Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    StarLink as source for NTP

    Scheduled Pinned Locked Moved General pfSense Questions
    175 Posts 15 Posters 37.4k Views 16 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S Offline
      stephenw10 Netgate Administrator
      last edited by

      Nice! Looks like some tweaks to the data/parsing required too.

      cmcdonaldC 1 Reply Last reply Reply Quote 0
      • D Offline
        davehart @cmcdonald
        last edited by

        @cmcdonald said in StarLink as source for NTP:

        should I advocate for including this patch in the upstream FreeBSD port (net/ntp) ?

        Thanks for verifying that resolves the problem. I'm sure there are many others using pfSense who will benefit.

        I have no objection to FreeBSD picking up any of the many pending ntp patches while we wait for NTF/ntp.org to get another release out. It's their call if it's worth their time and safe enough.

        1 Reply Last reply Reply Quote 1
        • cmcdonaldC Offline
          cmcdonald Netgate Developer @stephenw10
          last edited by

          @stephenw10 said in StarLink as source for NTP:

          Nice! Looks like some tweaks to the data/parsing required too.

          /usr/local/sbin/ntpq -pnw
               remote           refid      st t when poll reach   delay   offset  jitter
          ==============================================================================
          *192.168.100.1                    1 u   57   64  377    0.546   +0.120   7.203
          

          refid is empty now

          Need help fast? https://www.netgate.com/support

          tinfoilmattT 1 Reply Last reply Reply Quote 0
          • tinfoilmattT Offline
            tinfoilmatt LAYER 8 @cmcdonald
            last edited by

            You mean it's just not being parsed?

            block out log on { ix0 } inet from any to any
            block out log on { ix0 } inet6 from any to any

            cmcdonaldC 1 Reply Last reply Reply Quote 0
            • cmcdonaldC Offline
              cmcdonald Netgate Developer @tinfoilmatt
              last edited by cmcdonald

              @tinfoilmatt said in StarLink as source for NTP:

              You mean it's just not being parsed?

              pfSense expects refid to not be empty, so it ends up shifting all other columns over.

              Is there ever a legit condition where refid is indeed empty?

              I'm not sure.

              Need help fast? https://www.netgate.com/support

              tinfoilmattT D 2 Replies Last reply Reply Quote 0
              • tinfoilmattT Offline
                tinfoilmatt LAYER 8 @cmcdonald
                last edited by

                Is there ever a legit condition where refid is indeed empty?

                No idea. Your comment piqued my curiosity only because this post seems to demonstrate that the StarLink NTP implementation does, in fact, reply with an REFID of ".XFAC."?

                Can't read myself since the network I'm on at the moment has the domain www.ntp.org blocked (🤦)—but the search engine description of whatever this page contains regarding REFID seems relevant:

                https://www.ntp.org/documentation/ietf/ntp-refid-updates/

                block out log on { ix0 } inet from any to any
                block out log on { ix0 } inet6 from any to any

                D 1 Reply Last reply Reply Quote 0
                • D Offline
                  davehart @cmcdonald
                  last edited by davehart

                  @cmcdonald said in StarLink as source for NTP:

                  pfSense expects refid to not be empty, so it ends up shifting all other columns over.

                  Is there ever a legit condition where refid is indeed empty?

                  ntpd displays text refids bracketed by periods. It seems reasonable to do that for refids with only unprintable/invisible characters. Stratum 1 sources have text refids like .GPS.

                  Feel free to file a bug report at https://bugs.ntp.org/

                  stephenw10S D 2 Replies Last reply Reply Quote 0
                  • D Offline
                    davehart @tinfoilmatt
                    last edited by

                    @tinfoilmatt said in StarLink as source for NTP:

                    Your comment piqued my curiosity only because this post seems to demonstrate that the StarLink NTP implementation does, in fact, reply with an REFID of ".XFAC."?

