ืืื ืฆื ืืึทืื ืืืืขืจ ืึทื ืื ืฆืืื ืคึผืขืจ ืกืื ืืื ื ืืฉื ืืืื ืืืื ืืืจ ืืึธืื ืึท ืืืืืึธื ืืจืืืก ืืื ืงืืืื ืืขืืืืกืขืก ืงืึทืืืื ืึทืงืืืืื ื ืืืจื TCP / IP? ื ืึธื ืึทืืข, ืืขืืขืจ ืคืื ืืื ืืื ืึท ืืืืืขืจ, ืืื ืื ืฆืืื ืืืื ืืืื ืจืืืืืง ืคึฟืึทืจ ืืื ืึทืืข. ืืขื ืคึผืจืึธืืืขื ืงืขื ืขื ื ืื ืืืื ืกืขืจืงืึทืืืืขื ืืื ืึธื NTP.
ืืื ืก ืืืึทืืืฉืึทื ืคึฟืึทืจ ืึท ืืื ืื ืึทื ืืื ืืืื ืึธืคึผืฉื ืื ืคืื ืื ืื ืืึทืกืืจืืึทื IT ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ ืขืก ืืขื ืขื ืฉืืืขืจืืงืืืื ืืื ืกืื ืืงืจืึทื ืึทืืืืฉืึทื ืืึทืืื ืื ืืก ืืืืขืจ ืฆืืื. ืืืืื ืืขืจ ืงื ืืื ืึธื ืืืืื ืคืื ืขื ืืขืจืคึผืจืืื ืืืืืืืืืจื ืืืืื ืฆื ืคืึทืจืืึธืื, ืืึธืืืืื ื ืืืกืื ืืึทืืจืืื, ืืืจื ืืื ืกืืึทื ืืืื ื ืึธืืื ืึทื ืกืึทืงืกืขืกืคืึทืื ืฉืืจืขืื ืฆื ืืืงืขืจื ืื ืกืืึทืืืก ืงืืืึธ.
ืขืก ืืื ืืืื ืืขืืืขื ืึทื ืึท ืึทืืึทืงืขืจ ืืืืืืจืึทืืื ืคืจืืืื ืฆื ืฆืขืฉืืขืจื ืื ืฆืืื ืืืจื ืึท MiTM ืึธืืขืจ DDOS ืืึทืคืึทืื. ืืื ืึทืืึท ืึท ืกืืืืึทืฆืืข, ืึทืืฅ ืงืขื ืคึผืึทืกืืจื:
- ืืึทื ืืฆืขืจ ืืฉืืื ืคึผืึทืกืืืขืจืื ืืืขื ืืืกืืืื;
- X.509 ืกืขืจืืืคืืงืึทืฅ ืืืขื ืืืกืืืื;
- TOTP ืฆืืืื-ืคืึทืงืืึธืจ ืึธืืขื ืืึทืงืืืฉืึทื ืืืขื ืืึทืืื ืืจืืขืื;
- ืืึทืงืึทืคึผืก ืืืขื ืืืขืจื ืึทืืืืืืืื ืืื ืื ืกืืกืืขื ืืืขื ืืืกืืขืงื ืืื;
- DNSSec ืืืขื ืืจืขืื.
ืขืก ืืื ืงืืึธืจ ืึทื ืืขืืขืจ IT ืึธืคึผืืืืืื ื ืืื ืืื ืืขืจืขืกืืจื ืืื ืื ืคืึทืจืืึธืืืขื ืึธืคึผืขืจืึทืฆืืข ืคืื โโืฆืืื ืกืื ืืงืจืึทื ืึทืืืืฉืึทื ืืึทืืื ืื ืืก, ืืื ืขืก ืืืึธืื ืืืื ืคืืึทื ืืืื ืืื ืืขื ืขื ืคืึทืจืืึธืืืขื ืืื ืืืืขืจ ืืื ืื ืืึทืกืืจืืึทื ืึธืคึผืขืจืึทืฆืืข.
ืืจืขืื NTP ืืื 25 ืืื ืื
ื ืขืฅ ืคึผืจืึธืืึธืงืึธืืก - ืืืืืขื ื ืืึทืืก ืืึธืื ืืืื ืคึผืืงืืืืืขืจืึทืื, ืืื ืืึธืื ืฉืืื ืืื ืืขื ืขื ื ืื ืืขืจ ืืื ืคึฟืึทืจ ืขืคึผืขืก, ืึธืืขืจ ืคืึทืจืืืึทืื ืืื ืืื ื ืืฉื ืึทืืื ืืจืื ื ืืคืืื ืืืขื ืึท ืงืจืืืืฉ ืืึทืกืข ืคืื โโืขื ืืืืืึทืกืฅ ืืื ืคืึทื ืืื ื ืืื ืึทืงืืืืืึทืืืืืื.
ืืขืจ ืืืืคึผื ืงืืึธื ืืืขืื ืงืืึทืกืืฉ NTP ืืื ืื ืคืขืื ืคืื ืคืึทืจืืึธืืืขื ืืขืงืึทื ืืืึทืื ืคึฟืึทืจ ืคึผืจืึทืืขืงืืื ื ืงืขืื ืื ืคืืื ืืืจื ืื ืืจืืืขืจื. ืคืืจืฉืฒืืขื ืข ืคืจืืืื ื ืืฒื ืข ื ืืขืืื ื ืืขืฐืืจ ื ืฆ ื ืืฒื ื ืืข ื ืคืจืืืืขื . ืฆื ืืขืจืืจืืืื ืืขื, ืืืจ ืขืจืฉืืขืจ ืืืคึผืืึทืืขื ืึทื ืึท ืคืึทืจ-ืฉืขืจื ืฉืืืกื (PSK) ืืขืงืึทื ืืืึทื ืคึฟืึทืจ ืืงืกืืฉืืื ืืืฉืื ื ืกืืืืขืืจืืง ืฉืืืกืืขื.
ืฆืื ืืึทืืืืขืจื, ืืขื ืืืคึฟื ืืื ื ืืฉื ืืึทืฆืึธืื ืึทืืืขืง ืคึฟืึทืจ ืึท ืคึผืฉืื ืกืืื - ืขืก ืืื ื ืืฉื ืืืึธื ืืขืืื ื. ืืึทื ืืึทื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืื ืคืืจืืื ืื ืืืืฃ ืื ืงืืืขื ื ืืืึทื ืืืคึผืขื ืืื ื ืืืืฃ ืื ืกืขืจืืืขืจ. ืืขื ืืืื ืึทื ืืืจ ื ืึธืจ ืงืขื ืขื ื ืืฉื ืืืืื ืื ืื ืืขืจ ืงืืืขื ื ืึทืืื. ืืืื ืขืคึผืขืก ืขื ืืขืจืื ืืขื ืืืืฃ ืื NTP ืกืขืจืืืขืจ, ืึทืืข ืงืืืืึทื ืฅ ืืืื ืืืื ืจืืงืึทื ืคืืืืขืจื.
