SOA 记录
Start of Authority — metadata about the zone, including serial, refresh, retry and minimum TTL.
SOA 记录是什么？
There is exactly one SOA per zone. It declares the primary name server, the responsible person's email (in DNS notation), and the timers that govern how secondaries refresh and how negative answers are cached.
区域文件示例
example.com. 86400 IN SOA ns1.example.com. hostmaster.example.com. ( 2026010101 ; serial 3600 ; refresh 600 ; retry 604800 ; expire 300 ; minimum TTL )
常见用例
- ▸Diagnose stale secondaries by comparing their SOA serial to the master.
- ▸Set the minimum TTL for negative caching (RFC 2308) — prevents NXDOMAIN storms.
- ▸Audit zone changes: monotonic serial increments on every edit.
- ▸Validate ownership when transferring a zone between providers.
常见坑
The SOA serial must increase on every change, even after a reset. Many issues stem from forgetting to bump it. Format YYYYMMDDnn is conventional but not mandated.