{"id":15670,"date":"2021-03-13T10:00:00","date_gmt":"2021-03-13T03:00:00","guid":{"rendered":"https:\/\/blog.tinohost.com\/?p=699"},"modified":"2026-10-28T11:40:03","modified_gmt":"2026-10-28T04:40:03","slug":"dns-soa-la-gi","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/dns-soa-la-gi\/","title":{"rendered":"B\u1ea3n ghi SOA l\u00e0 g\u00ec? \u00dd ngh\u0129a t\u1eebng tr\u01b0\u1eddng trong DNS SOA"},"content":{"rendered":"\n

B\u1ea3n ghi SOA (Start of Authority) l\u00e0 b\u1ea3n ghi DNS b\u1eaft bu\u1ed9c \u1edf \u0111\u1ea7u m\u1ed7i zone, cho bi\u1ebft nameserver ch\u00ednh c\u1ee7a zone, email ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb, s\u1ed1 phi\u00ean b\u1ea3n (serial) v\u00e0 c\u00e1c b\u1ed9 \u0111\u1ebfm th\u1eddi gian m\u00e0 nameserver ph\u1ee5 d\u00f9ng \u0111\u1ec3 \u0111\u1ed3ng b\u1ed9 d\u1eef li\u1ec7u.<\/strong> M\u1ed7i zone c\u00f3 \u0111\u00fang m\u1ed9t b\u1ea3n ghi SOA.<\/p>\n\n\n\n

SOA l\u00e0 m\u1ed9t lo\u1ea1i b\u1ea3n ghi c\u1ee7a DNS<\/a>, th\u01b0\u1eddng \u0111\u01b0\u1ee3c nh\u00e0 cung c\u1ea5p DNS t\u1ea1o s\u1eb5n khi b\u1ea1n th\u00eam t\u00ean mi\u1ec1n<\/a>. Ph\u1ea7n d\u01b0\u1edbi gi\u1ea3i th\u00edch t\u1eebng tr\u01b0\u1eddng trong SOA qua b\u1ea3n ghi th\u1eadt c\u1ee7a tino.vn, c\u00e1ch c\u00e1c b\u1ed9 \u0111\u1ebfm ho\u1ea1t \u0111\u1ed9ng v\u00e0 gi\u00e1 tr\u1ecb n\u00ean \u0111\u1eb7t n\u1ebfu b\u1ea1n t\u1ef1 ch\u1ea1y m\u00e1y ch\u1ee7 DNS.<\/p>\n\n\n\n

B\u1ea3n ghi SOA l\u00e0 g\u00ec?<\/h2>\n\n\n\n

B\u1ea3n ghi SOA l\u00e0 b\u1ea3n ghi \u0111\u00e1nh d\u1ea5u \u0111i\u1ec3m b\u1eaft \u0111\u1ea7u quy\u1ec1n qu\u1ea3n l\u00fd (authority) c\u1ee7a m\u1ed9t zone DNS, \u0111\u01b0\u1ee3c \u0111\u1ecbnh ngh\u0129a \u1edf RFC 1035<\/a> m\u1ee5c 3.3.13. N\u00f3 n\u1eb1m \u1edf t\u00ean g\u1ed1c c\u1ee7a zone, c\u00f9ng c\u00e1c b\u1ea3n ghi NS, v\u00e0 l\u00e0 b\u1ea3n ghi \u0111\u1ea7u ti\u00ean \u0111\u01b0\u1ee3c g\u1eedi khi nameserver ph\u1ee5 ch\u00e9p zone t\u1eeb nameserver ch\u00ednh.<\/p>\n\n\n\n

Zone l\u00e0 ph\u1ea7n c\u00e2y t\u00ean mi\u1ec1n do m\u1ed9t b\u00ean qu\u1ea3n l\u00fd, th\u01b0\u1eddng tr\u00f9ng v\u1edbi m\u1ed9t t\u00ean mi\u1ec1n nh\u01b0 tino.vn v\u00e0 c\u00e1c t\u00ean con b\u00ean d\u01b0\u1edbi. M\u1ed7i zone \u0111\u01b0\u1ee3c ph\u1ee5c v\u1ee5 b\u1edfi m\u1ed9t nh\u00f3m name server<\/a>; b\u1ea3n ghi SOA cho bi\u1ebft m\u00e1y n\u00e0o gi\u1eef b\u1ea3n g\u1ed1c v\u00e0 c\u00e1c m\u00e1y c\u00f2n l\u1ea1i ph\u1ea3i \u0111\u1ed3ng b\u1ed9 th\u1ebf n\u00e0o.<\/p>\n\n\n\n

