Nr

ntpd-rs on Ubuntu 24.04 LTS

Azure Networking

ntpd-rs, a memory safe NTP time server and client written in Rust that keeps this machine in sync and serves accurate time to your network.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

ntpd-rs is a modern, memory safe implementation of the Network Time Protocol from the Pendulum project. It is a full NTP client and server in one: it disciplines this machine's own clock against the public NTP pool, and it serves accurate time to the other machines on your network, so you can run your own internal time source instead of relying on external servers for every device. It is fully capable of Network Time Security for authenticated, tamper resistant time. There is no database and no web console; the daemon runs as an unprivileged systemd service and is administered with a command line tool over a local only observation socket.

Why the cloudimg image

The cloudimg image is hardened and fully patched with ntpd-rs preconfigured as a server and client and running as a systemd service. It ships secure by default with no known credentials: serving network time needs none, the observation and control interface is bound to a local unix socket so it is never network reachable, and the Prometheus metrics port is left disabled. Only the NTP service port and SSH are exposed, first boot records this instance's reachable address to a root only file, and every instance is backed by a paired deploy guide and 24/7 cloudimg support.

Common uses

  • An internal NTP time source for your own fleet
  • A memory safe replacement for legacy ntpd or chrony
  • A path to authenticated time with Network Time Security