Decrease SOA TTL

Hi fatgrizzly,

DNS providers store their DNS data on several servers, usually distributed world-wide. The mechanism by which updates are circulated is called replication. There are several replication mechanisms. One of these mechanisms relies on the time interval given in the SOA record. The number you are talking about means that if replication fails, it should be retried after that interval.

We think that even one hour is too long to distribute our DNS updates. deSEC therefore uses a different replication mechanism that does not at all rely on the intervals specified in the SOA record. Our updates get distributed within seconds. The retry SOA value has no meaning at deSEC, and is purely “historical”.

Hope that helps!

Stay secure,
Peter