Liquidsoap
Liquidsoap opens its 2.5 line with subtitles as a first-class content type and a streaming server of its own
Comparison · DevOps
NSD vs Prometheus
A side-by-side editorial comparison of NSD and Prometheus — release velocity, themes, recent moves, and the top alternatives to consider.
NSD vs Prometheus: at a glance
What is NSD?
Memory work paid off, then a serious SVCB overflow arrived — and Prometheus users get a breaking relabel.
NSD's recent history runs through three arcs. The 4.14.0 release refactored RDATA storage to cut memory footprint, a regression was reported immediately for zones with large RRsets, and 4.14.1 closed that gap so consumption dropped in all cases. In June, 4.14.3 fixed two CVEs, one a heap overflow of up to 65,509 attacker-controlled bytes reachable through a crafted SVCB record. Then 4.15.0 moved zone identity in Prometheus metrics from the metric name into a label, with an explicit warning that current users must adapt. Every release ships as an rc1 with identical notes before the final.
What is Prometheus?
Prometheus 3.14 ships the release candidate unchanged, duration expressions now on by default
3.14.0 is byte-identical to the 3.14.0-rc.0 body published a week earlier, so the stable cut carries exactly what the candidate previewed: PromQL duration expressions enabled by default with the feature flag retired, first_over_time promoted to stable, Oracle Cloud service discovery added, and a set of start-timestamp experiments still behind flags. The performance work is the substantive half, with regex matchers on literal alternations, native histogram scrape parsing down roughly 49% in allocations, and a recursion-free text parser that closes a stack-overflow path on hostile exposition.
NSD vs Prometheus: editorial side-by-side
NSD
0.0DEVOPS
Memory work paid off, then a serious SVCB overflow arrived — and Prometheus users get a breaking relabel.
◆ Current state
NSD's recent history runs through three arcs. The 4.14.0 release refactored RDATA storage to cut memory footprint, a regression was reported immediately for zones with large RRsets, and 4.14.1 closed that gap so consumption dropped in all cases. In June, 4.14.3 fixed two CVEs, one a heap overflow of up to 65,509 attacker-controlled bytes reachable through a crafted SVCB record. Then 4.15.0 moved zone identity in Prometheus metrics from the metric name into a label, with an explicit warning that current users must adapt. Every release ships as an rc1 with identical notes before the final.
◆ Where it's heading
This is a mature authoritative nameserver where the remaining work is footprint, correctness and observability rather than protocol features. The memory refactor and its follow-up show a project willing to ship a structural change and then immediately correct for reported regressions. The SVCB overflow is a reminder that newer record types are where the parsing risk now lives, since the older ones have been fuzzed for two decades. NLnet Labs also rotated its release signing key at the start of 2026 and documents the fingerprint in each announcement.
◆ Prediction
Expect the Prometheus relabeling to generate follow-up fixes as operators hit dashboard breakage, and continued attention to newer record type parsing. The rc-then-final rhythm makes the next release predictable in shape if not in content.
Prometheus
5.0DEVOPS
Prometheus 3.14 ships the release candidate unchanged, duration expressions now on by default
◆ Current state
3.14.0 is byte-identical to the 3.14.0-rc.0 body published a week earlier, so the stable cut carries exactly what the candidate previewed: PromQL duration expressions enabled by default with the feature flag retired, first_over_time promoted to stable, Oracle Cloud service discovery added, and a set of start-timestamp experiments still behind flags. The performance work is the substantive half, with regex matchers on literal alternations, native histogram scrape parsing down roughly 49% in allocations, and a recursion-free text parser that closes a stack-overflow path on hostile exposition.
◆ Where it's heading
The project is spending its feature budget on start timestamps, appearing across PromQL, TSDB encoding, and remote write V2 in the same release but held behind use-start-timestamps and histograms-st-encoding. Everything else follows the established rhythm of promoting one experimental function per cycle and adding a cloud discovery source. The API deprecations are being staged carefully, warning now and rejecting at the next major.
◆ Prediction
Start timestamps are the obvious candidate to lose their feature flags once the encoding and remote-write halves have run together, and the stats parameter values now warned on will be rejected in the next major.
Alternatives to NSD and Prometheus
Other DevOps products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either NSD or Prometheus.
Appwrite
Appwrite keeps reworking its own plumbing — Go CLI, SquashFS mounts, and an MCP layer that refreshes itself
FusionAuth
FusionAuth's feed publishes version numbers; whether they carry news is a coin flip.
Sanity
Sanity ships across every package at once, and the agent-facing surface moves fastest.
ESP-IDF
The 6.1 candidate arrives carrying the same notes the beta already shipped in June.
Auth0
Auth0 hands tenants a throttle on their own noisy apps
See all NSD alternatives → · See all Prometheus alternatives →
Recent activity from NSD and Prometheus
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoPrometheusPrometheus 3.14: duration expressions on by default, OCI discovery, faster histogram parsing
- 7d agoPrometheus3.14 release candidate: duration expressions on by default, first_over_time stable
- 19d agoPrometheus3.13.2: CVE dependency bumps and a SIGBUS fix on full disks
- 1mo agoPrometheus3.13.1 LTS: head-chunk cache returned samples from the wrong chunk
- 1mo agoPrometheus3.5.5: sanitize-html bump for CVE-2026-53606
- 1mo agoPrometheus3.13.0-rc.0: release candidate for the 3.13 LTS
- 1mo agoNSDPrometheus metrics move zone from metric name to label
- 1mo agoNSDRelease candidate for 4.15.0 with identical notes
- 1mo agoNSDHeap overflow via crafted SVCB records patched
- 5mo agoNSDIXFR processing fix for collated add and delete records
- 5mo agoNSDRelease candidate for the 4.14.2 IXFR fix
- 5mo agoNSDMemory regression from the RDATA refactor closed
Frequently asked questions
What is the difference between NSD and Prometheus?
They serve adjacent needs but don't currently overlap on shipped themes. Prometheus is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is NSD better than Prometheus?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Prometheus is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other DevOps products to evaluate alongside.
What are the best alternatives to NSD?
Top NSD alternatives in DevOps are ranked by recent ship velocity. Browse the "NSD alternatives" section above for the current picks, or visit /alternatives/nsd for the full list with editorial commentary on each.
What are the best alternatives to Prometheus?
Top Prometheus alternatives in DevOps are ranked by recent ship velocity. Browse the "Prometheus alternatives" section above for the current picks, or visit /alternatives/prometheus for the full list with editorial commentary on each.