ืืขืจื ืึธื ืืื ืืขืงืืืขื ืึทืจืืืฃ ืืื AutoKey, ืึธืืขืจ ืืื ืืื ืืืกืงืึทืืืขืจื ืึท ื ืืืขืจ ืคืื ืขืจื ืกื ืืืึทืื ืขืจืึทืืืืืืื ืืื ืื ืคึผืืึทื ืคืื ืื ืึทืืืขืจืืืึทื ืืื ืืื ืืื ืืึธืื ืฆื ืคืึทืจืืึธืื ืขืก. ืื ืืึทื ืืื ืึทื ืื ืืืืืขื ืึผืืื ืืืืื 32-ืืืฅ, ืขืก ืืื ืืืื ืงืืืื ืืื ืืื ื ืืฉื ืืขื ืื ืงืึทืืคึผืืืืืืฉืึทื ืึทื ืงืึทืืคึผืืขืงืกืืื ืคึฟืึทืจ ืึท ืคืจืึธื ืืึทื ืืึทืคืึทืื.
- ืฉืืืกื ืฉืืึทื - ืกืืืืขืืจืืง 32-ืืืกื ืฉืืืกื;
- MAC (ืืขืกืขืืืฉ ืึธืืขื ืืึทืงืืืฉืึทื ืงืึธื) - NTP ืคึผืึทืงืึทื ืืฉืขืงืกืื;
ืึทืืืึธืงืื ืืื ืงืึทืืงืืึทืืืืืื ืืื ืืืื.
Autokey=H(Sender-IP||Receiver-IP||KeyID||Cookie)ืืื ื () ืืื ืึท ืงืจืืคึผืืึธืืจืึทืคืืง ืืึทืฉ ืคึฟืื ืงืฆืืข.
ืืขืจ ืืขืืืืงืขืจ ืคึฟืื ืงืฆืืข ืืื ืืขื ืืฆื ืฆื ืจืขืืขื ืขื ืื ืืฉืขืงืกืื ืคืื ืคึผืึทืงืืฅ.
MAC=H(Autokey||NTP packet)ืขืก ืืืจื ืก ืืืืก ืึทื ืื ืืื ืฆืข ืึธืจื ืืืขืืงืืึทื ืคืื ืคึผืขืงื ืืฉืขืงืก ืจืขืกืฅ ืืืืฃ ืื ืึธืืึทื ืืืกืืื ืคืื ืื ืงืืืืขื. ืึทืืึธื ืืืจ ืืึธืื ืืื, ืืืจ ืงืขื ืขื ืืืงืขืจื ืื ืึทืืืึธืงืื ืืื ืืึทื ืื MAC. ืึธืืขืจ, ืื NTP ืกืขืจืืืขืจ ื ืืฆื ืึท ืืืืืขื ืืืขื ืืืฉืขื ืขืจืืืืื ื ืืื. ืืึธ ืืื ืืื ืื ืืึทืคึผื ืืืื.
Cookie=MSB_32(H(Client IP||Server IP||0||Server Seed))ืื MSB_32 ืคืื ืงืฆืืข ืฉื ืืึทืื ืื 5 ืืขืจืกื ืืึทืืืึทืืืง ืืืื ืคืื ืื md32 ืืึทืฉ ืืขืืฉืื ืจืขืืืืืึทื. ืืขืจ ืงืืืขื ื ืงืืื ืืื ื ืืฉื ืืืืฉื ืึทืืื ืืึทื ื ืืื ืื ืกืขืจืืืขืจ ืคึผืึทืจืึทืืขืืขืจืก ืืืืืื ืึทื ืืฉืืื ืืืฉื. ืืขืจื ืึธื ืืขืจ ืึทืืึทืงืขืจ ืงืขื ืขื ืืืืื ืืืงืขืจื ืื ืขืจืฉื ื ืืืขืจ ืืื ืงืขื ืขื ืื ืืืคึผืขื ืืึทื ืืื ืืืฉืขื ืขืจืืื ืงืืืืขื.
ืขืจืฉืืขืจ, ืืืจ ืืึทืจืคึฟื ืฆื ืคืึทืจืืื ืื ืฆื ืื NTP ืกืขืจืืืขืจ ืืื ืึท ืงืืืขื ื ืืื ืืึทืงืืืขื ืงืืืืขื. ื ืึธื ืืขื, ื ืืฆื ืึท ืืจืื ืงืจืึทืคื ืืืคึฟื, ืื ืึทืืึทืงืขืจ ืจืืกืืึธืจื ืื ืขืจืฉื ื ืืืขืจ ื ืึธื ืึท ืคึผืฉืื ืึทืืืขืจืืืึทื.
ืึทืืืขืจืืืึทื ืคึฟืึทืจ ืึทืืึทืงืื ื ืื ืืขืืฉืื ืคืื ืื ืขืจืฉื ื ืืืขืจ ื ืืฆื ืื ืืจืื-ืงืจืึทืคื ืืืคึฟื.
for i=0:2^32 โ 1 do
Ci=H(Server-IP||Client-IP||0||i)
if Ci=Cookie then
return i
end if
end forืื IP ืึทืืจืขืกืขืก ืืขื ืขื ืืืงืื ื, ืึทืืื ืึทืืข ืืืึธืก ืืืืืื ืืื ืฆื ืฉืึทืคึฟื 2 ^ 32 ืืึทืฉืขืก ืืื ืื ืืืฉืืคื ืงืืื ืฉืืืขืืขืืขื ืื ืืืงืืืขื ืคืื ืื NTP ืกืขืจืืืขืจ. ืืืืฃ ืึท ืจืขืืืืขืจ ืืืื ืกืืึทื ืฆืืข ืืื Intel Core i5, ืืึธืก ืืืขื ื ืขืืขื 25 ืืื ืื.
NTS - ื ืืึท ืึทืืืึธืงืื
ืขืก ืืื ืืขืืืขื ืืืืืขืืืขื ืฆื ืฉืืขืื ืืื ืืื ืึทืืึท ืืืืขืจืืืื ืืึธืืขืก ืืื ืึทืืืึธืงืื, ืืื ืืื 2012 ืขืก ืืจืืืก ืคึผืจืึธืืึธืงืึธื. ืืื ืกืืจ ืฆื ืงืึธืืคึผืจืึธืืืก ืืขื ื ืึธืืขื, ืืื ืืึทืฉืืึธืกื ืฆื ืจืืืจืึทื ื, ืึทืืื Autokey v.2 ืืื ืืึทืื ื ืขืืืืึธืจืง ืฆืืื ืืืืขืจืืืึทื.
