--- title: "How SOA Records Support Reliable DNS Zone Transfers | DuoCircle" description: "Discover how SOA records support reliable DNS zone transfers by coordinating DNS updates, synchronization, refresh intervals, retries, and server communication." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/how-soa-records-support-reliable-dns-zone-transfers/" --- Quick Answer SOA records support reliable DNS zone transfers by providing essential zone details, including the serial number, refresh, retry, and expire values. These settings help secondary DNS servers detect updates, synchronize records, and maintain accurate DNS data during outages or network disruptions. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fhow-soa-records-support-reliable-dns-zone-transfers%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=How%20SOA%20Records%20Support%20Reliable%20DNS%20Zone%20Transfers&url=undefined%2Fblog%2Fhow-soa-records-support-reliable-dns-zone-transfers%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fhow-soa-records-support-reliable-dns-zone-transfers%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fhow-soa-records-support-reliable-dns-zone-transfers%2F&title=How%20SOA%20Records%20Support%20Reliable%20DNS%20Zone%20Transfers "Share on Reddit") [ ](mailto:?subject=How%20SOA%20Records%20Support%20Reliable%20DNS%20Zone%20Transfers&body=Check out this article: undefined%2Fblog%2Fhow-soa-records-support-reliable-dns-zone-transfers%2F "Share via Email") ![SOA DNS transfer](https://media.mailhop.org/duocircle/hosted-email-server-0121-1787127967173.jpg) DNS acts as the internet’s directory, but it relies on a complex system of authoritative servers, zone files, and records. For organizations with primary and secondary DNS servers, synchronization is crucial, and the Start of Authority (SOA) record is vital for this process. The SOA record provides essential administrative details about a DNS zone, notably guiding secondary servers on when to fetch updated zone data from the primary server. This function enhances the **reliability of DNS zone transfers**, minimizes synchronization issues, and maintains consistent authoritative DNS infrastructure. A proper understanding of SOA records equips DNS administrators to effectively troubleshoot transfer failures, set refresh intervals, and ensure robust DNS services. ## What Is an SOA Record? An **SOA (Start of Authority) record** serves as a DNS entry that designates the authoritative data for a specific DNS zone. It is essential for every authoritative DNS zone to include an SOA record at its highest level. A typical SOA record contains several important fields: ``` example.com. IN SOA ns1.example.com. admin.example.com. ( 2026081901 ; Serial 3600 ; Refresh 900 ; Retry 1209600 ; Expire 86400 ; Minimum TTL ) ``` Each field has a distinct function. The primary nameserver denotes the **authoritative server** for the zone, whereas the responsible-party field contains administrative contact details in DNS format. _Numerical settings govern the processes by which secondary servers monitor for updates, retry unsuccessful checks, decide when to disregard authoritative data, and manage negative caching._ In the context of zone transfers, the serial, refresh, retry, and expire values are crucial.![SMTP Server Mail 0122](https://media.mailhop.org/duocircle/smtp-server-mail-0122-1787128396656.jpg) ## What Is a DNS Zone Transfer? A DNS zone transfer involves **replicating DNS zone data** from a primary authoritative server to a secondary one. The primary server holds the original editable zone, while secondary servers keep copies to respond to [DNS queries](https://abusix.com/blog/what-are-dns-queries-and-how-are-they-measured/) autonomously. There are two common types of zone transfers: - **AXFR**: A full zone transfer that copies the entire zone. - **IXFR**: An incremental zone transfer that copies only changes made since a previous version. Zone transfers are crucial for redundancy; if one authoritative **DNS server fails**, another can take over. Secondary servers, however, require a dependable method to verify the freshness of their zone copies. The SOA record supplies key information for this assessment. ## The SOA Serial Number and Zone Changes The serial number is crucial for zone transfers in the SOA record. It must be updated whenever the DNS zone is modified, as secondary DNS servers check their **local serial number** against the one from the primary server. For example, suppose the secondary server currently has: Serial: 2026081801 The primary server has: Serial: 2026081901 The secondary recognizes its outdated copy due to the primary’s newer serial, prompting a zone transfer. This straightforward comparison enables DNS servers to assess synchronization needs without requiring a **full zone transfer** each time. ### Why Serial Management Matters When an administrator modifies a [DNS record type](https://www.duocircle.com/blog/data-privacy/dns-record-types-defined-and-explained/) without updating the SOA serial number, secondary DNS servers may fail to recognize the change. As a result, the primary server can contain the latest DNS