V\u00ec sao zone n\u00e0o c\u0169ng c\u1ea7n SOA?<\/h3>\n\n\n\n

Thi\u1ebfu SOA th\u00ec zone kh\u00f4ng h\u1ee3p l\u1ec7: nameserver t\u1eeb ch\u1ed1i n\u1ea1p zone, nameserver ph\u1ee5 kh\u00f4ng bi\u1ebft khi n\u00e0o c\u1ea7n c\u1eadp nh\u1eadt, resolver kh\u00f4ng bi\u1ebft nh\u1edb c\u00e2u tr\u1ea3 l\u1eddi “t\u00ean kh\u00f4ng t\u1ed3n t\u1ea1i” trong bao l\u00e2u. V\u1edbi tr\u00ecnh qu\u1ea3n l\u00fd DNS c\u1ee7a nh\u00e0 \u0111\u0103ng k\u00fd, hosting hay Cloudflare, SOA \u0111\u01b0\u1ee3c t\u1ea1o v\u00e0 t\u0103ng serial t\u1ef1 \u0111\u1ed9ng m\u1ed7i l\u1ea7n b\u1ea1n s\u1eeda b\u1ea3n ghi.<\/p>\n\n\n\n

B\u1ea3n ghi SOA g\u1ed3m nh\u1eefng tr\u01b0\u1eddng n\u00e0o?<\/h2>\n\n\n\n

B\u1ea3n ghi SOA c\u00f3 b\u1ea3y tr\u01b0\u1eddng theo th\u1ee9 t\u1ef1 c\u1ed1 \u0111\u1ecbnh: MNAME, RNAME, SERIAL, REFRESH, RETRY, EXPIRE v\u00e0 MINIMUM. Hai tr\u01b0\u1eddng \u0111\u1ea7u l\u00e0 t\u00ean, n\u0103m tr\u01b0\u1eddng sau l\u00e0 s\u1ed1; c\u00e1c b\u1ed9 \u0111\u1ebfm th\u1eddi gian t\u00ednh b\u1eb1ng gi\u00e2y. Ngo\u00e0i ra b\u1ea3n ghi SOA, nh\u01b0 m\u1ecdi b\u1ea3n ghi, c\u00f2n c\u00f3 TTL ri\u00eang.<\/p>\n\n\n\n

Tr\u01b0\u1eddng<\/th>\u00dd ngh\u0129a<\/th>Gi\u00e1 tr\u1ecb c\u1ee7a tino.vn (27\/10\/2026)<\/th><\/tr><\/thead>
MNAME<\/td>Nameserver ch\u00ednh (primary) gi\u1eef b\u1ea3n g\u1ed1c c\u1ee7a zone<\/td>ns1.tino.vn.<\/td><\/tr>
RNAME<\/td>Email ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb, vi\u1ebft d\u1ea5u ch\u1ea5m thay cho @ \u1edf v\u1ecb tr\u00ed \u0111\u1ea7u<\/td>admin.tino.vn. (t\u1ee9c admin@tino.vn)<\/td><\/tr>
SERIAL<\/td>S\u1ed1 phi\u00ean b\u1ea3n c\u1ee7a zone, ph\u1ea3i t\u0103ng m\u1ed7i l\u1ea7n s\u1eeda<\/td>2026102701<\/td><\/tr>
REFRESH<\/td>Bao l\u00e2u m\u00e1y ph\u1ee5 h\u1ecfi l\u1ea1i m\u00e1y ch\u00ednh xem serial \u0111\u00e3 \u0111\u1ed5i ch\u01b0a<\/td>28800 (8 gi\u1edd)<\/td><\/tr>
RETRY<\/td>Kh\u00f4ng li\u00ean l\u1ea1c \u0111\u01b0\u1ee3c m\u00e1y ch\u00ednh th\u00ec th\u1eed l\u1ea1i sau bao l\u00e2u<\/td>7200 (2 gi\u1edd)<\/td><\/tr>
EXPIRE<\/td>M\u1ea5t li\u00ean l\u1ea1c qu\u00e1 th\u1eddi gian n\u00e0y th\u00ec m\u00e1y ph\u1ee5 ng\u1eebng tr\u1ea3 l\u1eddi zone<\/td>604800 (7 ng\u00e0y)<\/td><\/tr>
MINIMUM<\/td>Th\u1eddi gian nh\u1edb c\u00e2u tr\u1ea3 l\u1eddi “t\u00ean kh\u00f4ng t\u1ed3n t\u1ea1i” (negative caching, RFC 2308)<\/td>7200 (2 gi\u1edd)<\/td><\/tr><\/tbody><\/table>
Tra b\u1eb1ng Google Admin Toolbox Dig<\/a> ng\u00e0y 27\/10\/2026; serial thay \u0111\u1ed5i m\u1ed7i khi Tino s\u1eeda zone.<\/figcaption><\/figure>\n\n\n\n
\"\u1ea2nh
\u1ea2nh ch\u1ee5p c\u00f4ng c\u1ee5 Google Admin Toolbox Dig (toolbox.googleapps.com) ng\u00e0y 27\/10\/2026.<\/figcaption><\/figure>\n\n\n\n