ืื NTS ืคึผืจืึธืืึธืงืึธื ืืื ืึท ืคืึทืจืืขื ืืขืจืื ื ืคืื NTP ืืืืขืจืืืื ืืื ืืขืจืืืืึทื ืฉืืืฆื ืื ืืงืึทืกื ืืึธืืข. ืขืก ืืื ืฉืืึทืจืง ืงืจืืคึผืืึธืืจืึทืคืืง ืฉืืฅ ืงืขืื ืคึผืึทืงืึทื ืืึทื ืืคึผืืึทืืืืฉืึทื, ืคึผืจืืืืขื ืฅ ืกื ืึธืึธืคึผืื ื, ืืืึธื ืืขืืื ื, ืืื ืจืืืืืืึทื ื ืฆื ื ืขืฅ ืคึผืึทืงืึทื ืึธื ืืืขืจ, ืืื ืจืขืืืืืืื ืืื ืืขืจ ืงืืขื ืกืืขืจ ืกืืืข ืคืื โโืคึผืื ืืืขืืงืืึทื ืึธื ืืืขืจ ืื ืงืขืจื ืืขืฉืึทืก ืงืฉืจ ืืืืขืจืืืื.
ืึท NTS ืคึฟืึทืจืืื ืืื ื ืืืฉืืืื ืคืื ืฆืืืื ืกืืึทืืขืก ืืืึธืก ื ืืฆื ื ืืืขืจืืงืขืจ ืฉืืืืข ืคึผืจืึธืืึธืงืึธืืก. ืืืืฃ ืืขืจ ืขืจืฉืืขืจ ืืื ืืขื ืืื ืข, ืืขืจ ืงืืืขื ื ืืื ืกืขืจืืืขืจ ืฉืืืืขื ืืืืฃ ืคืึทืจืฉืืื ืงืึทื ืขืงืฉืึทื ื ืคึผืึทืจืึทืืขืืขืจืก ืืื ืืืขืงืกื ืงืืืืขื ืืื ืฉืืืกืืขื ืืื ืึทืืข ืื ืึทืงืึทืืคึผืึทื ืืื ื ืืึทืื ืฉืืขืื. ืืืืฃ second ืืื ืืขื ืืื ืข, ืื ืคืึทืงืืืฉ ืคึผืจืึธืืขืงืืขื NTS ืกืขืกืืข ื ืขืื ืึธืจื ืฆืืืืฉื ืืขื ืงืืืขื ื ืืื ืื NTP ืกืขืจืืืขืจ.
NTS ืืืฉืืืื ืคืื ืฆืืืื ื ืืืขืจืืงืขืจ-ืฉืืืืข ืคึผืจืึธืืึธืงืึธืืก: ื ืขืืืืึธืจืง ืฆืืื ืืืืขืจืืืื ืฉืืืกื ืขืงืกืืฉืึทื ืืข (NTS-KE), ืืืึธืก ืื ืืฉืืึทืฅ ืึท ืืืืขืจ ืคึฟืึทืจืืื ืืื ื ืืืืขืจ TLS, ืืื NTPv4, ืื ืืขืฆืืข ืื ืงืึทืจื ืืืฉืึทื ืคืื ืื NTP ืคึผืจืึธืืึธืงืึธื. ื ืืืกื ืืขืจ ืืืขืื ืืขื ืืื ืื.
ืขืจืฉืืขืจ ืืื ืข - NTS KE
ืืื ืืขื ืืื ืข, ืืขืจ NTP ืงืืืขื ื ืื ืืฉืืึทืฅ ืึท TLS 1.2 / 1.3 ืกืขืกืืข ืืืืขืจ ืึท ืืึทืืื ืืขืจ TCP ืคึฟืึทืจืืื ืืื ื ืืื ืื NTS KE ืกืขืจืืืขืจ. ืืขืฉืึทืก ืืขื ืกืขืกืืข ืื ืคืืืืขื ืืข ืืึทืคึผืึทื ื.
- ืื ืคึผืึทืจืืืขืก ืืึทืฉืืืืขื ืื ืคึผืึทืจืึทืืขืืขืจืก ืึทืืืขืจืืืึทื ืคึฟืึทืจ ืื ืจืืข ืืื ืข.
- ืื ืคึผืึทืจืืืขืก ืืขืคืื ืืจื ืึท ืฆืืืืื ื ืืืขืจืืงืขืจ-ืฉืืืืข ืคึผืจืึธืืึธืงืึธื, ืึธืืขืจ ืืขืจืืืืึทื ืืืืื NTPv4 ืืื ืืขืฉืืืฆื.
- ืื ืคึผืึทืจืืืขืก ืืึทืฉืืืืขื ืื IP ืึทืืจืขืก ืืื ืคึผืึธืจื ืคืื ืื NTP ืกืขืจืืืขืจ.
- NTS KE ืกืขืจืืืขืจ ืืฉืื ืงืืืืขื ืืื ืืขืจ NTPv4.
- ืื ืคึผืึทืจืืืขืก ืขืงืกืืจืึทืงื ืึท ืคึผืึธืจ ืคืื ืกืืืืขืืจืืง ืฉืืืกืืขื (C2S ืืื S2C) ืคืื ืื ืงืืื ืืึทืืขืจืืึทื.
ืืขืจ ืฆืืืึทื ื ืืื ืื ืืจืืืก ืืืึทืืข ืึทื ืื ืืื ืฆืข ืืึทืกืข ืคืื โโืืจืึทื ืกืืืืื ื ืกืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืงืฉืจ ืคึผืึทืจืึทืืขืืขืจืก ืคืืื ืืืืฃ ืื ืคึผืจืึธืืืขื ืืื ืคืึทืจืืึธืืืขื TLS ืคึผืจืึธืืึธืงืึธื. ืืึธืก ืืืืืึทื ืืืฅ ืื ื ืืื ืฆื ืจืืื ืืืขื ื ืืืื ืืืืืขื ืข ืจืึธื ืคึฟืึทืจ ืึท ืืืืขืจ NTP ืืึทื ืืฉืืืง.
ืฆืืืืืืข ืืื ืข - ื ืืคึผ ืืื ืืขืจ ื ืฅ ืฉืืฅ
ืืื ืื ืจืืข ืฉืจืื, ืืขืจ ืงืืืขื ื ืกืืงืืืจืื ืกืื ืืงืจืึทื ืืื ืื ืฆืืื ืืื ืื NTP ืกืขืจืืืขืจ. ืคึฟืึทืจ ืืขื ืฆืืืขืง, ืขืก ืืจืึทื ืกืืืฅ ืคืืจ ืกืคึผืขืฆืืขื ืืงืกืืขื ืฉืึทื ื (ืคืึทืจืืขื ืืขืจืื ื ืคืขืืืขืจ) ืืื ืื NTPv4 ืคึผืึทืงืึทื ืกืืจืืงืืืจ.