information while secondary servers continue providing outdated records. Keeping the SOA serial number accurate and properly maintained is essential for reliable **DNS synchronization**.![Email Smtp Service 0123](https://media.mailhop.org/duocircle/email-smtp-service-0123-1787128419170.jpg) ## How the SOA Refresh Value Supports Transfers The refresh value tells secondary servers how frequently they should check the primary server for updates. For example: Refresh: 3600 A secondary server typically checks for changes every hour (3,600 seconds). In a refresh check, it compares the primary’s SOA information with its own. If the serial number has increased, it can request updated zone data. This refresh **interval balances responsiveness** and DNS infrastructure load. _A very short interval leads to increased query traffic, while a long interval may delay updates to secondary servers._ The ideal refresh value varies based on the organization’s DNS architecture and zone change frequency. ## The SOA Retry Value Helps Recover From Failures DNS infrastructure can **experience network disruptions** or server outages. A secondary server may reach out to the primary without receiving a reply. The retry value indicates the waiting period for the secondary server before making another refresh attempt after a failed one. For example: Retry: 900 means the secondary can retry after approximately 15 minutes. This mechanism enables DNS servers to bounce back from **brief communication issues** without marking the primary server as permanently offline. Setting an appropriate retry value is crucial for maintaining reliable [email security](https://www.duocircle.com/) and DNS operations when network disruptions are only temporary. ## The Expire Value Protects Against Stale Zone Data The expire value serves as a critical protection measure, indicating the duration a secondary server may rely on its zone copy if it fails to refresh from the primary server. For example: Expire: 1209600 represents 14 days. If a secondary server is unable to reach the primary for longer than the designated expiration period, it may cease to recognize the zone as authoritative. This mechanism helps ensure that secondary servers do not deliver **outdated DNS information** indefinitely. Consequently, the expiration value enhances reliability and limits the duration of stale zone data in operation.![SMTP Email Server 0124](https://media.mailhop.org/duocircle/smtp-email-server-0124-1787128436915.jpg) ## SOA Records and AXFR Transfers In an [DNS zone transfer(AXFR)](https://www.acunetix.com/blog/articles/dns-zone-transfers-axfr/), the secondary server requests the entire DNS zone from the primary server. _The SOA record indicates the zone’s current version, allowing the secondary to compare serial numbers during synchronization._ If the primary’s serial is newer, the secondary can receive the updated zone. AXFR is valuable for **initializing a secondary server** or completely replacing a zone but can be more resource-intensive than incremental transfers. ## SOA Records and IXFR Transfers IXFR, or incremental zone transfer, focuses on transferring only the modifications between zone versions. The SOA serial number plays a crucial role by **indicating the zone’s version**, enabling DNS servers to recognize its current status. For instance, if the primary has version 105 and the secondary has version 100, an IXFR operation can transfer only the differences, provided the primary retains the change history. This approach enhances synchronization efficiency, especially for large DNS zones with frequent updates. ## SOA Records Help Maintain DNS Consistency A key advantage of **dependable zone transfers** is the uniformity across authoritative DNS servers. Consider an organization with three authoritative [nameservers](https://blog.hubspot.com/website/nameserver). Depending on resolver behavior and network conditions, users may get responses from any server. If one server holds outdated data while the others are current, this can lead to inconsistent DNS responses for different users. This can create problems such as: - Websites pointing to outdated IP addresses - Mail servers using incorrect [MX records](https://emaillabs.io/en/what-are-mx-records-understanding-their-role-in-dns-and-email-delivery/) - Newly created subdomains failing intermittently - **DNS-based security** records becoming inconsistent - Service migrations taking longer than expected _Synchronization based on SOA enables secondary servers to detect when updates to their zone data are necessary, thereby minimizing the potential for inconsistent authoritative data._ ![SMTP Providers 0125](https://media.mailhop.org/duocircle/smtp-providers-0125-1787128456653.jpg) ## SOA Values and DNS Change Propagation It is crucial to differentiate between the timing of zone transfers and overall [DNS propagation](https://www.duocircle.com/blog/8-dns-propagation-checker-features-to-look-for-in-2026/). When a DNS administrator updates a record, this modification must first be acknowledged by secondary authoritative servers via the zone transfer process. Subsequently, recursive DNS resolvers may continue to **deliver cached data** according to the [Time to Live (TTL)](https://www.f5.com/glossary/time-to-live-ttl) settings of those records. As a result, the SOA refresh value alone does not dictate how swiftly users will observe DNS changes. The overall process can involve: 1. The DNS administrator changes the zone. 2. The SOA serial number is incremented. 