RFC 4075
Simple Network Time Protocol (SNTP) Configuration Option for DHCPv6
RFC 4075: Simple Network Time Protocol (SNTP) Configuration Option for DHCPv6 π
okay bestie, here's the header info πβ¨ This is RFC 4075, from the Network Working Group, and it's a Standards Track doc, so it's an actual protocol spec π . It was written by V. Kalusivalingam (full name Vijayabhaskar A. Kalusivalingam) at Cisco Systems (India) Private Limited, and it came out in May 2005 πΈ. The header doesn't list any RFCs it obsoletes or updates, so it's standing on its own π¦
Status of This Memo π§Ύ
okay so this doc is an Internet standards track protocol for the Internet community, and the authors are literally asking for discussion and suggestions for improvements π«Ά If you want the current standardization state of this protocol, check the "Internet Official Protocol Standards" (STD 1) π The distribution of this memo is unlimited, so share it with everyone π
Copyright Notice Β©οΈ
Copyright (C) The Internet Society (2005). That's the whole tea β
Abstract β¨
this doc describes a brand new DHCPv6 option π Its job is passing a list of Simple Network Time Protocol (SNTP) server addresses over to a client, so the client knows where to get the time π§
1. Introduction π
so the new option is called the SNTP [3] servers option, and it's how you pass info about SNTP servers in DHCPv6 [1] π That's the whole plot!
2. Requirements π
the keywords MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT, SHOULD, SHOULD NOT, RECOMMENDED, MAY, and OPTIONAL, when they show up in this doc, are to be read the way RFC 2119 [2] describes π₯
3. Terminology π
this doc uses IPv6 and DHCPv6 terminology, as defined in the "Terminology" section of the DHCPv6 specification [1] π no new vocab, just the usual suspects
4. Simple Network Time Protocol (SNTP) Servers Option β°
the SNTP servers option gives the client a list of one or more IPv6 addresses of SNTP [3] servers it can use for synchronization π«§ Clients use these servers to sync their system time to the standard time servers, and honestly it's giving precision π
Here's the vibe check on the list: Clients MUST treat the list of SNTP servers as an ordered list. The server MAY list the SNTP servers in decreasing order of preference. So the order matters, and the server gets to decide how it's sorted π
this option can ONLY configure SNTP servers you can reach over IPv6. The DHCP option for IPv4 SNTP servers is in RFC 2132 [4] π And mechanisms for IPv4/IPv6 dual-stack apps are being considered, but this doc doesn't specify them yet
The format of the SNTP servers option looks like this π§ββοΈ
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| OPTION_SNTP_SERVERS | option-len |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| |
| SNTP server (IPv6 address) |
| |
| |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| |
| SNTP server (IPv6 address) |
| |
| |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| ... |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
the fields, bestie π
option-code:OPTION_SNTP_SERVERS(31)option-len: the length of the 'SNTP server' fields, in octets. It must be a multiple of 16 π’SNTP server: the IPv6 address of the SNTP server π
5. Appearance of This Option π¦
the SNTP servers option MUST NOT show up in messages other than these: Solicit, Advertise, Request, Renew, Rebind, Information-Request, and Reply. If it does appear in any other messages, the receiver SHOULD ignore it π ββοΈ
the option number for this option MAY appear in the Option Request Option [1] in these messages: Solicit, Request, Renew, Rebind, Information-Request, and Reconfigure. If the option number shows up in the Option Request Option in any other messages, the receiver SHOULD ignore it π
6. Security Considerations π
okay this section is serious, so listen up π¨ The SNTP servers option could be abused by an intruder DHCPv6 server to make DHCPv6 clients contact a rogue SNTP server. That leads to invalid time synchronization on the client, and then time-critical apps on that machine run inaccurately π± Time accuracy can be crucial for some security algorithms. For example, expired certificates may gain a new life, which makes the apps on the client machine less secure. The inaccuracy can even make clients set their time incorrectly, leaving them open to replay attacks in protocols that use timestamps to detect replays π₯
so to avoid attacks through this option, the DHCPv6 client SHOULD use authenticated DHCPv6 (see the "Authentication of DHCP messages" section in the DHCPv6 specification [1]) π this is a must-do, no cap π«Ά
7. IANA Considerations ποΈ
the IANA has assigned an option code from the option-code space defined in the "DHCPv6 Options" section of the DHCPv6 specification [1] β¨
Option Name Value Described in
OPTION_SNTP_SERVERS 31 Section 4.
8. Acknowledgements π
big thank yous to the DHC Working Group for their time and input on the spec π₯° Specifically, thanks in alphabetical order to Bernie Volz, Jim Bound, Margaret Wasserman, Pekka Savola, Ralph Droms, Robert Elz, and Thomas Narten for their thorough review π
9. Normative References π
- [1] Droms, R., Bound, J., Volz, B., Lemon, T., Perkins, C., and M. Carney, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6)", RFC 3315, July 2003.
- [2] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.
10. Informative References π
- [3] Mills, D., "Simple Network Time Protocol (SNTP) Version 4 for IPv4, IPv6 and OSI", RFC 2030, October 1996.
- [4] Alexander, S. and R. Droms, "DHCP Options and BOOTP Vendor Extensions", RFC 2132, March 1997.
Author's Address π‘
Vijayabhaskar A. Kalusivalingam
Cisco Systems (India) Private Limited,
No: 9, Brunton Road,
Bangalore - 560025
India
Phone: +91-80-51036615
EMail: vibhaska@cisco.com
Full Copyright Statement Β©οΈ
Copyright (C) The Internet Society (2005).
this doc is subject to the rights, licenses and restrictions in BCP 78, and except as set out there, the authors keep all their rights π¦
this document and the info in it are provided on an "AS IS" basis, and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Intellectual Property πΌ
the IETF takes no position on the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this doc, or on whether any license under those rights might or might not be available. It also doesn't claim to have made any independent effort to find such rights. Info on how rights in RFC docs are handled is in BCP 78 and BCP 79 π
copies of IPR disclosures made to the IETF Secretariat, any assurances of licenses to be made available, or the result of an attempt to get a general license or permission for implementers or users of this spec can be found in the IETF on-line IPR repository at http://www.ietf.org/ipr π
the IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology required to implement this standard. Send that info to the IETF at ietf-ipr@ietf.org π¨
Acknowledgement π«Ά
Funding for the RFC Editor function is currently provided by the Internet Society π
π¦ where this page comes from
- ietf: rfc4075 2005-05
- π girlified by claude-haiku-5-5 on : a language model's rewrite of the original, under its terms