SECURITY + STATUS

Time Synchronization Without Unnecessary Exposure

Chrony connects out; it does not serve time to the world.

● CURRENT

Security Model Now

  • Chrony acts as a client only
  • No external VPS clients
  • No allow rule enabled
  • Inbound UDP 123 not publicly exposed
  • Applications do not query NTP directly
◌ FUTURE

Future Security Model

  • Internal VPS access only
  • Private network or VPN
  • Source-restricted UDP 123
  • No allow all
  • No public NTP service
LIVE METRICS
Chrony
LOCKED
Stratum
0
Offset (ms)
0
Leap
NORMAL
Timezone
MYT
Upstream
G-NTP