3. Secondary servers check the primary based on the refresh interval. 4. Secondary servers detect the newer serial. 5. An **AXFR or IXFR transfer** occurs. 6. Secondary servers update their zone data. 7. Recursive resolvers retrieve the updated records as their cached data expires. Understanding this distinction helps administrators troubleshoot DNS changes more accurately. ## Common SOA Configuration Problems Incorrect SOA configuration can interfere with reliable DNS operations. - **Forgetting to Increase the Serial Number**: This issue is frequently encountered. When the zone undergoes modifications but the serial number stays the same, secondary servers may fail to initiate a transfer. - **Using Poor Refresh and Retry Values**: Highly aggressive interval settings may result in excess traffic, whereas **excessively lengthy intervals** can impede synchronization. - **Setting an Inappropriate Expire Value**: A brief expiration value could lead to a secondary server ceasing to serve a zone if a primary server experiences a prolonged outage. - **Incorrect Primary Nameserver Information**: The SOA record must precisely indicate the primary authoritative nameserver. Inaccurate information may lead to challenges in troubleshooting and issues with synchronization. - **Failing to Monitor Transfer Status**: A zone might seem to be properly set up, yet transfer processes could be **experiencing silent failures** due to factors such as network limitations, firewall settings, [access control lists (ACLs)](https://www.techtarget.com/it-infrastructure/definition/access-control-list-ACL), or the configuration of DNS servers. ## Security Considerations for Zone Transfers It is essential that zone transfers are conducted securely to ensure their reliability. Administrators need to prevent **unrestricted zone transfers** to any host. A misconfigured server could reveal internal DNS details or permit unauthorized entities to obtain zone information. Access controls should limit transfer requests to designated secondary nameservers. Depending on the DNS software and the specific environment, administrators might also implement methods like [TSIG (Transaction Signature)](https://www.webopedia.com/definitions/tsig/) to authenticate both zone transfer requests and their corresponding responses. The configuration of the DNS infrastructure must ensure that security is not compromised for the sake of reliability.![Buy Smtp 0128](https://media.mailhop.org/duocircle/buy-smtp-0128-1787128508399.jpg) ## Best Practices for Reliable DNS Zone Transfers Dependable DNS zone transfers are crucial for ensuring that primary and secondary DNS servers remain in **sync and operational**. _Adopting the practices outlined below can assist organizations in sustaining uniform DNS information while minimizing issues related to data transfers._ ### 1\. Keep SOA Serial Numbers Accurate Revise the SOA [serial number](https://en.wikipedia.org/wiki/Serial%5Fnumber) whenever modifications are made to the DNS zone. Implementing automated DNS management tools can enhance the consistency of this process and reduce the likelihood of human error. ### 2\. Set Practical Refresh and Retry Values Set the refresh and retry intervals in accordance with the organization’s DNS needs. Thoughtful timing facilitates secondary servers in identifying updates and effectively managing unsuccessful transfers. ### 3\. Configure an Appropriate Expire Period Configure the expiration value to ensure that secondary servers can still respond to DNS queries in the event of a **primary server failure**. It is important to avoid configurations that let obsolete zone data persist indefinitely. ### 4\. Protect Zone Transfer Requests Restrict zone transfers solely to reputable secondary DNS servers. Additionally, organizations are advised to implement authentication measures and other security protocols to safeguard against unauthorized access to zone information. ### 5\. Monitor DNS Infrastructure Continuously Consistently observe primary DNS servers for any failed transfers, discrepancies in SOA serial numbers, DNS-related errors, and issues with availability. Timely identification of these problems can avert synchronization challenges from escalating into significant outages. ### 6\. Validate DNS Changes Before Deployment Prior to implementing any major alterations to your production DNS infrastructure, it is essential to **verify SOA records**, transfer settings, and zone configurations. Conducting pre-deployment checks can facilitate the early detection of configuration issues.![Windows Smtp Service 0126](https://media.mailhop.org/duocircle/windows-smtp-service-0126-1787128491687.jpg) ### 7\. Build Redundancy Into Authoritative DNS It is advisable not to host all authoritative DNS servers on a single network