund.
The new window makes up to £650,000, about US$860,000, available for open source projects and maintainers working on the Domain Name System, better known as DNS.
For readers outside the UK, Nominet may not be a familiar name. It is the organisation that runs the .UK registry, one of the largest country code namespaces in the world. Nominet says it has operated since 1996 and protects and connects more than 10 million domains within the .UK namespace.
This funding programme is not only about .UK. The DNS Fund is aimed at the shared technical infrastructure that the global domain industry depends on: DNS software, DNSSEC tools, cryptographic libraries, validation systems, resolvers, testbeds and related open source components.
Applications opened on 25 June 2026 and close on 17 August 2026 at 9am BST.
The approximate USD conversions in this article use a simple rate of £1 = US$1.32.
Why this matters beyond .UK
Every registrar, registry, hosting company, domain investor, DNS operator and online business relies on DNS working correctly.
Most internet users never think about DNS. They type a domain name, click a link, send an email, or open an app, and expect it to work. Behind that simple experience sits a large ecosystem of software and infrastructure that translates domain names into the addresses computers use to connect.
Much of that ecosystem depends on open source software. Some of it is maintained by non-profit organisations, small teams, researchers, or individual developers. Many of those maintainers do work that is critical to the internet, but difficult to fund commercially.
Nominet’s DNS Fund is trying to address that gap.
The fund is not aimed at general charity work, marketing projects, or standalone academic research. It is aimed at practical DNS infrastructure that helps keep the internet secure, stable and resilient.
What the DNS Fund supports
Nominet describes the DNS Fund as support for open source infrastructure relevant to the development, deployment and operation of the global DNS.
Examples of eligible areas include:
- Authoritative DNS servers
- Recursive resolvers
- DNS software libraries
- DNS protocol toolkits
- DNSSEC components
- DNS-over-TLS
- DNS-over-QUIC
- DNS monitoring tools
- DNS diagnostic tools
- DNS performance testing
- Standards work that supports DNS sustainability
Nominet says the Fund is not designed for standalone research. Hardware may be considered where it is core to DNS operation, for example performance testing, but general equipment is deprioritised.
That distinction matters. This is not a general internet innovation fund. It is a fund for the technical plumbing that keeps domain names usable and trustworthy.
What is available in the second window
The 2026 application window is larger and more flexible than the first round.
Key details:
- Up to £650,000, about US$860,000, is available in 2026.
- Organisations can apply for up to £100,000, about US$132,000, per financial year.
- Organisations may apply for multi-year funding of up to three years.
- Individual maintainers can apply directly.
- Individual maintainers can apply for up to £15,000, about US$20,000, per financial year.
- There is no minimum amount that must be requested.
The multi-year element is important. Open source infrastructure maintenance does not always fit neatly into short project cycles. Sometimes the work is about bug fixes, compatibility updates, testing, documentation, and keeping key tools alive over time.
Nominet says only a limited number of applicants will receive funding for the full multi-year duration.
How applications will be assessed
Applications will be assessed by the DNS Fund Expert Advisory Panel, which makes recommendations to Nominet.
The assessment principles are:
- Public benefit
- Core need
- Deployment pathway
- The right people
- Value and sustainability
In practical terms, applicants need to show that their work supports safe, secure and resilient DNS infrastructure, that the need is real, that the project has a credible route to deployment, and that the team or maintainer can deliver it.
The advisory panel listed by Nominet includes Sara Dickinson, Michele Neylon, Peter Stevens, Roy Arends and Cailean Osborne.
For the international domain industry, Michele Neylon of Blacknight will be a familiar registrar and internet governance name. Peter Stevens of Mythic Beasts brings hosting and infrastructure experience. Roy Arends is known for DNSSEC and ICANN research work. Sara Dickinson has deep DNS and DNS privacy experience. Cailean Osborne brings open source funding and ecosystem knowledge.
The first funded projects
Nominet announced the first five successful DNS Fund applicants on 25 March 2026.
The first cohort was:
- Internet Systems Consortium, Inc. for BIND 9
- OARC Inc. for validns
- OpenSSL Foundation for the OpenSSL Library
- NLnet Labs for Cascade
- Quad9 Foundation for Quad9
These are not UK-only projects. ISC, OARC and OpenSSL Foundation are based in the United States. NLnet Labs is based in the Netherlands. Quad9 Foundation is based in Switzerland.
That gives the DNS Fund a global profile. A national registry operator is using part of its public benefit work to support infrastructure that helps the wider internet, not only its own country code namespace.
How much has already been committed
Nominet says £370,000, about US$489,000, of funding is supporting the first-round projects. The new 2026 window makes up to £650,000, about US$860,000, available.
The publicly stated figures are:
- First application window: up to £370,000, about US$489,000, available.