- ืื ืืื ืฆืืง ืืืขื ืืืคืืขืจ ืคืึทืจืืขื ืืขืจืื ื ืึผืืื ืึท ืืจืึทืค - ื ืื ืฆื ืคืึทืจืืืึทืื ืจืืคึผืืื ืื ืคืืื.
- NTS ืงืืื ืขืงืกืืขื ืกืืึธื ืึผืืื ืืืื ืขืจ ืคืื ืื NTP ืงืืืืขื ืื ืืืฆื ืฆื ืืขืจ ืงืืืขื ื. ืืื ื ืืืืื ืืขืจ ืงืืืขื ื ืืื ืื C2S ืืื S2C ืกืืืืขืืจืืง AAED ืฉืืืกืืขื, ืืขืจ NTP ืกืขืจืืืขืจ ืืืื ืขืงืกืืจืึทืงื ืืื ืคืื ืื ืงืืื ืืึทืืขืจืืึทื.
- NTS Cookie Placeholder Extension ืืื ืึท ืืืขื ืคึฟืึทืจ ืึท ืงืืืขื ื ืฆื ืืขืื ื ืึธื ืงืืืืขื ืคืื ืื ืกืขืจืืืขืจ. ืื ืคืึทืจืืขื ืืขืจืื ื ืืื ื ืืืืืง ืฆื ืขื ืฉืืจ ืึทื ืื NTP ืกืขืจืืืขืจ ืขื ืืคืขืจ ืืื ื ืืฉื ืคืื ืืขืจ ืืื ืื ืืขืื. ืืขื ืืขืืคื ืคืึทืจืืืึทืื ืึทืืคึผืืึทืคืึทืงืืืฉืึทื ืื ืคืืื.
- NTS ืึทืืืืขื ืืืงืึทืืึธืจ ืืื ืขื ืงืจืืคึผืืื ืขืงืกืืขื ืกืืึธื ืคืืขืืืก ืขืงืกืืขื ืกืืึธื ืึผืืื ืื AAED ืกืืืคืขืจ ืืื ืื C2S ืฉืืืกื, NTP ืืขืืขืจ, ืืืืขืกืืึทืืคึผืก ืืื ืื ืืืืื EF ืืื ืึทืงืึทืืคึผืึทื ืืื ื ืืึทืื. ืึธื ืืขื ืคืึทืจืืขื ืืขืจืื ื, ืขืก ืืื ืืขืืืขื ืฆื ืฉืืืื ืื ืืืืขืกืืึทืืคึผืก.
ืืืขื ืืขืจ ืกืขืจืืืืจืขืจ ืืึทืงืืืขื ืึท ืืงืฉื ืคืื ืึท ืงืืืขื ื, ืืขืจ ืกืขืจืืืขืจ ืืืขืจืึทืคืืื ืื ืึธืืึทื ืืืกืืื ืคืื ืื NTP ืคึผืึทืงืึทื. ืฆื ืืึธื ืืึธืก, ืขืจ ืืืื ืืขืงืจืืคึผื ืื ืงืืืืขื, ืขืงืกืืจืึทืงื ืื AAED ืึทืืืขืจืืืึทื ืืื ืฉืืืกืืขื. ื ืึธื ืืฆืืื ืงืึธื ืืจืึธืืืจืื ื ืื NTP ืคึผืึทืงืึทื ืคึฟืึทืจ ืืืืืืงืืึทื, ืืขืจ ืกืขืจืืืขืจ ืจืืกืคึผืึทื ืื ืฆื ืืขื ืงืืืขื ื ืืื ืื ืคืืืืขื ืืข ืคึฟืึธืจืืึทื.
- ืืื ืฆืืง ืืืขื ืืืคืืขืจ ืขืงืกืืขื ืกืืึธื ืืื ืึท ืฉืคึผืืื ืงืึธืคึผืืข ืคืื โโโโืืขื ืงืืืขื ื ืืขืื, ืึท ืืึธืก ืงืขืื ืจืืคึผืืื ืื ืคืืื.
- NTS ืงืืื ืขืงืกืืขื ืกืืึธื ืืขืจ ืงืืืืขื ืฆื ืคืึธืจืืขืฆื ืื ืกืขืกืืข.
- NTS Authenticator ืืื ืขื ืงืจืืคึผืืื ืขืงืกืืขื ืกืืึธื ืคืืขืืืก ืคืึทืจืืขื ืืขืจืื ื ืึผืืื ืื AEAD ืกืืืคืขืจ ืืื ืึท S2C ืฉืืืกื.
ืื ืฆืืืืืืข ืืึทื ืืฉืืืง ืงืขื ืขื ืืืื ืจืืคึผืืืื ืคืืืข ืืื, ืืืืคึผืึทืกืื ื ืืขืจ ืขืจืฉืืขืจ ืฉืจืื, ืืืืึทื ืืขืืขืจ ืืงืฉื ืืื ืขื ืืคืขืจ ืืื ืืขื ืงืืืขื ื ื ืึธื ืงืืืืขื. ืืึธืก ืืื ืื ืืืึทืืข ืึทื ืื ืืขืคืืขืจืขื ืืืื-ืืื ืืขื ืกืืืืข TLS ืึทืคึผืขืจืืืฉืึทื ื ืคืื ืงืึทืืคึผืืืืื ื ืืื ืืจืึทื ืกืืืืื ื PKI ืืึทืื ืืขื ืขื ืฆืขืืืืื ืืืจื ืื ื ืืืขืจ ืคืื ืจืืคึผืืืื ืจืืงืืืขืก. ืืึธืก ืืื ืกืคึผืขืฆืืขื ืืึทืงืืืขื ืคึฟืึทืจ ืกืคึผืขืฉืึทืืืืื ืคืคึผืืึท ืืืืขืงืขืขืคึผืขืจืก, ืืืขื ืึทืืข ืื ืืืืคึผื ืคืึทื ืืงืฉืึทื ืึทืืืื ืงืขื ืขื ืืืื ืคึผืึทืงืืืืฉื ืืื ืขืืืขืืข ืคืึทื ืืงืฉืึทื ื ืคึฟืื ืื ืคืขืื ืคืื ืกืืืืขืืจืืง ืงืจืืคึผืืึธืืจืึทืคื, ืืจืึทื ืกืคืขืจืื ื ืื ืืื ืฆืข TLS ืึธื ืืืืื ืฆื ืื ืื ืืขืจ ืืืื.