or infrastructure. By utilizing diverse providers, networks, or geographical sites, you can enhance overall availability should one environment experience a disruption. ### 8\. Review Transfer Configuration Regularly As server infrastructures, service providers, and network designs undergo transformations, DNS environments must adapt accordingly. It is essential to regularly assess transfer permissions, SOA records, and server interactions to maintain a secure and dependable configuration. ### 9\. Automate Where Possible Implementing automation can **minimize configuration errors** while ensuring that [Service-Oriented Architecture (SOA)](https://www.ibm.com/think/topics/soa) updates, synchronization verifications, and monitoring activities are carried out reliably. Additionally, it simplifies the management of DNS on a large scale. ### 10\. Have a Recovery Plan Develop protocols for managing situations involving unsuccessful zone transfers, inaccessible primary servers, or discrepancies in DNS information. An established recovery framework enables administrators to act more swiftly when issues with DNS synchronization arise. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fhow-soa-records-support-reliable-dns-zone-transfers%2F) [ ](https://twitter.com/intent/tweet?text=How%20SOA%20Records%20Support%20Reliable%20DNS%20Zone%20Transfers&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fhow-soa-records-support-reliable-dns-zone-transfers%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fhow-soa-records-support-reliable-dns-zone-transfers%2F) Copy Related Articles - [ ![Common Malware Types ](https://media.mailhop.org/duocircle/spf-record-tester-6189-1780645931491.jpg) 11 Common Malware Types and How to Spot Them Blog ](/blog/11-common-malware-types-and-how-to-spot-them/) - [ ![Sales Call](https://media.mailhop.org/duocircle/best-ai-note-takers-for-sales-calls-1782375564157.jpg) 5 Best AI Note Takers for Sales Calls in 2026 Blog ](/blog/5-best-ai-note-takers-for-sales-calls-in-2026/) - [ ![CNAME vs A record DNS comparison](https://media.mailhop.org/duocircle/dmarc-report-service-3331-1786694638771.jpg) CNAME vs. A Record: Understanding the Right DNS Choice Blog ](/blog/cname-vs-a-record-understanding-the-right-dns-choice/) - [ ![Email Downtime Detection](https://media.mailhop.org/duocircle/spf-record-2021-1786438223611.jpg) Email Downtime Detection: From Detection To Faster Recovery Blog ](/blog/email-downtime-detection-from-detection-to-faster-recovery/) ## Related Articles [ foundational 11 Common Malware Types and How to Spot Them May 15, 2026 ](/blog/11-common-malware-types-and-how-to-spot-them/)[ foundational 5 Best AI Note Takers for Sales Calls in 2026 Jun 25, 2026 ](/blog/5-best-ai-note-takers-for-sales-calls-in-2026/)[ foundational CNAME vs. A Record: Understanding the Right DNS Choice Aug 14, 2026 ](/blog/cname-vs-a-record-understanding-the-right-dns-choice/)[ foundational Email Downtime Detection: From Detection To Faster Recovery Aug 11, 2026 ](/blog/email-downtime-detection-from-detection-to-faster-recovery/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"How SOA Records Support Reliable DNS Zone Transfers","description":"Discover how SOA records support reliable DNS zone transfers by coordinating DNS updates, synchronization, refresh intervals, retries, and server communication.","url":"https://www.duocircle.com/blog/how-soa-records-support-reliable-dns-zone-transfers/","datePublished":"2026-08-19T00:00:00.000Z","dateModified":"2026-08-19T00:00:00.000Z","dateCreated":"2026-08-19T00:00:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/how-soa-records-support-reliable-dns-zone-transfers/"},"articleSection":"foundational","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/hosted-email-server-0121-1787127967173.jpg","caption":"SOA DNS transfer"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"foundational"},{"@type":"ListItem","position":3,"name":"How SOA Records Support Reliable DNS Zone Transfers","item":"https://www.duocircle.com/blog/how-soa-records-support-reliable-dns-zone-transfers/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"foundational","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"How SOA Records Support Reliable DNS Zone Transfers","item":"https://www.duocircle.com/blog/how-soa-records-support-reliable-dns-zone-transfers/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"How SOA Records Support Reliable DNS Zone Transfers","description":"Discover how SOA records support reliable DNS zone transfers by coordinating DNS updates, synchronization, refresh intervals, retries, and server communication.","url":"https://www.duocircle.com/blog/how-soa-records-support-reliable-dns-zone-transfers/","datePublished":"2026-08-19T00:00:00.000Z","dateModified":"2026-08-19T00:00:00.000Z","dateCreated":"2026-08-19T00:00:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/how-soa-records-support-reliable-dns-zone-transfers/"},"articleSection":"foundational","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/hosted-email-server-0121-1787127967173.jpg","caption":"SOA DNS transfer"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```