\u0110\u1ecdc chu\u1ed7i s\u1ed1 trong b\u1ea3n ghi SOA th\u1ebf n\u00e0o?<\/h2>\n\n\n\n

Chu\u1ed7i s\u1ed1 trong b\u1ea3n ghi SOA lu\u00f4n theo th\u1ee9 t\u1ef1 serial, refresh, retry, expire, minimum, n\u00ean ch\u1ec9 c\u1ea7n \u0111\u1ebfm v\u1ecb tr\u00ed l\u00e0 bi\u1ebft s\u1ed1 n\u00e0o l\u00e0 g\u00ec. V\u00ed d\u1ee5 604800 l\u00e0 7 ng\u00e0y, 86400 l\u00e0 1 ng\u00e0y, 3600 l\u00e0 1 gi\u1edd; c\u1eb7p “604800 \/ 3600” ng\u01b0\u1eddi ta hay tra ch\u00ednh l\u00e0 expire 7 ng\u00e0y v\u00e0 minimum (ho\u1eb7c retry) 1 gi\u1edd.<\/p>\n\n\n\n

L\u1ea5y v\u00ed d\u1ee5 m\u1ed9t b\u1ea3n ghi SOA theo c\u00fa ph\u00e1p file zone:<\/p>\n\n\n\n

