The full NTP hierarchy: from Stratum 0 (physical sources) to Stratum 16 (unsynchronized).
The Network Time Protocol (NTP) organizes time servers into a 16-level hierarchy called stratums (or strata in Latin plural). Each level indicates how far a server sits from the absolute reference source — an atomic clock or a GPS receiver. The lower the number, the closer the server is to the source and the higher its accuracy.
This page covers every stratum level, their typical accuracy, their role in the NTP architecture, and answers the most common questions: do I need Stratum 1 or Stratum 2? what does Stratum 16 mean? how do I check a server's stratum?
NTP propagates time using a hierarchical master-slave model: each server gets its time from one or more servers at the immediately upper level, then redistributes it to its own clients. The deeper you go in the hierarchy, the larger the client base but the lower the accuracy.
| Stratum | Source | Typical accuracy | Use case |
|---|---|---|---|
| Stratum 0 | Atomic clock, GPS, DCF77, WWVB | 1 ns — 1 µs | Physical reference (not NTP) |
| Stratum 1 | Direct connection to Stratum 0 (PPS, serial) | 1 — 10 µs | HF trading, broadcast, metrology |
| Stratum 2 | NTP over one or more Stratum 1 servers | 100 µs — 1 ms | Public servers (pool.ntp.org), datacenters |
| Stratum 3 | NTP over a Stratum 2 | 1 — 10 ms | Enterprise servers, Active Directory |
| Stratum 4 | NTP over a Stratum 3 | 5 — 20 ms | Workstations, IoT, home routers |
| Stratum 5−15 | Deep cascade (rare in practice) | > 20 ms | Internal propagation on very large networks |
| Stratum 16 | Unsynchronized (special value) | — | Invalid server, ignored by clients |
Stratum 0 sources are not NTP servers in the strict sense: they are physical devices that provide an absolute time signal. No NTP client can connect to them over the network — they feed a Stratum 1 server through a local link (USB, GPIO, RS-232, PPS).
A Stratum 1 server is an NTP server directly coupled to a Stratum 0 source through a local interface. It does not get its time from the network: it reads it straight from the hardware. This proximity guarantees accuracy in the microsecond range, with no dependency on the network or other servers.
Common setups include:
A Stratum 2 server synchronizes with one or more Stratum 1 servers using NTP over
UDP (port 123). This is the most widespread setup because it requires no specialized hardware: an
ntpd or chronyd daemon is enough.
Nearly all public servers on the pool.ntp.org network are Stratum 2 or Stratum 3. They are synchronized with Stratum 1 servers operated by metrology institutes, universities, telecom operators or hosting providers like RDEM Systems.
Levels Stratum 3 to 15 correspond to servers synchronizing with a server at the immediately upper level. Each hop adds latency and jitter, progressively degrading accuracy. In practice, beyond Stratum 4, accuracy is already significantly impacted by the accumulated imprecisions.
Typical architectures include:
Stratum 16 is not a "real" level in the hierarchy: it is a special value meaning an NTP server is not synchronized and must not be used as a time source. A server may advertise Stratum 16 because:
NTP clients automatically ignore servers advertising Stratum 16: they are never selected as sources, even if they respond faster than others.
Typical accuracy per stratum level on a logarithmic scale from 1 ns to 1 s.
Three factors degrade accuracy at each NTP hop:
The typical rule of thumb is a 10× factor per hop over the Internet, and 2 to 3× on a high-quality LAN. A Stratum 1 at 1 µs can therefore feed a Stratum 2 at 10 µs on a LAN, then a Stratum 3 at 1 ms over the Internet.
This is the most common question when designing enterprise time infrastructure. The answer depends on the accuracy you need, how much dependence on third-party servers you can accept, and your hardware budget.
Stratum 1 vs Stratum 2 — which option fits your use case.
Recommended for:
High-frequency trading, broadcast, metrology, isolated industrial networks, legally timestamped security systems.
Recommended for:
Active Directory, application servers, logging, PKI timestamping, VoIP, almost every enterprise use case.
Three tools let you display the stratum of a server or its peers:
ntpq (ntpd)$ ntpq -p
remote refid st t when poll reach delay offset jitter
==============================================================================
*ntp1.rdem-syste .PPS. 1 u 32 64 377 2.145 -0.021 0.087
+ntp2.rdem-syste 192.168.10.1 2 u 29 64 377 2.210 0.045 0.102
ntp3.example.ne .POOL. 16 u - 64 0 0.000 0.000 0.000
The st column shows the stratum. The character in front of the server name indicates
its state: * (selected), + (valid candidate), - (rejected),
space (unused, often stratum 16).
chronyc (chrony)$ chronyc sources -v
MS Name/IP address Stratum Poll Reach LastRx Last sample
===============================================================================
^* ntp1.rdem-systems.com 1 6 377 42 -12us[ -15us] +/- 1.2ms
^+ ntp2.rdem-systems.com 2 6 377 39 +45us[ +42us] +/- 2.1ms
$ ntpdate -q ntp1.rdem-systems.com
server 185.45.160.11, stratum 2, offset -0.000421, delay 0.02810
15 Apr 10:23:14 ntpdate[4532]: adjust time server 185.45.160.11 offset -0.000421 sec
Yes. Stratum is the singular form (from Latin), strata is the correct Latin plural. NTP documentation also commonly uses the anglicized plural stratums. All three terms refer to the same hierarchical levels.
The stratum field in the NTP header is 8 bits but the protocol intentionally limits usable values: 0 for physical sources, 1 through 15 for servers, 16 to signal an unsynchronized server. This limit prevents chains that are too deep and would propagate too much error.
No, not automatically. Stratum is determined by the type of source: Stratum 1 requires a direct connection to a Stratum 0 source (GPS, atomic clock). A server with only NTP peers as sources can never drop below Stratum 2.
Check that the daemon is running (systemctl status ntpd), that the peers are reachable
(ntpq -p), that UDP port 123 is not blocked by a firewall, and wait a few minutes:
NTP needs several exchanges with each peer before it validates a source.
No. NTS (Network Time Security) adds a cryptographic authentication layer to NTP exchanges but does not change the stratum logic. An NTS server can be Stratum 1, 2, 3, etc. just like any plain NTP server.
Check the stratum and accuracy of your NTP infrastructure in real time.
Test nowOur Stratum 1 server | Our infrastructure | What is NTP?
Measure your server's accuracy | Validate your server with our pro tool