# Fine tuning ntp.conf

**URL:** <https://community.ntppool.org/t/fine-tuning-ntp-conf/1227>\
**Category:** Server operators\
**Created:** [April 27, 2019, 2:27pm UTC](https://community.ntppool.org/t/fine-tuning-ntp-conf/1227 "2019-04-27T14:27:00Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![bogdan.jeliskoski](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/bogdan.jeliskoski/32/364_2.png) [@bogdan.jeliskoski](https://community.ntppool.org/u/bogdan.jeliskoski)\
**Post date:** [April 27, 2019, 2:27pm UTC](https://community.ntppool.org/t/fine-tuning-ntp-conf/1227/1 "2019-04-27T14:27:00Z")

</div>

Hi guys,

This is my config file for my NTP Stratum 2 server. Any suggestion for fine tuning will be appreciated.

```auto
# Record the frequency of the system clock.
driftfile /var/lib/ntp/drift

# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default nomodify notrap nopeer noepeer noquery

# Permit association with pool servers.
restrict source nomodify notrap noepeer noquery

# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict ::1

# Hosts on local network are less restricted.
restrict 10.10.10.0 mask 255.255.255.0 nomodify notrap
restrict -4 default kod noquery nomodify notrap nopeer limited
restrict -6 default kod noquery nomodify notrap nopeer limited

# Use public servers from the [pool.ntp.org](http://pool.ntp.org) project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
#server [ntp.svilengrad.eu](http://ntp.svilengrad.eu) iburst
#server [ntp.fizyka.umk.pl](http://ntp.fizyka.umk.pl) iburst
server [ntp.bsdbg.net](http://ntp.bsdbg.net) iburst
server [ptbtime1.ptb.de](http://ptbtime1.ptb.de) iburst
server [zeit.fu-berlin.de](http://zeit.fu-berlin.de) iburst
server [ntp0.fau.de](http://ntp0.fau.de) iburst

# Reduce the maximum number of servers used from the pool.
tos maxclock 5

# Enable public key cryptography.
#crypto

includefile /etc/ntp/crypto/pw

# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys

# Specify the key identifiers which are trusted.
#trustedkey 4 8 42

# Specify the key identifier to use with the ntpdc utility.
#requestkey 8

# Specify the key identifier to use with the ntpq utility.
#controlkey 8

# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats
```

---

<div class="post-metadata">

**Author:** ![mnordhoff](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/mnordhoff/32/1470_2.png) [@mnordhoff](https://community.ntppool.org/u/mnordhoff)\
**Post date:** [April 27, 2019, 4:56pm UTC](https://community.ntppool.org/t/fine-tuning-ntp-conf/1227/2 "2019-04-27T16:56:20Z")

</div>

> [@bogdan.jeliskoski](#):
>
> `restrict default nomodify notrap nopeer noepeer noquery`

> [@bogdan.jeliskoski](#):
>
> `restrict -4 default kod noquery nomodify notrap nopeer limited`  
> `restrict -6 default kod noquery nomodify notrap nopeer limited`

Those are redundant – and not the same.

---

<div class="post-metadata">

**Author:** ![HansMayer](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/hansmayer/32/95_2.png) [@HansMayer](https://community.ntppool.org/u/HansMayer)\
**Post date:** [April 27, 2019, 8:52pm UTC](https://community.ntppool.org/t/fine-tuning-ntp-conf/1227/3 "2019-04-27T20:52:33Z")

</div>

No own stratum-1 server ?  
Although it’s so easy. For example with an GPS module and a RasperryPi. There are a lot of examples in the network. Or as I have done with a BananaPi and a rubidium source. [http://blog.mayer.tv/2017/06/11/stratum-0-server.html](http://blog.mayer.tv/2017/06/11/stratum-0-server.html)

But independant, congratulation. Each server in the pool is a win. ( Hopefully it is in the pool 🙂 )

// Hans

---

<div class="post-metadata">

**Author:** ![bogdan.jeliskoski](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/bogdan.jeliskoski/32/364_2.png) [@bogdan.jeliskoski](https://community.ntppool.org/u/bogdan.jeliskoski)\
**Post date:** [April 27, 2019, 10:46pm UTC](https://community.ntppool.org/t/fine-tuning-ntp-conf/1227/4 "2019-04-27T22:46:52Z")

</div>

Thank you for the feedback. I will check the links