NEW NTP over HTTPS???
-
Hello fellow netgate community FYI I just spotted a new NTP over HTPPS service if anyone else tracks this.
time.akamai.com
-
@JonathanLee not sure what app would use that - but yup it provides time
So I went there https://time.akamai.com and got back this 1766430419, which converts to time
Monday, December 22, 2025 1:06:59 PM
You can got to lots of places to convert such a number - here is one
https://www.epochconverter.com/
-
And here's a 1-liner that you can execute from the pfSense console/ssh
date -j -f%s $(fetch -qo- https://time.akamai.com) '+%Y-%m-%d %H:%M:%S' -
We can use IT!!!
-
Doesn't seem to be as accurate or potentially as reliable. Certainly not suitable where precision timekeeping is required. Personally, I do not want clients reaching past my GPS+PPS NTP server and potentially getting a different time, making it impossible to perform log correlation. I added a FW rule to redirect all outbound NTP requests to my local NTP server. I still use NIST and USNO stratum 1 servers as fallback.
Just my 2¢
https://github.com/elvisimprsntr/pfsense-ntp-gps
-
@elvisimprsntr Yeah not sure why some app would use that to be honest.. But guess could be a place to get bootstrap sort of time set.
Or as fall back if no local ntp, or normal ntp is blocked.
One thing that drives me nuts is lack of many devices/OSes to leverage ntp that is handed out via dhcp..
-
I use NIST authenticated ntp service too. It’s stratum 1 I have no clue how as I am in a different state
-
@JonathanLee Nice repo, that. May I ask what your use case is for needing such a high precision time source? Just curious.
-
@luckman212 that is @elvisimprsntr repo.. I doubt he needs microsecond accuracy - but then again if your going to set something up like that, why not ;)
I just run a pi with a gps hat so I can get pps - good enough for my needs. It is below 1ms, more than accurate enough for me ;)
I point all my clients to the pi ntp server, pfsense is just another client on my network for ntp.
-
@johnpoz where do you physically place the pi so it can receive GPS signal? my stuff is buried deep in a closet. would need a looong antenna to reach anywhere near a window.
-
@luckman212 haha - great question, I have it behind my tv. With a think like 15 cable for the antenna that runs into the garage through a hole in the wall. Then up and it is magnetic base and sits on one of the metal frame thing used for the garage door. So it sits up pretty close to the roof, and gets pretty good signal.
-
You have to remember NTP is how old, I have see time get hijacked and move 15-20 mins during timed tests, that’s why I think I went into ultra I want my time to be perfect mode
Make sure to upvote
-
The great thing about the Garmin pucks is they have much larger antennas than those small SMA connected patch antennas connected to a U-Blox.
I have an 18X LVC sitting on a window sill (I don't have Low-E glass) and the serial cable connected directly to pfSense. You don't need full sky view for time precision. I get anywhere between 8 to 12 satellites. You can pick up used Garmin pucks off evilBay for <$50. Just make sure they are the serial flavor with PPS and not USB.
-
@JonathanLee said in NEW NTP over HTTPS???:
I have see time get hijacked and move 15-20 mins during timed tests
Sorry but I don't buy it, did you see a problem with ntp - maybe.. But ntp is designed to use time from multiple sources. If one was sending outlier time, it just wouldn't be used.
If you were pointing your ntp to just 1 public source - the issue then was you were doing it wrong.
If you point at a pool, your talking to multiple ntp servers. If a device is a member of the pool, and their time is off they auto get dropped from the pool. And would no longer be handed out to clients using the pool.
-
@elvisimprsntr said in NEW NTP over HTTPS???:
I get anywhere between 8 to 12 satellites.
Isn't this saying using 19 of them?
I will have to run out into the garage later and see what specific antenna its using - its a puck with a magnetic base.
I see this menu if I run cgps
Privacy Policy · Cookie Policy