diff --git a/src/etc/examples/ntpd.conf b/src/etc/examples/ntpd.conf
index f362e529..cea93141 100644
--- a/src/etc/examples/ntpd.conf
+++ b/src/etc/examples/ntpd.conf
@@ -1,4 +1,4 @@
-# $OpenBSD: ntpd.conf,v 1.3 2015/05/18 11:10:03 dtucker Exp $
+# $OpenBSD: ntpd.conf,v 1.4 2019/11/11 00:01:20 deraadt Exp $
 # sample ntpd configuration file, see ntpd.conf(5)
 
 # Addresses to listen on (ntpd does not listen by default)
@@ -11,6 +11,9 @@
 # see http://support.ntp.org/bin/view/Servers/NTPPoolServers
 servers pool.ntp.org
 
+# time server with excellent global adjacency
+server time.cloudflare.com
+
 # use a specific local timedelta sensor (radio clock, etc)
 #sensor nmea0
 
@@ -18,4 +21,6 @@ servers pool.ntp.org
 #sensor *
 
 # get the time constraint from a well-known HTTPS site
-#constraints from "https://www.google.com/"
+constraint from "9.9.9.9"		# quad9 v4 without DNS
+constraint from "2620:fe::fe"		# quad9 v6 without DNS
+constraints from "www.google.com"	# intentionally not 8.8.8.8