Inline-signing / dnssec-policy: Signed SOA serial diverges from source serial causing monitoring warnings

[Paul Kosinski]

So BIND's UnixTime, being represented in decimal, allows values beyond 2^32-1 without any problem?


On Tue, 21 Jul 2026 18:36:53 +0200
Ondřej Surý <ondrej at isc.org> wrote:

> Hi Ajay,
> 
> switch to unixtime serial number and the problem goes away. You will also get
> a one-second granularity for the updates as free bonus. The YYYYMMDDNN
> only allows 100 updates per-day.
> 
> Ondrej
> --
> Ondřej Surý (He/Him)
> ondrej at isc.org