chronyd时间服务器搭建

chronyd时间服务器搭建
1.案例使用场景：
搭建chronyd时间服务器，同步外部公网的时间，然后作为内网时间服务器，供内网环境的服务器同步时间使用。
2.机器规划：
机器1：chronyd时间服务器 172.32.10.1 (内网网卡) 192.168.171.128 (公网网卡)
机器2：内网linux服务器 172.32.10.2 (内网网卡)
3.案例实战：
1).机器1上搭建chronyd时间服务器： 172.32.10.1 (内网网卡) 192.168.171.128 (公网网卡)
[root@localhost ~]# yum -y install chrony
[root@localhost ~]# vim /etc/chrony.conf
#注释下面默认的公网时间服务器地址:
#server 0.centos.pool.ntp.org iburst
#server 1.centos.pool.ntp.org iburst
#server 2.centos.pool.ntp.org iburst
#server 3.centos.pool.ntp.org iburst
#下面为同步阿里云的时间服务器
server ntp1.aliyun.com iburst
server ntp2.aliyun.com iburst
....
#下面是允许哪些客户端来同步本机的时间,也可写成: allow all
allow 0.0.0.0/0
....
#下面为:当网络服务器不可用时,采用本地时间
local stratum 10
.....
[root@localhost ~]# systemctl restart chronyd
[root@localhost ~]# systemctl enable chronyd
[root@localhost ~]# systemctl status chronyd
● chronyd.service - NTP client/server
Loaded: loaded (/usr/lib/systemd/system/chronyd.service; enabled; vendor preset: enabled)
Active: active (running) since Mon 2023-05-22 05:52:46 CST; 7h left
[root@localhost ~]# netstat -anput |grep chronyd
udp 0 0 127.0.0.1:323 0.0.0.0:* 2819/chronyd
udp 0 0 0.0.0.0:123 0.0.0.0:* 2819/chronyd
udp6 0 0 ::1:323 :::* 2819/chronyd
[root@localhost ~]# date #查看现在服务器时间
Sun May 21 21:53:18 CST 2023
[root@localhost ~]# date -s "20210101" #修改成和现在时间不一样的错误时间
Fri Jan 1 00:00:00 CST 2021
[root@localhost ~]# clock -w #同步到硬件时间
[root@localhost ~]# date #查看修改成的错误时间
Fri Jan 1 00:00:11 CST 2021
[root@localhost ~]# systemctl restart chronyd #重启chronyd服务(重启会很快生效,不重启需要的时间长)
[root@localhost ~]# date
Fri Jan 1 00:01:40 CST 2021
[root@localhost ~]# date
Fri Jan 1 00:01:40 CST 2021
[root@localhost ~]# date
Fri Jan 1 00:01:41 CST 2021
[root@localhost ~]# date
Fri Jan 1 00:01:42 CST 2021
[root@localhost ~]# date
Fri Jan 1 00:01:43 CST 2021
[root@localhost ~]# date #查看时间已经调整为当前正确的时间
Sun May 21 21:55:39 CST 2023
[root@localhost ~]# date
Sun May 21 21:55:40 CST 2023
2.机器2上搭建配置同步机器1的时间，验证机器1的可用性 172.32.10.2 (内网网卡)
[root@localhost ~]# yum -y install chrony
[root@localhost ~]# vim /etc/chrony.conf
#注释下面默认的公网时间服务器地址:
#server 0.centos.pool.ntp.org iburst
#server 1.centos.pool.ntp.org iburst
#server 2.centos.pool.ntp.org iburst
#server 3.centos.pool.ntp.org iburst
#下面为配置同步机器1的时间
server 172.32.10.1 iburst
[root@localhost ~]# systemctl restart chronyd
[root@localhost ~]# systemctl enable chronyd
[root@localhost ~]# systemctl status chronyd
● chronyd.service - NTP client/server
Loaded: loaded (/usr/lib/systemd/system/chronyd.service; enabled; vendor preset: enabled)
Active: active (running) since Mon 2023-05-22 06:05:21 CST; 4s ago
[root@localhost ~]# netstat -anput |grep chronyd
udp 0 0 127.0.0.1:323 0.0.0.0:* 2415/chronyd
udp6 0 0 ::1:323 :::* 2415/chronyd
[root@localhost ~]# date #查看现在时间
Sun May 21 22:05:46 CST 2023
[root@localhost ~]# date -s "20220202" #修改成错误的时间
Wed Feb 2 00:00:00 CST 2022
[root@localhost ~]# date
Wed Feb 2 00:00:02 CST 2022
[root@localhost ~]# systemctl restart chronyd #重启chronyd服务
[root@localhost ~]# date
Wed Feb 2 00:00:17 CST 2022
[root@localhost ~]# date
Wed Feb 2 00:00:17 CST 2022
[root@localhost ~]# date
Wed Feb 2 00:00:18 CST 2022
[root@localhost ~]# date
Wed Feb 2 00:00:19 CST 2022
[root@localhost ~]# date #查看服务重启后已经将时间同步成当前正确的时间
Sun May 21 22:06:32 CST 2023
[root@localhost ~]# date
Sun May 21 22:06:33 CST 2023