diff --git a/dns/Makefile b/dns/Makefile
index a606809c7feb..78456b0da63c 100644
--- a/dns/Makefile
+++ b/dns/Makefile
@@ -93,6 +93,7 @@
     SUBDIR += knot-resolver
     SUBDIR += knot1
     SUBDIR += knot2
+    SUBDIR += knot2-lib
     SUBDIR += ldapdns
     SUBDIR += ldns
     SUBDIR += libasr
diff --git a/dns/knot2-lib/Makefile b/dns/knot2-lib/Makefile
new file mode 100644
index 000000000000..9654ccf16724
--- /dev/null
+++ b/dns/knot2-lib/Makefile
@@ -0,0 +1,14 @@
+# $FreeBSD$
+
+# Define PORTREVISION in ${MASTERDIR}
+COMMENT=	Knot2 lib (required by knot-resolver)
+PKGNAMESUFFIX=	2-lib
+
+MASTERDIR=	${.CURDIR}/../knot2
+DESCR=		${.CURDIR}/pkg-descr
+PLIST=		${.CURDIR}/pkg-plist
+
+LIB_ONLY=	yes
+COMPONENT=	-lib
+
+.include "${MASTERDIR}/Makefile"
diff --git a/dns/knot2-lib/pkg-descr b/dns/knot2-lib/pkg-descr
new file mode 100644
index 000000000000..200973e0ea1d
--- /dev/null
+++ b/dns/knot2-lib/pkg-descr
@@ -0,0 +1,4 @@
+This port allows to install only libknot, which comes along with
+Knot DNS (authoritative), but also is a depency of knot-resolver
+
+WWW: https://www.knot-dns.cz/
diff --git a/dns/knot2-lib/pkg-plist b/dns/knot2-lib/pkg-plist
new file mode 100644
index 000000000000..a014b8ecd8b1
--- /dev/null
+++ b/dns/knot2-lib/pkg-plist
@@ -0,0 +1,76 @@
+include/knot/module.h
+include/libdnssec/binary.h
+include/libdnssec/crypto.h
+include/libdnssec/dnssec.h
+include/libdnssec/error.h
+include/libdnssec/key.h
+include/libdnssec/keyid.h
+include/libdnssec/keystore.h
+include/libdnssec/keytag.h
+include/libdnssec/list.h
+include/libdnssec/nsec.h
+include/libdnssec/random.h
+include/libdnssec/sign.h
+include/libdnssec/tsig.h
+include/libdnssec/version.h
+include/libknot/attribute.h
+include/libknot/codes.h
+include/libknot/consts.h
+include/libknot/control/control.h
+include/libknot/cookies.h
+include/libknot/db/db.h
+include/libknot/db/db_lmdb.h
+include/libknot/db/db_trie.h
+include/libknot/descriptor.h
+include/libknot/dname.h
+include/libknot/endian.h
+include/libknot/errcode.h
+include/libknot/error.h
+include/libknot/libknot.h
+include/libknot/lookup.h
+include/libknot/mm_ctx.h
+include/libknot/packet/compr.h
+include/libknot/packet/pkt.h
+include/libknot/packet/rrset-wire.h
+include/libknot/packet/wire.h
+include/libknot/rdata.h
+include/libknot/rdataset.h
+include/libknot/rrset-dump.h
+include/libknot/rrset.h
+include/libknot/rrtype/dnskey.h
+include/libknot/rrtype/ds.h
+include/libknot/rrtype/naptr.h
+include/libknot/rrtype/nsec.h
+include/libknot/rrtype/nsec3.h
+include/libknot/rrtype/nsec3param.h
+include/libknot/rrtype/opt.h
+include/libknot/rrtype/rdname.h
+include/libknot/rrtype/rrsig.h
+include/libknot/rrtype/soa.h
+include/libknot/rrtype/tsig.h
+include/libknot/tsig-op.h
+include/libknot/tsig.h
+include/libknot/version.h
+include/libknot/wire.h
+include/libknot/yparser/yparser.h
+include/libknot/yparser/ypformat.h
+include/libknot/yparser/ypschema.h
+include/libknot/yparser/yptrafo.h
+include/libzscanner/error.h
+include/libzscanner/scanner.h
+include/libzscanner/version.h
+lib/libdnssec.a
+lib/libdnssec.so
+lib/libdnssec.so.6
+lib/libdnssec.so.6.0.0
+lib/libknot.a
+lib/libknot.so
+lib/libknot.so.8
+lib/libknot.so.8.0.0
+lib/libzscanner.a
+lib/libzscanner.so
+lib/libzscanner.so.2
+lib/libzscanner.so.2.0.0
+libdata/pkgconfig/libdnssec.pc
+libdata/pkgconfig/libknot.pc
+libdata/pkgconfig/libzscanner.pc
diff --git a/dns/knot2/Makefile b/dns/knot2/Makefile
index 329062def72d..fa336d888bfa 100644
--- a/dns/knot2/Makefile
+++ b/dns/knot2/Makefile
@@ -6,10 +6,10 @@ DISTVERSION=	2.7.4
 CATEGORIES=	dns ipv6
 MASTER_SITES=	https://secure.nic.cz/files/knot-dns/ \
 		https://dns.company/downloads/knot-dns/
-PKGNAMESUFFIX=	2
+PKGNAMESUFFIX?=	2
 
 MAINTAINER=	freebsd@dns.company
-COMMENT=	High performance authoritative-only DNS server
+COMMENT?=	High performance authoritative-only DNS server
 
 LICENSE=	GPLv3