NTPSec
ืืืึธืก ืืื ืกืคึผืขืฆืืขื ืืืขืื NTP? ืืจืึธืฅ ืืขืจ ืคืึทืงื ืึทื ืืขืจ ืืืืจ ืคืื ืื ืคึผืจืืืขืงื, ืืืืื ืืืืืก, ืืขืคืจืืืื ืฆื ืืึธืงืืืขื ื ืืืื ืงืึธื ืืื ืืขืกืืขืจ ืืื ืืขืืืขื, ืขืก ืืื ืึท ืืขืืื ืคึผืจืึธืืจืึทืืืกื ืืืึธืก ืืืขื ืงืขื ืขื ืฆื ืคึฟืึทืจืฉืืืื ืื ืื ืืจืึทืงืึทืกืื ืคืื ืฆืืื ืกืื ืืงืจืึทื ืึทืืืืฉืึทื ืึทืืืขืจืืืึทืื ืืืึธืก ืืขื ืขื 35 ืืืจ ืึทืื. ืขืืืขืืข ืคืื โโืื ืงืึธื ืืื ืืขืืืขื ืืขืฉืจืืื ืืืืืขืจ ืื POSIX ืืงืืคืข, ืืื ืื Unix API ืืขืืึธืื ืืื ืืขืืืขื ืืืืขืจ ืึทื ืืขืจืฉ ืคืื ืืืึธืก ืืื ืืขื ืืฆื ืืืึทื ื. ืืื ืึทืืืฉืึทื, ืืืืกื ืคืื ืกืืึทืืืกืืืง ืืื ืืืจืฃ ืฆื ืืืกืืขืงื ืื ืกืืื ืึทื ืคืื ืื ืืขืจืคืืจืึทื ืก ืืืืฃ ืืืืืืืง ืฉืืจืืช.
NTS ืืื ื ืืฉื ืืขืจ ืขืจืฉืืขืจ ืคึผืจืืืื ืฆื ืคืึทืจืจืืืื NTP. ืึทืืึธื ืึทืืึทืงืขืจื ืืขืืขืจื ื ืฆื ืืืืืจืข NTP ืืืึทืื ืขืจืึทืืืืืืื ืฆื ืคืึทืจืืจืขืกืขืจื DDoS ืื ืคืืื, ืขืก ืืื ืืขืืืืจื ืงืืึธืจ ืึทื ืจืึทืืืงืึทื ืขื ืืขืจืื ืืขื ืืขื ืขื ืืืจืฃ. ืืื ืืฉืขืช ืื NTS ืืจืึทืคืฅ ืืขื ืขื ืืขืืืขื ืฆืืืขืืจืืื ืืื ืคืืื ืึทืืืืื, ืื ืื. ืขืก. ื ืึทืฉืึทื ืึทื ืืืืกื ืฉืึทืคึฟื ืืืืงืืคึผืขืืืข ืืื ืื ืกืืฃ ืคืื 2014 ืขืจืืืฉืึทื ืืื ืึทืืึทืงืืืืื ืึท ืฉืขื ืงืขื ืคึฟืึทืจ ืื ืืึธืืขืจื ืืืืจืื ื ืคืื NTP.
ืื ืึทืจืืขื ืืจืืคึผืข ืืื ืืขืืืขื ืืขืืึทื ื ืื ื ืึธืจ ืืืขืจ ืขืก ืื, ืึธืืขืจ - ืืืื ืขืจ ืคืื ืื ืืจืื ืืขืจืก ืืื ืคึผืืืขืจื ืคืื ืื ืขืคึฟื ืืงืืจ ืงืื ืืื ืืืืจ ืคืื ืืขื ืืื . ืืขืจ ืขืจืฉืืขืจ ืืึทื ืขืจืืง ืืื ืืืื ืคืจืขื ืื ืืขืคืจืืืื ืฆื ืืึธื ืืื ืฆื ืึทืจืืืขืจืคืืจื ืื NTP ืงืึธื ืคืื ืื BitKeeper ืคึผืืึทืืคืึธืจืืข ืฆื ืืื, ืึธืืขืจ ืืึธืก ืืื ื ืืฉื ืึทืืื. ืคึผืจืึธืืขืงื ืคืืจืขืจ Harlan Stenn ืืื ืืขืืืขื ืงืขืื ืืขื ืืึทืฉืืืก ืืื ื ืึทืืึธืืฉืืืืฉืึทื ื ืกืืึธืื. ืืขืจื ืึธื ืขืก ืืื ืืึทืฉืืึธืกื ืฆื ืืึธืคึผื ืื ืคึผืจืืืขืงื ืงืึธื, ืืื NTPSec ืืื ืืขืืืืจื.
ืืึทืจื ืืขืจืคืึทืจืื ื, ืึทืจืืึทื ืืขืจืขืื ื ืึทืจืืขื ืืืืฃ GPSD, ืึท ืืึทืืึทืืึทืืืงืึทื ืืื ืืขืจืืจืื ื ืืื ืื ืืึทืืืฉืืงืึทื ืืงืืขืก ืคืื ืืืืขื ืขื ืืืืข ืงืึธื - Eric Raymond ืืื ืืขืืืขื ืคึผืื ืงื ืืขืจ ืืขืงืขืจ ืืืึธืก ืงืขื ืฆืืขื ืึทืืืขืง ืึทืืึท ืึท ืคึผืจืืืขืงื. ืื ืืึทื ืฉืึทืคึฟื ืืขืคืื ืขื ืึท ืงืึธื ืืืืืจืืืฉืึทื ืืืืืข ืืื ืืื ืืืืื 10 ืืืึธืื NTP ืืืืฃ GitLab. ืื ืึทืจืืขื ืืื ืืขืืืขื ืืื ืคืื ืกืืืื ื.
ืืขืจ ืงืึธืืขืงืืืื ืคืื Eric Raymond ืืื ืืขื ืืืขื ืื ืึทืจืืขื ืืืืฃ ืื ืืขืืืข ืืืขื ืืื Auguste Rodin ืืื ืืขืืื ืืื ืึท ืืืึธืง ืคืื ืฉืืืื. ืืืจื ืจืืืืืืื ื 175 KLOC ืคืื ืึทืื ืงืึธื, ืืื ืืขื ืขื ืืืืืืช ืฆื ืืืืืืืืง ืจืขืืืฆืืจื ืื ืืึทืคืึทืื ืืืืขืจืคืืึทื ืืืจื ืงืืึธืืืื ื ืคืืืข ืืืืขืจืืืื ืืึธืืขืก.
