ntp.dws.rip

Public NTP with NTS authentication. Stratum 2, synced to Netnod stratum 1 atomic clocks. Nine nodes across five countries. No logging, no PII.

IPv4 anycast: 157.254.184.123 · IPv6 anycast: 2602:f4e8::123

Servers

All nine nodes serve NTP, NTS-KE on 4460/tcp, and run chrony in stratum 2.

NodeIPv4Location
UK-0191.208.92.70United Kingdom
SK-0291.242.163.112Slovakia
US-04173.199.127.44United States
US-0572.60.69.179United States
US-07108.165.123.31United States
US-08136.0.41.84United States
EU-10118.91.187.140Netherlands
NL-1145.157.118.160Netherlands
FR-12185.10.17.176France

Connect

ProtocolAddressPort
Anycast NTP157.254.184.123123/udp
Anycast IPv62602:f4e8::123123/udp
NTSntp.dws.rip4460/tcp (NTS-KE)
Roughtimetime.dws.rip2002/udp

BGP anycast: your query goes to the nearest node automatically.

Setup

Linux (chrony — recommended)

# /etc/chrony/conf.d/dws.conf
server ntp.dws.rip iburst nts

$ sudo systemctl restart chronyd  then  chronyc tracking. Or use the anycast IP directly: server 157.254.184.123 iburst

Linux (systemd-timesyncd)

# /etc/systemd/timesyncd.conf
[Time]
NTP=ntp.dws.rip
FallbackNTP=157.254.184.123

macOS

System Settings > General > Date & Time > Set time server: ntp.dws.rip

Windows

Settings > Time & Language > Date & Time > Internet Time > Server: ntp.dws.rip

Router

System > NTP Server: ntp.dws.rip or 157.254.184.123

NTS (Network Time Security)

NTS authenticates NTP responses, preventing MITM attacks. Requires chrony 4.0+: server ntp.dws.rip nts. NTS-KE runs on 4460/tcp on all nine nodes. Certificate: ntp.dws.rip (Let's Encrypt, auto-renewed).

Roughtime

Authenticated time with cryptographic proof. DWS is one of the few public Roughtime operators — roughenough v2 (draft 14) runs on seven nodes, port 2002/udp:

91.208.92.70 (UK-01) · 72.60.69.179 (US-05) · 173.199.127.44 (US-04) · 118.91.187.140 (EU-10) · 45.157.118.160 (NL-11) · 185.10.17.176 (FR-12) · 108.165.123.31 (US-07)

The time.dws.rip anycast address does not yet forward port 2002 — upstream fabric limitation, provider ticket open — so target the node addresses directly for now.

Infrastructure

IPv4 and IPv6 anycast announced via BGP from four edge speakers. Chrony on all nine nodes: stratum 2, NTS server mode. Upstreams: Netnod stratum 1, DFM Denmark, Cloudflare. Roughenough on seven nodes, 2002/udp.