• Welcome to Hurricane Electric's IPv6 Tunnel Broker Forums.

SOA EXPIRE number is: 3600000. That is NOT OK

Started by dizik, February 26, 2026, 07:22:31 AM

Previous topic - Next topic

dizik

Hello.
I checked my domain with Google: https://intodns.com/ and the check showed two warnings.
1. SOA EXPIRE. Your SOA EXPIRE number is: 3600000. That's NOT OK.
2. SOA MINIMUM TTL. Your SOA MINIMUM TTL value is: 172800. This value seems a bit high. You should consider decreasing this value to about 1-3 hours, as recommended by RFC2308. This value was used as a default TTL for records without a given TTL value and is now used for negative caching (indicates how long a resolver may cache the negative answer). RFC2308 recommends a value of 1-3 hours.
I can't fix these warnings. This is an automatically created record. What can I do? Just accept it? Or will you fix them according to RFC2308 recommendations?

snarked

That DNS checker believes that the expire value should be between 2 to 4 weeks (14 to 28 days) per RFC 1912 section 2.2 (now 30 years old) which merely SUGGESTS the range.  1000 hours is 41 days 16 hours.  I personally use 5 weeks (35 days), which it doesn't like either.  I prefer to have a handful of days beyond 1 full month in case I'm having a hardware problem which requires buying replacement equipment.

The only TTL-type value I use in excess of 5w is for RFC-fixed values defined as constant such as (e.g.):

localhost. 13w IN AAAA ::1
localhost. 13w IN A 127.0.0.1

13 weeks is 91 days, or about 3 standard months, or a quarter of one year.  A maximum TTL of 136.1+ years is overkill.

The minimum (negative cache) value should be close to the retry value for zones which are either dynamic or manually changed often, if not less.  Exceeding (half of) the refresh value is definently bad.

Don't read too much into warnings.  It's just the tool's opinion.

dizik