What Is an SOA Record?

Last updated

Table of Contents


What is an SOA record?

An SOA record (record type 6), which stands for Start of Authority record, is a mandatory DNS record that must be present in every DNS zone. It acts as the definitive administrative blueprint for the zone, providing essential meta-information about the zone and how it should be handled by other DNS servers and resolvers.

The SOA record marks the exact cutover point where authority for a domain is delegated from its parent domain. For example, if mycompany.com is delegated to DNSimple’s name servers, we must include an SOA record for mycompany.com in our authoritative DNS records. This record declares that DNSimple is the primary authoritative source for all information within the mycompany.com zone.

DNSimple’s role in SOA management

With DNS hosting at DNSimple, we automatically create and manage the SOA record for every domain you add. It appears in the record editor as a system record, and cannot be edited or deleted there.

Dissecting the SOA record: key administrative details

The SOA record contains several vital pieces of information that govern how the zone behaves across the internet.

An example SOA record with DNSimple’s default values:

ns1.dnsimple-edge.com admin.dnsimple.com 1438186532 86400 7200 604800 300

Examining each element:

Primary name server (MNAME - master name):

  • ns1.dnsimple-edge.com (or the first name server in your vanity name server list).
  • This specifies the primary authoritative name server for this zone. All updates to the zone should originate here.

Responsible party (RNAME - responsible person):

  • admin.dnsimple.com (representing admin@dnsimple.com).
  • This is the email address of the person responsible for the domain’s zone. The @ symbol in the email address is replaced with a . in the SOA record format.

Serial number (SERIAL):

  • 1438186532
  • This is a version number for the zone, and it must increase every time any record in the zone changes. DNSimple starts the serial at the zone’s creation time, in seconds since 1970, and adds one each time you change a record. This is crucial for secondary DNS servers, as they compare this serial number to determine if they need to request a fresh copy of the zone data (a zone transfer).

Refresh interval (REFRESH):

  • 86400 seconds (1 day)
  • This value tells secondary name servers how frequently they should check the primary name server’s SOA record for a new serial number.

Retry interval (RETRY):

  • 7200 seconds (2 hours). DNSimple uses 10800 seconds (3 hours) for .de domains.
  • If a secondary server fails to connect to the primary during a refresh attempt, this value specifies how long it should wait before retrying the refresh.

Expire limit (EXPIRE):

  • 604800 seconds (1 week)
  • If a secondary server repeatedly fails to refresh the zone after the RETRY interval, this is the upper limit, in seconds, after which the secondary server should stop responding authoritatively for the zone. This prevents stale data from being served indefinitely.

Negative result TTL (MINIMUM TTL):

  • 300 seconds (5 minutes)
  • This value, also known as the minimum TTL, specifies how long a DNS resolver should cache a negative response (e.g., if a requested record or subdomain does not exist) before retrying the query. This prevents excessive queries for non-existent records.

Why SOA records are crucial for zone health

SOA records are fundamental because they provide the necessary operational parameters for zone transfers, cache management, and error handling across the global DNS infrastructure. They ensure all DNS servers serving your domain’s information are properly synchronized and behave predictably.

Because of their administrative role, the values in your SOA record are managed by DNSimple and cannot be changed in the record editor.

The DNS SOA record is specified by RFC 1035, Section 3.3.13. Further details regarding negative caching are found in RFC 2308.

Managing SOA records in DNSimple

As SOA records are essential for the proper functioning and synchronization of your DNS zone, DNSimple automatically configures and manages these records for every domain hosted with us. You cannot change the individual fields of the SOA record in the record editor. DNSimple handles the necessary updates automatically, like incrementing the serial number whenever you change your domain’s DNS records.

Have more questions?

If you have additional questions or need any assistance with your DNS records, just contact support, and we will be happy to help.