Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Chrony, PTP, Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd)

    Scheduled Pinned Locked Moved General pfSense Questions
    136 Posts 14 Posters 41.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @Sergei_Shablovsky
      last edited by

      @Sergei_Shablovsky said in Chrony, PTP, Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd):

      But anyway, it’s not “just put the GPS antenna somewhere out of the server room”. Definitely not.

      You put the receiver and NTP server elsewhere, where there is a signal. Nothing new here. Often, both devices are in the same box. Here is one example.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      dennypageD 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @RobbieTT
        last edited by

        @RobbieTT said in Chrony, PTP, Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd):

        GSM

        GSM is dying, if not already dead in most areas. These days, a 4G or 5G network can provide 1.5 µS accuracy. It will likely work better than GPS in many locations.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        RobbieTTR 1 Reply Last reply Reply Quote 0
        • RobbieTTR
          RobbieTT @JKnott
          last edited by

          @JKnott said in Chrony, PTP, Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd):

          @RobbieTT said in Chrony, PTP, Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd):

          GSM

          GSM is dying, if not already dead in most areas. These days, a 4G or 5G network can provide 1.5 µS accuracy. It will likely work better than GPS in many locations.

          Not sure why you picked-out GSM time reference from the list but the world is a big place and GSM-based time reference systems are out there in use for everything from military, police, ATC, banking, PoS, trading, networking, power networks, gas network, train signal & monitoring... and the list goes on.

          I happen to live on a bit of the planet that is more advanced than other areas and we have a desire is to cease GSM use by 2033 (IIRC) but given that there are still major infrastructure elements that are not on track to meet that deadline some slippage will probably occur.

          Again, we are talking timing reference use, not using a phone to call your kids. Most of the population of any given country does not have a clue about RF spectrum management let alone any idea* as to what uses or depends on GSM.

          ☕️

          [* Ok, this bit varies by country. Here in the UK there is growing public awareness that the typical domestic gas and electric meter will become 'dumb' soon and that medical service providers for home equipment (dialysis, CPAP, respirators etc) have quite a problem. But the average punter has no idea about substations, sewage, hydroelectrics or indeed all the other infra held together on obsolescent tech.]

          JKnottJ 1 Reply Last reply Reply Quote 1
          • JKnottJ
            JKnott @RobbieTT
            last edited by

            @RobbieTT

            In many areas, GSM is gone. On my carrier, it's already been reduced to 1 band from 2. Also, spectrum costs the cell companies a lot of money. Do you think they're going to leave some spectrum they already have to sit almost unused and then spend on more spectrum? Already we're hearing about things like security systems and more not working because 2G & 3G are being discontinued. The world moves on and sticking with obsolete tech is not the way to go, even if there still is some GSM in your area. A few years ago, a friend received a free 4G phone because the company he was with was in the process of shutting down 2G & 3G.

            So, hang onto your GPS time source for as long as you can, but don't be surprised if it stops working some day.

            Another source which you didn't mention was NTSC TV signals. Some stations transmitted the time during the horizontal blanking interval and the colour burst oscillator was an excellent stable signal. Are those stations supposed to keep broadcasting, even though NTSC is rarely used these days?

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            RobbieTTR 1 Reply Last reply Reply Quote 0
            • dennypageD
              dennypage @JKnott
              last edited by

              @JKnott said in Chrony, PTP, Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd):

              Here is one example.

              TM1000A. I have one of those in a box somewhere as well, along with a TM2000A. The TM1000A NTP implementation was written in microcode, and was one of the very few to have implemented the broadcast mode of NTP. The TM2000A was focused on PTP, which it was reasonably good at, but instead of a microcode implementation for NTP it used busybox which made it a very poor NTP server.

              1 Reply Last reply Reply Quote 0
              • RobbieTTR
                RobbieTT @JKnott
                last edited by

                @JKnott said in Chrony, PTP, Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd):

                @RobbieTT

                Do you think they're going to leave some spectrum they already have to sit almost unused and then spend on more spectrum? The world moves on and sticking with obsolete tech is not the way to go, even if there still is some GSM in your area.

                Whilst I was a member of the UK Frequency Allocation Committee we did cooperate with other national and international bodies (FCC, WRC etc) - otherwise how would we know, for example, that Tajikistan (amongst others) uses 25 kHz for time signals. It's been a few years since I left that role but the RF spectrum remains stubbornly fixed.

                Again, please don't confuse the GSM you used to use for phone calls with the use of GSM time references or other industrial uses.

                ☕️

                JKnottJ 1 Reply Last reply Reply Quote 1
                • JKnottJ
                  JKnott @RobbieTT
                  last edited by

                  @RobbieTT

                  There are a lot of time signals, on a variety of frequencies, around the world. They are broadcast stations and not likely to go away. Is there some other GSM out there, beyond the cell phone network? Also, CDMA was the 2G tech used for accurate time keeping, not GSM, which uses TDMA.

                  If it is the GSM cell network you're referring to then yeah, it's going away in the not too distant future. My friend's phone that had to be replaced was 2G CDMA.

                  BTW, I have a clock that's supposed to set itself with the 60 KHz WWVB signal. However, it hasn't worked in years and didn't very well when it did. I have also used WWV as a frequency standard and it & CHU for time of day. As I said, lots of time signals around the world.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  1 Reply Last reply Reply Quote 0
                  • Sergei_ShablovskyS
                    Sergei_Shablovsky @johnpoz
                    last edited by Sergei_Shablovsky

                    @johnpoz said in Chrony, PTP, Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd):

                    @sergei_shablovsky said in Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd):

                    You have separate machine especially for timeserver?

                    Yeah I have a raspberry pi with a gps hat that I use as my networks stratum 1 server, and also serve this up to the ntp pool via both ipv4 and IPv6 ;)

                    pool.jpg

                    BTW, why You have so much distortion in offsets? (Probably Pi not sufficient horsepower to keep many requests? What is loading of CPU/RAM/SSD?)

                    This is our recent
                    8E1853B2-6320-48C8-B959-A8D087DBBA9F.jpeg

                    —
                    CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
                    Help Ukraine to resist, save civilians people’s lives !
                    (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

                    1 Reply Last reply Reply Quote 0
                    • NollipfSenseN
                      NollipfSense @RobbieTT
                      last edited by

                      @RobbieTT said in Chrony, PTP, Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd):

                      Dedicated NTP time sources don't have to be expensive or be a hacky DIY job on a RPi.

                      I am watching this reasonable priced one on eBay: https://www.ebay.com/itm/385524217975

                      pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                      pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                      dennypageD 1 Reply Last reply Reply Quote 0
                      • dennypageD
                        dennypage @NollipfSense
                        last edited by

                        @NollipfSense Haven't tested one of those myself, but more information can be found here: https://fc-ntp-100.toimii.fi.

                        FWIW, at 0.5-2ms the advertised accuracy for NTP on the LAN is low. This implies a simplistic NTP implementation without hardware timesamping.

                        For around the same price, you could do a Pi.

                        NollipfSenseN 1 Reply Last reply Reply Quote 0
                        • NollipfSenseN
                          NollipfSense @dennypage
                          last edited by

                          @dennypage said in Chrony, PTP, Network Time Security (NTS, NTPsec) to replace unsecure/old NTP (ntpd):

                          here: https://fc-ntp-100.toimii.fi.

                          Cool...thank you for sharing.

                          pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                          pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.