- First funded cohort: Nominet says £370,000, about US$489,000, is supporting DNS software libraries, testbeds and operational tools.
- Second application window: up to £650,000, about US$860,000, available.
- Combined public funding envelope across the first two windows: up to £1.02 million, about US$1.35 million.
Nominet has not publicly broken down the exact amount awarded to each first-round project. It has also not published a full list of unsuccessful applicants, individual payment schedules, or detailed milestone reports.
That means the industry can see the total first-round figure and the selected projects, but not yet a full project-by-project financial breakdown.
BIND 9 by ISC
BIND 9 is one of the most widely used DNS server software projects in the world. It is used by many root, TLD and second-level domain operators.
The funded ISC project focuses on replacing the BIND 9 scalability and performance test bed.
This is highly practical work. DNS software must be tested against modern hardware, growing traffic levels and operational realities. A better testbed helps developers identify performance issues earlier and keep BIND 9 reliable as demand grows.
For registries and DNS operators that rely on BIND, this is the sort of work that may never make headlines but matters enormously.
validns by OARC
OARC’s validns is a DNS and DNSSEC zone file validator.
Its purpose is to check DNS data before it is published. Bad zone data can cause outages, broken resolution, DNSSEC validation failures, and security problems.
Nominet describes validns as a tool that can check large sets of internet address data quickly and efficiently before publication.
For registries, this is very relevant. A validation tool helps catch mistakes before they become live problems. It is exactly the kind of shared infrastructure that benefits many operators at once.
OpenSSL Library
The OpenSSL Foundation received support for work on the OpenSSL Library.
OpenSSL is not only a DNS project, but it is one of the most important cryptographic libraries on the internet. It supports secure communication for websites, applications, devices and infrastructure.
The funded work focuses on improving OpenSSL testing, including unit testing, memory validation testing, mocking capabilities and testing infrastructure.
That may sound technical and quiet, but better testing in a critical library can reduce risk across a very large number of systems.
For the domain industry, this matters because modern internet trust depends on secure cryptographic foundations. DNSSEC, encrypted DNS transport, websites, APIs and registry systems all sit inside a wider security stack.
Cascade by NLnet Labs
NLnet Labs received support for Cascade, a new DNSSEC signing solution.
Cascade is designed to be a modern DNSSEC signer, initially aimed at top-level domain operators. It focuses on transparency, control and operational confidence.
DNSSEC signing is a sensitive operational area. Operators need tools that are understandable, reliable and suitable for real-world deployment. If a signer is difficult to understand or operate, it increases risk.
NLnet Labs has already shown visible progress. Cascade beta 1 was released in June 2026. NLnet Labs has also said that Nominet DNS Fund support allowed it to dedicate five developers to the project.
For TLD operators and large DNS operators, Cascade may become one of the most directly relevant projects from the first cohort.
Quad9 Foundation
Quad9 Foundation operates a public-interest DNS resolver service with a focus on security, privacy and accessibility.
Quad9 blocks known malicious domains using threat intelligence from multiple partners. It is run as a non-profit service rather than as an advertising or data-driven resolver product.
Nominet says its support will help Quad9 tackle technical debt, strengthen infrastructure and continue providing safer DNS services to users and communities around the world.
This is important because Quad9 is not just software. It is live operational infrastructure. Resolver services need servers, networks, monitoring, updates and continued maintenance.
What has been achieved so far
The first cohort was only announced in March 2026, so many outcomes are still likely in progress.
Publicly visible progress includes:
- NLnet Labs released Cascade beta 1 in June 2026.
- NLnet Labs said Fund support allowed it to dedicate five developers to Cascade.
- OpenSSL Foundation has contracted work to improve the OpenSSL Library test suite.
- ISC has said Fund support is helping with new BIND 9 performance monitoring lab equipment.
- Quad9 has publicly confirmed Nominet investment in its public-interest DNS resolver work.
The clearest public technical milestone so far appears to be Cascade beta 1.
Other projects appear to be in the resourcing, tooling, equipment or delivery stage. That is normal for infrastructure grants announced only a few months ago.
What is still not public
The DNS Fund is useful and relevant, but there are still gaps in public information.
Nominet has not publicly disclosed:
- Exact grant amount per first-round recipient
- Number of applications received in the first window
- Number of unsuccessful applications
- Names of unsuccessful applicants
- Detailed milestone status for each funded project
- Payment schedules
- Final impact reports
For an infrastructure fund, more transparency would be valuable. It would help the wider domain community understand what DNS maintenance actually costs, which types of work are being prioritised, and what measurable outcomes are produced.
This is especially relevant because Nominet is a registry operator. Registry-funded public benefit work is often watched closely by members, registrars and the wider internet community.