ืืึธ ืืื ืึท ืืขืจืขื ืืืงื ืจืฉืืื ืคืื ืื ืึทืจืืึทื ืืขืจืขืื ื ืืื ืื ืคืึทืจืฉืคึผืจืืืืื ื:
- ืึทื ืืึทืงืืึทืืขื ืื, ืึทืืืืืืืื, ืึทืืืืืืืื ืึธืืขืจ ืฆืขืืจืืื ืจืขืงืืึธืงืง.
- ืึทื ืืืื ICS ืืืืืืึธืืขืง.
- ืืืืึธืคึผืฅ / ืึทืืืึธืืขื.
- ืึทืื ืงืึธื ืคึฟืึทืจ ืืืื ืืึธืื.
- ntpdc.
- ืึทืืืึธืงืื.
- ืื ntpq C ืงืึธื ืืื ืจืืจืืืึทื ืืื ืคึผืืืืึธื.
- ืื sntp/ntpdig C ืงืึธื ืืื ืจืืจืืืึทื ืืื ืคึผืืืืึธื.
ืืื ืืขืจืฆื ืฆื ืจืืื ืืงืื ื ืื ืงืึธื, ืื ืคึผืจืืืขืงื ืืื ืื ืืขืจืข ืืึทืกืงืก. ืืึธ ืืื ืึท ืืืืืืืืึทื ืจืฉืืื ืคืื ืืขืจืืจืืืืื ืืขื:
- ืงืึธื ืฉืืฅ ืงืขืื ืืึทืคืขืจ ืึธืืืืขืจืคืืึธื ืืื ืืืืืืืืง ืืืคึผืจืืืื. ืฆื ืคืึทืจืืืึทืื ืืึทืคืขืจ ืึธืืืืขืจืคืืึธืื, ืึทืืข ืึทื ืกืืืฃ ืฉืืจืืงื ืคืึทื ืืงืฉืึทื ื (strcpy/strcat/strtok/sprintf/vsprintf/gets) ืืึธืื ืฉืืื ืจืืคึผืืืืกื ืืื ืืืืขืจ ืืืขืจืกืืขืก ืืืึธืก ืื ืกืืจืืืขื ื ืืึทืคืขืจ ืืจืืืก ืืืืึทืฅ.
- ืฆืืืขืืขืื NTS ืฉืืืฆื.
- ืืืคึผืจืืืื ืฆืืื ืฉืจืื ืึทืงืืขืจืึทืกื ืืขื ืคืึธืืื ืืืจื ืคึฟืึทืจืืื ืืื ื ืคืื ืืฉืืืืช ืืึทืื ืืืึทืจื. ืืึธืก ืืื ืจืขืื ืฆื ืืขื ืคืึทืงื ืึทื ืืึธืืขืจื ืงืึธืืคึผืืืืขืจ ืงืืึทืงืก ืืึธืื ืืืขืจื ืคืื ืืขืจ ืคึผืื ืืืขื ืืื ืื ืืืขื NTP ืืื ืืขืืืืจื. ืื ืืืืึทืกื ืืขื ืึทืคืืฉืืขืจืื ืคืื ืืขื ืืขื ืขื GPSDO ืืื ืืขืืึทืงืืืืึทื ืฆืืื ืจืึทืืืึธืก.
- ืื ื ืืืขืจ ืคืื ืคึผืจืึธืืจืึทืืืื ื ืฉืคึผืจืึทืื ืืื ืจืืืืกื ืฆื ืฆืืืื. ืึทื ืฉืืึธื ืคึผืขืจื, awk ืืื ืืคืืื S ืกืงืจืืคึผืก, ืขืก ืืื ืืืฆื ืึทืืข ืคึผืืืืึธื. ืจืขืื ืฆื ืืขื, ืขืก ืืขื ืขื ืืขืจ ืึทืคึผืขืจืืื ืึทืืื ืคึฟืึทืจ ืงืึธื ืจืืืืก.
- ืึทื ืฉืืึธื ืืึธืงืฉื ืคืื ืึทืืืึธืืึธืึธืืก ืกืงืจืืคึผืก, ืื ืคึผืจืืืขืงื ืื ืืขืืืืื ืฆื ื ืืฆื ืึท ืืืืืืืืืจื ืืืืขื ืกืืกืืขื .
- ืืขืจืืืึทื ืืืงื ืืื ืจืืึธืจืืึทื ืืืื ืคึผืจืืืขืงื ืืึทืงืืืืขื ืืืืฉืึทื. ืคึฟืื ืึท ืงืึทื ืืจืึทืืืงืืขืจื ืืื ืืืื ืืึธื ืึทืจืืฉืึทืืง ืืึทืืืื ื ืคืื ืืึธืงืืืขื ืื, ืืื ืืืฉืืคื ืืึทื ืฅ ืคึผืึทืกืืง ืืึทืงืืืืขื ืืืืฉืึทื. ืืขืืขืจ ืืึทืคึฟืขื ืฉืืจื ืืึทืฉืืืืขื ืืื ืืขืืขืจ ืงืึทื ืคืืืืขืจืืืฉืึทื ืขื ืืืื ืืืฆื ืืื ืึท ืืืื ืืืขืจืกืืข ืคืื โโโโืืืช. ืึทืืืืืืึธื ืึทืืื, ืืขื ืืฉ ืืืขืืขืจ ืืื ืืืขื ืืึทืงืืืืขื ืืืืฉืึทื ืืขื ืขื ืืืฆื ืืืฉืืคื ืคืื ืื ืืขืืืข ืืึทืจืฅ ืืขืงืขืก.
NTPSec ืืื ืื ืืืฆื ืคึฟืึทืจ ืึท ื ืืืขืจ ืคืื ืืื ืืงืก ืืืกืืจืืืืืฉืึทื ื. ืืื ืืขืจ ืืึธืืขื ื, ืื ืืขืฆืืข ืกืืึทืืื ืืืขืจืกืืข ืืื 1.1.8, ืคึฟืึทืจ Gentoo Linux ืขืก ืืื ืื ืคึผืขื ืึทืืืึทืืึทื ืืืขืจืกืืข.
(1:696)$ sudo emerge -av ntpsec
These are the packages that would be merged, in order:
Calculating dependencies... done!
