NTP, secured and centralized

Time you can trust, at scale.

ntp‑proxy.com provides a secure, policy‑driven NTP proxy so your fleets synchronize reliably without exposing upstream time sources.

Clients Servers Devices NTP Proxy NTS offload Rate limiting Anycast ready Trusted NTP NTS sources

Features

Centralized, policy‑driven NTP that fits enterprise networks without adding risk.

NTS & TLS Termination

Offload Network Time Security (NTS) and transport requirements at the proxy edge to simplify clients and harden upstream access.

Stratum‑aware Routing

Prefer authoritative sources and enforce drift thresholds. Optional holdover keeps fleets stable during upstream incidents.

DDoS‑resistant

Built‑in rate limiting, token buckets, and network ACLs protect your infrastructure from volumetric abuse.

±50µstypical LAN accuracy
99.99%service availability
globalanycast option
audit‑readyevent logs

Architecture

Deploy on‑prem or in your cloud. The proxy scales horizontally and integrates with existing observability.

ComponentResponsibilityNotes
IngressNTP/NTS listener, ACLsIPv4/IPv6, UDP with optional TCP for NTS‑KE
Proxy CoreRequest orchestrationStratum policy, drift guardrails, caching
UpstreamTrusted time sourcesPublic pools, vendor feeds, or private GNSS
ObservabilityMetrics & logsExports to your SIEM and dashboards

Compliance

Controls and evidence to support regulated environments.

Policy Controls

Enforce source allow‑lists, certificate pinning for NTS, and access segmentation by network zone.

Evidence

Retain audit logs of source selection, offsets, and client authentication for reviews and incident analysis.

Contact

Tell us about your time distribution footprint. We’ll share a short plan and a sandbox token.

View features