Inline-signing / dnssec-policy: Signed SOA serial diverges from source serial causing monitoring warnings

Tue Jul 21 17:16:05 UTC 2026

I don’t understand your question, but ai will try to answer it anyway.

Personally, I don’t really care what happens in year 2106 as I am going to be already dead anyway, but serial number follow the serial number arithmetics which means the number will just roll to 0 and everything will continue to work as 2^32-1 is less than 0.

Ondřej
--
Ondřej Surý (He/Him)
ondrej at isc.org

ADHD brain at work: I sometimes lose track of my inbox. Please feel free to send a gentle nudge if you're waiting on a reply!

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

> On 21. 7. 2026, at 19:00, Paul Kosinski <bind at iment.com> wrote:
> 
> So BIND's UnixTime, being represented in decimal, allows values beyond 2^32-1 without any problem?
> 
> 
>> On Tue, 21 Jul 2026 18:36:53 +0200
>> Ondřej Surý <ondrej at isc.org> wrote:
>> 
>> Hi Ajay,
>> 
>> switch to unixtime serial number and the problem goes away. You will also get
>> a one-second granularity for the updates as free bonus. The YYYYMMDDNN
>> only allows 100 updates per-day.
>> 
>> Ondrej
>> --
>> Ondřej Surý (He/Him)
>> ondrej at isc.org