example.com.  IN  SOA  ns1.example.com. abuse.example.com. (\n    2006030501 ; serial: ng\u00e0y 05\/03\/2006, l\u1ea7n s\u1eeda th\u1ee9 01\n    28800      ; refresh: 8 gi\u1edd\n    3600       ; retry: 1 gi\u1edd\n    604800     ; expire: 7 ng\u00e0y\n    3600 )     ; minimum: 1 gi\u1edd cho c\u00e2u tr\u1ea3 l\u1eddi \"kh\u00f4ng t\u1ed3n t\u1ea1i\"<\/code><\/pre>\n\n\n\n
Email qu\u1ea3n tr\u1ecb \u1edf \u0111\u00e2y l\u00e0 abuse@example.com: ph\u1ea7n tr\u01b0\u1edbc d\u1ea5u ch\u1ea5m \u0111\u1ea7u ti\u00ean c\u1ee7a RNAME l\u00e0 t\u00ean h\u1ed9p th\u01b0. N\u1ebfu t\u00ean h\u1ed9p th\u01b0 c\u00f3 d\u1ea5u ch\u1ea5m (v\u00ed d\u1ee5 dns.admin@\u2026), file zone ph\u1ea3i vi\u1ebft dns\\.admin.example.com.<\/code>.<\/p>\n\n\n\n
C\u00e1c b\u1ed9 \u0111\u1ebfm trong SOA ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/h2>\n\n\n\n
C\u00e1c b\u1ed9 \u0111\u1ebfm SOA \u0111i\u1ec1u khi\u1ec3n vi\u1ec7c nameserver ph\u1ee5 ch\u00e9p zone t\u1eeb nameserver ch\u00ednh: m\u00e1y ph\u1ee5 \u0111\u1ecbnh k\u1ef3 so serial, th\u1ea5y serial l\u1edbn h\u01a1n th\u00ec t\u1ea3i zone m\u1edbi (zone transfer), kh\u00f4ng li\u00ean l\u1ea1c \u0111\u01b0\u1ee3c th\u00ec th\u1eed l\u1ea1i, m\u1ea5t li\u00ean l\u1ea1c qu\u00e1 l\u00e2u th\u00ec t\u1ef1 ng\u1eebng \u0111\u1ec3 kh\u00f4ng tr\u1ea3 l\u1eddi b\u1eb1ng d\u1eef li\u1ec7u qu\u00e1 c\u0169.<\/p>\n\n\n\n
\"S\u01a1<\/figure>\n\n\n\n
Nhi\u1ec1u nh\u00e0 cung c\u1ea5p DNS hi\u1ec7n nay \u0111\u1ed3ng b\u1ed9 m\u00e1y ph\u1ee5 b\u1eb1ng c\u01a1 ch\u1ebf ri\u00eang ho\u1eb7c g\u1eedi th\u00f4ng b\u00e1o NOTIFY ngay khi c\u00f3 thay \u0111\u1ed5i, n\u00ean REFRESH v\u00e0 RETRY ch\u1ee7 y\u1ebfu l\u00e0 l\u01b0\u1edbi an to\u00e0n. Tr\u01b0\u1eddng MINIMUM th\u00ec v\u1eabn \u1ea3nh h\u01b0\u1edfng tr\u1ef1c ti\u1ebfp ng\u01b0\u1eddi d\u00f9ng: t\u00ean v\u1eeba t\u1ea1o m\u00e0 c\u00f3 ng\u01b0\u1eddi \u0111\u00e3 tra tr\u01b0\u1edbc \u0111\u00f3 s\u1ebd b\u1ecb nh\u1edb l\u00e0 “kh\u00f4ng t\u1ed3n t\u1ea1i” trong kho\u1ea3ng th\u1eddi gian n\u00e0y.<\/p>\n\n\n\n
Gi\u00e1 tr\u1ecb SOA n\u00ean \u0111\u1eb7t bao nhi\u00eau?<\/h2>\n\n\n\n
Gi\u00e1 tr\u1ecb SOA kh\u00f4ng c\u00f3 con s\u1ed1 b\u1eaft bu\u1ed9c, nh\u01b0ng c\u00f3 khuy\u1ebfn ngh\u1ecb: RFC 1912<\/a> g\u1ee3i \u00fd expire 2\u20134 tu\u1ea7n v\u00e0 refresh t\u1eeb 20 ph\u00fat \u0111\u1ebfn v\u00e0i gi\u1edd tu\u1ef3 t\u1ea7n su\u1ea5t s\u1eeda zone; RFC 2308<\/a> cho r\u1eb1ng minimum 1\u20133 gi\u1edd l\u00e0 h\u1ee3p l\u00fd v\u00e0 tr\u00ean 1 ng\u00e0y th\u00ec d\u1ec5 g\u00e2y v\u1ea5n \u0111\u1ec1.<\/p>\n\n\n\n
Tr\u01b0\u1eddng<\/th>Khuy\u1ebfn ngh\u1ecb<\/th>Ngu\u1ed3n<\/th><\/tr><\/thead>
SERIAL<\/td>D\u1ea1ng YYYYMMDDnn, t\u0103ng m\u1ed7i l\u1ea7n s\u1eeda<\/td>RFC 1912 \u00a72.2<\/td><\/tr>
REFRESH<\/td>20 ph\u00fat \u2013 2 gi\u1edd (zone s\u1eeda th\u01b0\u1eddng xuy\u00ean), 2 \u2013 12 gi\u1edd (\u00edt s\u1eeda)<\/td>RFC 1912 \u00a72.2<\/td><\/tr>
RETRY<\/td>M\u1ed9t ph\u1ea7n c\u1ee7a refresh<\/td>RFC 1912 \u00a72.2<\/td><\/tr>
EXPIRE<\/td>2 \u2013 4 tu\u1ea7n, l\u1edbn h\u01a1n refresh v\u00e0 retry<\/td>RFC 1912 \u00a72.2<\/td><\/tr>
MINIMUM<\/td>1 \u2013 3 gi\u1edd<\/td>RFC 2308 \u00a75<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
V\u1edbi t\u00ean mi\u1ec1n d\u00f9ng nameserver c\u1ee7a nh\u00e0 \u0111\u0103ng k\u00fd, hosting ho\u1eb7c Cloudflare<\/a>, b\u1ea1n th\u01b0\u1eddng kh\u00f4ng c\u1ea7n v\u00e0 kh\u00f4ng \u0111\u01b0\u1ee3c s\u1eeda SOA; nh\u00e0 cung c\u1ea5p t\u1ef1 \u0111\u1eb7t c\u00e1c gi\u00e1 tr\u1ecb ph\u00f9 h\u1ee3p v\u1edbi h\u1ec7 th\u1ed1ng c\u1ee7a h\u1ecd.<\/p>\n\n\n\n
L\u01b0u \u00fd khi t\u1ef1 s\u1eeda b\u1ea3n ghi SOA<\/h2>\n\n\n\n
Ch\u1ec9 t\u1ef1 s\u1eeda SOA khi b\u1ea1n ch\u1ea1y m\u00e1y ch\u1ee7 DNS ri\u00eang nh\u01b0 BIND, PowerDNS tr\u00ean VPS. L\u1ed7i hay g\u1eb7p nh\u1ea5t l\u00e0 s\u1eeda b\u1ea3n ghi m\u00e0 qu\u00ean t\u0103ng serial, khi\u1ebfn m\u00e1y ph\u1ee5 kh\u00f4ng nh\u1eadn thay \u0111\u1ed5i; ti\u1ebfp theo l\u00e0 \u0111\u1eb7t MINIMUM qu\u00e1 l\u1edbn l\u00e0m t\u00ean m\u1edbi t\u1ea1o ch\u1eadm xu\u1ea5t hi\u1ec7n.<\/p>\n\n\n\n