NTP Issues Today

Majdi S. Abbas msa at latt.net
Wed Nov 21 20:29:47 UTC 2012


On Wed, Nov 21, 2012 at 10:41:01AM -0500, Jay Ashworth wrote:
> "... against multiple [Stratum 1] sources..."
> 
> Baby, if you've ever wondered... whether it matters whether your sources
> are strat 1 or not, now you know -- since there's no real way to get 
> provenance on down-strat time sources that I'm aware of.
> 
> Does the NTP code, people who know, give any extra credence to strat-1
> sources in it's byzantine code?

	Not in a way that matters if one of them suddenly becomes a 
falseticker.  If a reference clock goes insane, it's pretty easily 
detected provided you have at least two more servers (or even
peers configured.)

	Stratum 1 just means it thinks it has a reference clock
attached, but those clocks fail, go into holdover, what have you
all the time.

	NTP will happily select a stratum 2 or lower clock instead
provided it appears stable (low jitter, responded to our last 255
queries, and is an eligible candidate.)

	To get an idea what your NTP server will do, try ntpq -p:

msa at paladin:/home/msa (582)$ ntpq -p
     remote           refid      st t when poll reach   delay   offset
jitter
==============================================================================
-nist1.symmetric .ACTS.           1 u  304 1024  377    5.140    3.271
0.581
+nist1-sj.ustimi .ACTS.           1 u  307 1024  377    7.843    5.227
0.729
+64.147.116.229  .ACTS.           1 u  414 1024  377    9.406    5.742
0.068
*usno.pa-x.dec.c .USNO.           1 u  540 1024  377    1.373    4.242
0.032
-pegasus.latt.ne 64.250.177.145   2 u  304 1024  377   61.383    5.920
6.578
-pyramid.latt.ne 216.171.124.36   2 u  361 1024  377    1.076    4.181
0.066

	This is a stratum 2 server in the public pool.  It's peering
with two other stratum 2 servers that I run.  Those two are deselected
(-).  The server marked with a * is selected, and those with a + are
included in a weighted averdage used to maintain the system clock.
If the primary selected server does something wonky, it's going to 
select one of the candidates marked with a +.

	In this case it has enough stratum 1 servers that it's not
likely to fall back to its peers, but it can do so if those servers
suddenly give it a set of unexpected replies.

	--msa




More information about the NANOG mailing list