Why the domain industry should care
This story is bigger than one registry.
The domain industry depends on shared infrastructure, but shared infrastructure is often underfunded. Everyone benefits when DNS tools are maintained, but not everyone contributes to keeping them healthy.
Nominet’s DNS Fund sends a useful signal: maintaining open source DNS infrastructure is not someone else’s problem.
The first cohort shows the practical nature of the programme:
- BIND 9 performance work helps DNS operators using one of the world’s best-known DNS systems.
- validns helps prevent DNS and DNSSEC errors before publication.
- OpenSSL testing improves a critical security dependency.
- Cascade aims to improve DNSSEC signing for TLD and large-scale operators.
- Quad9 supports public-interest DNS resolution focused on security and privacy.
For registrars, registries, domain investors and hosting companies, these are not abstract projects. They are part of the environment in which domain names operate.
A possible model for other registries
One of the most interesting aspects of the DNS Fund is the example it sets.
If more registries, registrars and infrastructure companies funded open source DNS maintenance, the entire industry could become more resilient.
The domain market benefits from a trusted namespace. That trust is not created only by registration rules or dispute policies. It also depends on the technical systems beneath the market working reliably.
Funding DNS tools, validators, signers, resolvers and cryptographic libraries is not glamorous. But it is directly connected to the health of the internet.
Key dates for applicants
- 25 June 2026: application window opened.
- 7 July 2026: Nominet webinar from 15:00 to 16:00 BST.
- 17 August 2026 at 9am BST: application deadline.
- Week commencing 17 August 2026: eligibility screening.
- 24 August to 11 September 2026: Expert Advisory Panel selection stage.
- September 2026: applicants expected to be informed.
- October 2026: contracting and Statements of Work.
- November 2026: delivery expected to begin.
Who can apply
Eligible applicants include formally registered legal entities and individual maintainers.
The limits are:
- Up to £100,000, about US$132,000, per financial year for registered organisations.
- Up to £300,000, about US$397,000, in total for organisations applying for three years.
- Up to £15,000, about US$20,000, per financial year for individual maintainers.
Applicants must not be based in sanctioned regimes or listed on UK, EU, US or UN sanctions lists. Current Nominet employees, Nominet Board members, DNS Fund Advisory Panel members and their immediate families are not eligible.
Conclusion
Nominet’s second DNS Fund window is a notable development for the global domain industry, not only the UK market.
A major country code registry is putting up to £650,000, about US$860,000, into open source DNS infrastructure, following £370,000, about US$489,000, of first-round support for projects including BIND 9, validns, OpenSSL, Cascade and Quad9.
The Fund supports the quiet but essential work that keeps domain names resolving, DNSSEC functioning, cryptographic libraries tested, and resolver infrastructure operating.
The programme would benefit from more public detail on individual grant amounts, application numbers, milestones and impact reports. But the direction is positive.
For the wider domain industry, this is a reminder that the market depends on more than registrations, auctions and sales. It depends on the open source infrastructure underneath it all.
Applications are open now and close on 17 August 2026 at 9am BST.
Sources
- Nominet second application window:
Nominet DNS Fund opens second application window - Nominet
Oxford, UK – 25th June 2026: Nominet, guardians of the .UK domain, has now opened the Nominet DNS Fund for new applications. £650,000 is available to support open source projects and maintainers that keep the internet running. The Domain Name System (DNS) sits at the heart of the internet...
nominet.uk
- Nominet DNS Fund:
Nominet DNS Fund - Nominet
The Nominet DNS Fund (Fund) has been set up as part of Nominet’s work to support the Internet Community. To improve DNS open source projects.
nominet.uk
- Nominet DNS Fund application page:
Nominet DNS Fund Application - Nominet
Make an application for the Nominet DNS Fund, to help support your underfunded DNS project and improve resilience for the internet community.
nominet.uk
- Nominet DNS Fund successful applicants:
Nominet DNS Fund Successful Applicants - Nominet
Find out more about the funded projects of the Nominet DNS Fund and how each contributes to the wider DNS ecosystem.
nominet.uk
- First DNS Fund projects announced:
Nominet supports foundations of the Internet with first DNS Fund projects announced - Nominet
Nominet, announces the first projects to receive support from its new Nominet DNS Fund - investing in the stability and resilience of open source DNS.
nominet.uk
- NLnet Labs Cascade beta 1:
Cascade: Start your engines!
By Ximon Eighteen Cascade beta 1 “Slàinte mhath” is out, so this is your opportunity to kick the tires and take it for a spin around your testing grounds! Cascade is our new purpose built hidden DNSSEC signer. Those lucky enough to be at DNS OARC 46 in Edinburgh in
blog.nlnetlabs.nl
- Quad9 announcement:
