diff --git a/dns/nsd/Makefile b/dns/nsd/Makefile
index 419756ab8f43..cc4c734636d3 100644
--- a/dns/nsd/Makefile
+++ b/dns/nsd/Makefile
@@ -1,7 +1,7 @@
 # Created by: alexis
 
 PORTNAME=	nsd
-DISTVERSION=	4.3.7
+DISTVERSION=	4.3.8
 CATEGORIES=	dns
 MASTER_SITES=	https://www.nlnetlabs.nl/downloads/nsd/
 
@@ -26,33 +26,33 @@ NSDRUNDIR=	/var/run/nsd
 NSDMAX_IPS?=	512
 
 GNU_CONFIGURE=	yes
-CONFIGURE_ARGS=	--with-libevent=${LOCALBASE} \
-		--with-user=${NSDUSER} \
+CONFIGURE_ARGS=	--localstatedir=${NSDLSDIR} \
 		--with-configdir=${ETCDIR} \
-		--localstatedir=${NSDLSDIR} \
 		--with-dbfile=${NSDDBDIR}/nsd.db \
+		--with-libevent=${LOCALBASE} \
+		--with-pidfile=${NSDRUNDIR}/nsd.pid \
 		--with-ssl=${OPENSSLBASE} \
-		--with-pidfile=${NSDRUNDIR}/nsd.pid
+		--with-user=${NSDUSER}
 
-PLIST_SUB=	NSDUSER=${NSDUSER} \
+PLIST_SUB=	NSDDBDIR=${NSDDBDIR} \
 		NSDGROUP=${NSDGROUP} \
-		NSDDBDIR=${NSDDBDIR} \
-		NSDRUNDIR=${NSDRUNDIR}
+		NSDRUNDIR=${NSDRUNDIR} \
+		NSDUSER=${NSDUSER}
 
 USERS=		${NSDUSER}
 GROUPS=		${NSDGROUP}
 
-PORTDOCS=	CREDITS ChangeLog LICENSE NSD-DATABASE NSD-DIFFFILE \
-		NSD-4-features NSD-FOR-BIND-USERS README README.icc RELNOTES \
+PORTDOCS=	CREDITS ChangeLog LICENSE NSD-4-features NSD-DATABASE \
+		NSD-DIFFFILE NSD-FOR-BIND-USERS README README.icc RELNOTES \
 		REQUIREMENTS TESTPLAN TODO UPGRADING coding-style \
 		differences.tex
 
-OPTIONS_DEFINE=		ROOT_SERVER LARGEFILE IPV6 BIND8_STATS CHECKING \
-		MINRESPSIZE NSEC3 MMAP DOCS RRL ZONE_STATS MUNIN_PLUGIN \
-		RADIXTREE PACKED DNSTAP
-OPTIONS_DEFAULT=	LARGEFILE NSEC3 MINRESPSIZE RRL RADIXTREE \
-		 BIND8_STATS ZONE_STATS
-OPTIONS_SUB=	yes
+OPTIONS_DEFINE=		BIND8_STATS CHECKING DNSTAP DOCS IPV6 LARGEFILE \
+			MINRESPSIZE MMAP MUNIN_PLUGIN NSEC3 PACKED RADIXTREE \
+			ROOT_SERVER RRL ZONE_STATS
+OPTIONS_DEFAULT=	BIND8_STATS LARGEFILE MINRESPSIZE NSEC3 RADIXTREE RRL \
+			ZONE_STATS
+OPTIONS_SUB=		yes
 
 MUNIN_PLUGIN_IMPLIES=	BIND8_STATS
 
diff --git a/dns/nsd/distinfo b/dns/nsd/distinfo
index 93dfe355190d..f3fc9246b793 100644
--- a/dns/nsd/distinfo
+++ b/dns/nsd/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1626970849
-SHA256 (nsd-4.3.7.tar.gz) = fd3b9ec53bbd168d567a0bfcdf140c966511fdaf78bd539d091c1a13c13be8ad
-SIZE (nsd-4.3.7.tar.gz) = 1221215
+TIMESTAMP = 1634027661
+SHA256 (nsd-4.3.8.tar.gz) = 11897e25f72f5a98f9202bd5378c936886d54376051a614d3688e451e9cb99e1
+SIZE (nsd-4.3.8.tar.gz) = 1225840