[ebuild R ] net-misc/ntpsec-1.1.7-r1::gentoo USE="samba seccomp -debug -doc -early -gdb -heat -libbsd -nist -ntpviz -rclock_arbiter -rclock_generic -rclock_gpsd -rclock_hpgps -rclock_jjy -rclock_local -rclock_modem -rclock_neoclock -rclock_nmea -rclock_oncore -rclock_pps -rclock_shm -rclock_spectracom -rclock_trimble -rclock_truetime -rclock_zyfer -smear -tests" PYTHON_TARGETS="python3_6" 0 KiB
Total: 1 package (1 reinstall), Size of downloads: 0 KiB
Would you like to merge these packages? [Yes/No]
ืืจืึธื ืืฉ
ืขืก ืืื ืืขืืืขื ืื ืื ืืขืจ ืคึผืจืืืื ืฆื ืคืึทืจืืืึทืื ืื ืึทืื NTP ืืื ืึท ืืขืจ ืืืืขืจ ืื ืืขืจ ืืจืืจื. Chrony, ื ืื ืขื ืืขื NTPSec, ืืื ืืขืฉืจืืื ืคึฟืื ืืขืจ ืขืจื ืึทืจืืืฃ ืืื ืืื ืืืืืื ื ืฆื ืึทืจืืขืื ืจืืืืืึทืืื ืืื ืืขืจ ืึท ืืจืืื ืงืืื ืคืื ืื ืึธืื, ืึทืจืืึทื ืืขืจืขืื ื ืึทื ืกืืืืืึทื ื ืขืฅ ืงืึทื ืขืงืฉืึทื ื, ืคึผืึทืจืืืืืฉ ื ืขืฅ ืึทืืืืืืึทืืืืึทืื ืึธืืขืจ ืงืึทื ืืืฉืขืกืืฉืึทื ืืื ืืขืืคึผืขืจืึทืืืจ ืขื ืืขืจืื ืืขื. ืืื ืืขืจืฆื, ืืจืึธื ืืฉ ืืื ืื ืืขืจืข ืึทืืืืึทื ืืืืืฉืื:
- ืืจืึธื ื ืงืขื ืขื ืกืื ืืงืจืึทื ืืื ืื ืกืืกืืขื ืืืืืขืจ ืคืึทืกืืขืจ ืืื ืืจืขืกืขืจืข ืึทืงืืขืจืึทืกื;
- Chrony ืืื ืงืืขื ืขืจืขืจ, โโโโืงืึทื ืกืืื ืืืืื ืืงืขืจ ืืึผืจืื ืืื ืึทืงืกืขืก ืื ืงืคึผื ืืืืื ืืืขื ืืืจืฃ. ืืึธืก ืืื ืึท ืืจืืืก ืคึผืืืก ืคึฟืึทืจ ืฉืคึผืึธืจื ืจืขืกืืจืกื ืืื ืขื ืขืจืืืข;
- ืืจืึธื ื ืฉืืืฆื ืืึทืื ืืืึทืจื ืืืืขืกืืึทืืคึผืก ืืืืฃ ืืื ืืงืก, ืึทืืึทืืื ื ืืึธืจ ืคึผืื ืืืขื ืกืื ืืงืจืึทื ืึทืืืืฉืึทื ืืืืฃ ืืืืข ื ืขืืืืึธืจืงืก.
ืึธืืขืจ, ืืจืึธื ืืฉ ืคืขืื ืขืืืขืืข ืคืื โโืื ืคึฟืขืึดืงืืืื ืคืื ืื ืึทืื NTP, ืึทืืึท ืืื ืืจืึธืืงืึทืกื ืืื ืืืืืืงืึทืกื ืงืืืขื ื / ืกืขืจืืืขืจ. ืืื ืึทืืืฉืึทื, ืงืืึทืกืืฉ NTP ืฉืืืฆื ืึท ืืจืขืกืขืจืข ื ืืืขืจ ืคืื ืึธืคึผืขืจืืืืื ื ืกืืกืืขืืขื ืืื ืคึผืืึทืืคืึธืจืืก.
ืฆื ืืืกืืืืึทื ืื ืคืึทื ืืงืฉืึทื ืึทืืืื ืคืื ืื ืกืขืจืืืขืจ ืืื ื ืืคึผ ืจืืงืืืขืก ืฆื ืื chronyd ืคึผืจืึธืฆืขืก, ื ืึธืจ ืฉืจืืึทืื ืคึผืึธืจื 0 ืืื ืื chrony.conf ืืขืงืข. ืืึธืก ืืื ืืขืืื ืืื ืงืึทืกืขืก ืืื ืขืก ืืื ื ืื ืืึทืจืคึฟื ืฆื ืืึทืืื ืฆืืื ืคึฟืึทืจ NTP ืงืืืืึทื ืฅ ืึธืืขืจ ืคึผืืจื. ืืื ื ืืืขืจืกืืข 2.0, ืื NTP ืกืขืจืืืขืจ ืคึผืึธืจื ืืื ืึธืคื ืืืืื ืืืขื ืึทืงืกืขืก ืืื ืขืจืืืืื ืืืจื ืึท ืืึธืื ืืืจืขืงืืืื ืึธืืขืจ ืฆืื ืขืืขื ืืึทืคึฟืขื, ืึธืืขืจ ืึท NTP ืืึทื ืงืืงื ืืื ืงืึทื ืคืืืืขืจื, ืึธืืขืจ ืึท ืืจืึธืืงืึทืกื ืืืจืขืงืืืื ืืื ืืขื ืืฆื.
ืืขืจ ืคึผืจืึธืืจืึทื ืืืฉืืืื ืคืื ืฆืืืื ืืึทืืืฉืืื.
- chronyd ืืื ืึท ืืื ืกื ืืืึธืก ืืืืคื ืืื ืืขืจ ืืื ืืขืจืืจืื ื. ืขืก ืืืงืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื ืืืืืง ืฆืืืืฉื ืื ืกืืกืืขื ืืืืืขืจ ืืื ืื ืคืื ืืจืืืกื ืืืง ืฆืืื ืกืขืจืืืขืจ ืืื ืึทืืืฉืึทืกืืื ืื ืืืืข ืฆืืื. ืขืก ืืืื ืืืคึผืืึทืืึทื ืฅ ืื NTP ืคึผืจืึธืืึธืงืึธื ืืื ืงืขื ืขื ืฉืคึผืืื ืืื ืึท ืงืืืขื ื ืึธืืขืจ ืกืขืจืืืขืจ.
- chronyc ืืื ืึท ืืึทืคึฟืขื ืฉืืจื ื ืืฆื ืคึฟืึทืจ ืคึผืจืึธืืจืึทื ืืึธื ืืืึธืจืื ื ืืื ืงืึธื ืืจืึธื. ืืขืืืืื ื ืฆื ืคืืื-ืืื ืคืึทืจืฉืืื ืกืขืจืืืืก ืคึผืึทืจืึทืืขืืขืจืก, ืืืฉื ืึทืืึทืืื ื ืืืจ ืฆื ืืืืื ืึธืืขืจ ืืึทืืืึทืืืงื NTP ืกืขืจืืืขืจืก ืืฉืขืช Chronyd ืืืื ืฆื ืืืืคื.
