Sebastiaan Neuteboom

2 articles by Sebastiaan Neuteboom.

1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it

1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.

Sebastiaan Neuteboom·September 10, 2026AI & ML

How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache

Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.

Sebastiaan Neuteboom·August 27, 2026Networking