RFC 4075

Simple Network Time Protocol (SNTP) Configuration Option for DHCPv6

πŸ“… published May 2005, from ietf

RFC 4075: Simple Network Time Protocol (SNTP) Configuration Option for DHCPv6 πŸŽ€

okay bestie, here's the header info πŸ“‹βœ¨ This is RFC 4075, from the Network Working Group, and it's a Standards Track doc, so it's an actual protocol spec πŸ’…. It was written by V. Kalusivalingam (full name Vijayabhaskar A. Kalusivalingam) at Cisco Systems (India) Private Limited, and it came out in May 2005 🌸. The header doesn't list any RFCs it obsoletes or updates, so it's standing on its own πŸ¦‹

Status of This Memo 🧾

okay so this doc is an Internet standards track protocol for the Internet community, and the authors are literally asking for discussion and suggestions for improvements 🫢 If you want the current standardization state of this protocol, check the "Internet Official Protocol Standards" (STD 1) πŸ“š The distribution of this memo is unlimited, so share it with everyone πŸ’–

Copyright (C) The Internet Society (2005). That's the whole tea β˜•

Abstract ✨

this doc describes a brand new DHCPv6 option πŸŽ€ Its job is passing a list of Simple Network Time Protocol (SNTP) server addresses over to a client, so the client knows where to get the time 🧚

1. Introduction 🌈

so the new option is called the SNTP [3] servers option, and it's how you pass info about SNTP servers in DHCPv6 [1] πŸ’œ That's the whole plot!

2. Requirements πŸ“

the keywords MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT, SHOULD, SHOULD NOT, RECOMMENDED, MAY, and OPTIONAL, when they show up in this doc, are to be read the way RFC 2119 [2] describes πŸ”₯

3. Terminology πŸ“–

this doc uses IPv6 and DHCPv6 terminology, as defined in the "Terminology" section of the DHCPv6 specification [1] πŸ“ no new vocab, just the usual suspects

4. Simple Network Time Protocol (SNTP) Servers Option ⏰

the SNTP servers option gives the client a list of one or more IPv6 addresses of SNTP [3] servers it can use for synchronization 🫧 Clients use these servers to sync their system time to the standard time servers, and honestly it's giving precision πŸ’…

Here's the vibe check on the list: Clients MUST treat the list of SNTP servers as an ordered list. The server MAY list the SNTP servers in decreasing order of preference. So the order matters, and the server gets to decide how it's sorted πŸ‘‘

this option can ONLY configure SNTP servers you can reach over IPv6. The DHCP option for IPv4 SNTP servers is in RFC 2132 [4] πŸ™ˆ And mechanisms for IPv4/IPv6 dual-stack apps are being considered, but this doc doesn't specify them yet

The format of the SNTP servers option looks like this πŸ§šβ€β™€οΈ

    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |      OPTION_SNTP_SERVERS       |        option-len            |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                  SNTP server (IPv6 address)                   |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                  SNTP server (IPv6 address)                   |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                              ...                              |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

the fields, bestie πŸŽ€

  • option-code: OPTION_SNTP_SERVERS (31)
  • option-len: the length of the 'SNTP server' fields, in octets. It must be a multiple of 16 πŸ”’
  • SNTP server: the IPv6 address of the SNTP server 🌐

5. Appearance of This Option 🚦

the SNTP servers option MUST NOT show up in messages other than these: Solicit, Advertise, Request, Renew, Rebind, Information-Request, and Reply. If it does appear in any other messages, the receiver SHOULD ignore it πŸ™…β€β™€οΈ

the option number for this option MAY appear in the Option Request Option [1] in these messages: Solicit, Request, Renew, Rebind, Information-Request, and Reconfigure. If the option number shows up in the Option Request Option in any other messages, the receiver SHOULD ignore it πŸ’€

6. Security Considerations πŸ”

okay this section is serious, so listen up 🚨 The SNTP servers option could be abused by an intruder DHCPv6 server to make DHCPv6 clients contact a rogue SNTP server. That leads to invalid time synchronization on the client, and then time-critical apps on that machine run inaccurately 😱 Time accuracy can be crucial for some security algorithms. For example, expired certificates may gain a new life, which makes the apps on the client machine less secure. The inaccuracy can even make clients set their time incorrectly, leaving them open to replay attacks in protocols that use timestamps to detect replays πŸ₯€

so to avoid attacks through this option, the DHCPv6 client SHOULD use authenticated DHCPv6 (see the "Authentication of DHCP messages" section in the DHCPv6 specification [1]) πŸ”’ this is a must-do, no cap 🫢

7. IANA Considerations πŸ—‚οΈ

the IANA has assigned an option code from the option-code space defined in the "DHCPv6 Options" section of the DHCPv6 specification [1] ✨

Option Name            Value    Described in
OPTION_SNTP_SERVERS    31       Section 4.

8. Acknowledgements πŸ’Œ

big thank yous to the DHC Working Group for their time and input on the spec πŸ₯° Specifically, thanks in alphabetical order to Bernie Volz, Jim Bound, Margaret Wasserman, Pekka Savola, Ralph Droms, Robert Elz, and Thomas Narten for their thorough review πŸ‘‘

9. Normative References πŸ“š

  • [1] Droms, R., Bound, J., Volz, B., Lemon, T., Perkins, C., and M. Carney, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6)", RFC 3315, July 2003.
  • [2] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.

10. Informative References πŸ’œ

  • [3] Mills, D., "Simple Network Time Protocol (SNTP) Version 4 for IPv4, IPv6 and OSI", RFC 2030, October 1996.
  • [4] Alexander, S. and R. Droms, "DHCP Options and BOOTP Vendor Extensions", RFC 2132, March 1997.

Author's Address 🏑

Vijayabhaskar A. Kalusivalingam
Cisco Systems (India) Private Limited,
No: 9, Brunton Road,
Bangalore - 560025
India

Phone: +91-80-51036615
EMail: vibhaska@cisco.com

Copyright (C) The Internet Society (2005).

this doc is subject to the rights, licenses and restrictions in BCP 78, and except as set out there, the authors keep all their rights πŸ¦‹

this document and the info in it are provided on an "AS IS" basis, and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

Intellectual Property πŸ’Ό

the IETF takes no position on the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this doc, or on whether any license under those rights might or might not be available. It also doesn't claim to have made any independent effort to find such rights. Info on how rights in RFC docs are handled is in BCP 78 and BCP 79 πŸ“œ

copies of IPR disclosures made to the IETF Secretariat, any assurances of licenses to be made available, or the result of an attempt to get a general license or permission for implementers or users of this spec can be found in the IETF on-line IPR repository at http://www.ietf.org/ipr πŸ”—

the IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology required to implement this standard. Send that info to the IETF at ietf-ipr@ietf.org πŸ“¨

Acknowledgement 🫢

Funding for the RFC Editor function is currently provided by the Internet Society πŸ’–

πŸ“¦ where this page comes from