ืืื ื ืืืขืจืกืืข 7 ืคืื RedHat Linux Chrony ืืื ืึท ืฆืืื ืกืื ืืงืจืึทื ืึทืืืืฉืึทื ืืื ืกื. ืืขืจ ืคึผืขืงื ืืื ืืืื ืื ืืืฆื ืคึฟืึทืจ ืื ืืขืจืข ืืื ืืงืก ืืืกืืจืืืืืฉืึทื ื. ืื ืืขืฆืืข ืกืืึทืืื ืืืขืจืกืืข ืืื 3.5, ืคึผืจืืคึผืขืจืื ื ืคึฟืึทืจ ืื ืืขืืืื ื ืคืื ืื4.0.
(1:712)$ sudo emerge -av chrony
These are the packages that would be merged, in order:
Calculating dependencies... done!
[binary N ] net-misc/chrony-3.5-r2::gentoo USE="adns caps cmdmon ipv6 ntp phc readline refclock rtc seccomp (-html) -libedit -pps (-selinux)" 246 KiB
Total: 1 package (1 new, 1 binary), Size of downloads: 246 KiB
Would you like to merge these packages? [Yes/No]
ืืื ืฆื ืฉืืขืื ืืืื ืืืืืขื ืข ืืืืึทื ืืจืึธื ืืฉ ืกืขืจืืืขืจ ืืืืฃ ืืขืจ ืืื ืืขืจื ืขืฅ ืฆื ืกืื ืืงืจืึทื ืืื ืฆืืื ืืืืฃ ืึทื ืึธืคืืก ื ืขืฅ. ืื ืืขืจ ืืื ืึท ืืืืฉืคึผืื ืคืื ืืึทืฉืืขืืืงื ืึท VPS.
ืืืึทืฉืคึผืื ืคืื ืืึทืฉืืขืืืงื Chrony ืืืืฃ RHEL / CentOS ืืืืฃ VPS
ืืึธืืืจ ืืืฆื ืคืืจ ืึท ืืืกื ืืื ืฉืืขืื ืืื ืืืขืจ ืืืืืขื ืข NTP ืกืขืจืืืขืจ ืืืืฃ ืึท ืืืคึผืก. ืขืก ืืื ืืืืขืจ ืคึผืฉืื, ื ืึธืจ ืงืืืึทืื ืื ืฆืื ืขืืขื ืฆืึธื ืืืืฃ ืื RuVDS ืืืขืืืืืื, ืืึทืงืืืขื ืึท ืคืึทืจืืืง ืกืขืจืืืขืจ ืืื ืึทืจืืึทื ืึท ืืืฅ ืคึผืฉืื ืงืึทืืึทื ืื. ืคึฟืึทืจ ืืื ืืืขืจ ืฆืืืขืงื, ืืขื ืึธืคึผืฆืืข ืืื ืืึทื ืฅ ืคึผืึทืกืืง.
ืืึธืืืจ ืคืึธืจืืขืฆื ืฆื ืืึทืฉืืขืืืงื ืื ืกืขืจืืืืก ืืื ืขืจืฉืืขืจ ืื ืกืืึทืืืจื ืื Chrony ืคึผืขืงื.
[root@server ~]$ yum install chronyRHEL 8 / CentOS 8 ื ืืฆื ืึท ืึทื ืืขืจืฉ ืคึผืขืงื ืคืึทืจืืืึทืืืขืจ.
[root@server ~]$ dnf install chronyื ืึธื ืื ืกืืึธืืื ื Chrony, ืืืจ ืืึทืจืคึฟื ืฆื ืึธื ืืืืื ืืื ืึทืงืืึทืืืืื ืื ืืื ืกื.
[root@server ~]$ systemctl enable chrony --nowืืืื ืืขืืืืื, ืืืจ ืงืขื ืขื ืืึทืื ืขื ืืขืจืื ืืขื ืฆื /etc/chrony.conf, ืจืืคึผืืืืกืื ื NPT ืกืขืจืืืขืจืก ืืื ืื ื ืืจืึทืกื ืืืืข ืึธื ืขืก ืฆื ืจืขืืืฆืืจื ืขื ืืคืขืจ ืฆืืื.
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
server 0.ru.pool.ntp.org iburst
server 1.ru.pool.ntp.org iburst
server 2.ru.pool.ntp.org iburst
server 3.ru.pool.ntp.org iburst
ืืขืจื ืึธื, ืืืจ ืฉืืขืื ืื ืกืื ืืงืจืึทื ืึทืืืืฉืึทื ืคืื ืื NTP ืกืขืจืืืขืจ ืืื ื ืึธืืื ืคืื ืื ืกืคึผืขืกืืคืืขื ืืขืงื.
[root@server ~]$ timedatectl set-ntp true
[root@server ~]$ systemctl restart chronyd.service
ืขืก ืืื ืืืื ื ืืืืืง ืฆื ืขืคึฟืขื ืขื ืื NTP ืคึผืึธืจื ืฆื ืื ืึทืจืืืก, ืึทื ืืขืจืฉ ืื ืคืืืจืืืึทื ืืืขื ืคืึทืจืฉืคึผืึทืจื ืื ืงืึทืืื ื ืงืึทื ืขืงืฉืึทื ื ืคืื ืงืืืขื ื ื ืึธืืื.
[root@server ~]$ firewall-cmd --add-service=ntp --permanent
[root@server ~]$ firewall-cmd --reload
ืืืืฃ ืืขืจ ืงืืืขื ื ืืืึทื, ืขืก ืืื ืืขื ืื ืฆื ืฉืืขืื ืื ืฆืืื ืืึธื ืข ืจืืืืืง.
[root@client ~]$ timedatectl set-timezone Europe/Moscowืื /etc/chrony.conf ืืขืงืข ืกืคึผืขืฆืืคืืฆืืจื ืื IP ืึธืืขืจ ืืึทืืขืืึธืก ื ืึธืืขื ืคืื ืืื ืืืขืจ ืืืคึผืก ืกืขืจืืืขืจ ืคืืืกื ืืืง ื ืืคึผ ืกืขืจืืืขืจ ืืจืึธื ื.
server my.vps.serverืืื ืืขืกืึธืฃ, ืกืืึทืจืืื ื ืฆืืื ืกืื ืืงืจืึทื ืึทืืืืฉืึทื ืืืืฃ ืืขื ืงืืืขื ื.
[root@client ~]$ systemctl enable --now chronyd
[root@client ~]$ timedatectl set-ntp true
ืืืืึทืืขืจ ืืึธื ืืื ืืืขื ืืึธืื ืืืจ ืืืึธืก ืึธืคึผืฆืืขืก ืขืก ืืขื ืขื ืคึฟืึทืจ ืกืื ืืงืจืึทื ืืืืื ื ืฆืืื ืึธื ืื ืืื ืืขืจื ืขื.
ืืงืืจ: www.habr.com