                    That's actually generated by the client ntpd to indicate the local address/interface changed for the source since the last response was received. It happens as all prior results for that peer are flushed.

                    1 Reply Last reply Reply Quote 3
                    • stephenw10S Offline
                      stephenw10 Netgate Administrator @davehart
                      last edited by

                      @davehart said in StarLink as source for NTP:

                      It seems reasonable to do that for refids with only unprintable/invisible characters.

                      You mean it could be expected to return .. if it doesn't have a printable ID value?

                      D 1 Reply Last reply Reply Quote 0
                      • D Offline
                        davehart @stephenw10
                        last edited by

                        @stephenw10 said in StarLink as source for NTP:

                        @davehart said in StarLink as source for NTP:

                        It seems reasonable to do that for refids with only unprintable/invisible characters.

                        You mean it could be expected to return .. if it doesn't have a printable ID value?

                        Exactly. I'd like to be scolding that instead of screen-scraping the peers billboard the web UI should be using a parsing-friendly version (which ntpq calls raw), but in fact there's no raw form of the billboards. It can be done with multiple raw queries to get the list of associations and query the raw peer variables for each association, though, which is what the billboard code in ntpq is doing. Given that lots of folks have resorted to scraping it, making sure there's something in the refid field seems wise.

                        1 Reply Last reply Reply Quote 2
                        • D Offline
                          davehart @davehart
                          last edited by

                          @davehart said in StarLink as source for NTP:

                          I can crank out a fixed x64 binary with that info and post it.

                          https://www.davehart.net/ntp/test/ntp-stable-dlh-260328.tar.gz is a private test release of mine which includes the bug 3877 fix for rejecting responses with a zero ppoll in the packet.

                          The issue with the empty refid is a display issue in ntpq. That has not yet been fixed. So this will allow the Starlink to be used as a NTP source, but the column-shifting may still appear.

                          1 Reply Last reply Reply Quote 0
                          • D Offline
                            davehart @davehart
                            last edited by

                            @davehart said in StarLink as source for NTP:

                            @cmcdonald said in StarLink as source for NTP:

                            pfSense expects refid to not be empty, so it ends up shifting all other columns over.

                            Is there ever a legit condition where refid is indeed empty?

                            ntpd displays text refids bracketed by periods. It seems reasonable to do that for refids with only unprintable/invisible characters. Stratum 1 sources have text refids like .GPS.

                            Feel free to file a bug report at https://bugs.ntp.org/

                            It's actually ntpq which brackets text refids with periods. Refids are always 32 bits, either up to 4 characters or a dotted-quad a la IPv4. However, an empty refid is displayed as an empty string. To give screen-scrapers a better chance, ".." would be preferable.

                            I've filed https://bugs.ntp.org/4019 to track that change. For those interested, there are two lines in doprintpeers under the line:

                            	} else if (!strcmp("refid", name)) {
                            

                            to update from:

                            				dstadr_refid = "";
                            

                            to:

                            				dstadr_refid = "..";
                            
                            R 1 Reply Last reply Reply Quote 2
                            • R Offline
                              Ramosel @davehart
                              last edited by

                              @davehart Thanks for keep us current on this.

                              Rick

                              1 Reply Last reply Reply Quote 0
                              • dennypageD Offline
                                dennypage
                                last edited by

                                For those of you interested, I've created a Chrony package for pfSense.

                                1 Reply Last reply Reply Quote 2
                                • M Offline
                                  me21
                                  last edited by me21

                                  This post is deleted!
                                  1 Reply Last reply Reply Quote 0
                                  • M Offline
                                    me21
                                    last edited by me21

                                    The NTPd behaviour seems to be caused by this bug and seems to be included in a future version:
                                    https://bugs.ntp.org/show_bug.cgi?id=3870

                                    1 Reply Last reply Reply Quote 2
                                    • GertjanG Offline
                                      Gertjan
                                      last edited by Gertjan

                                      I'm looking at this thread for a couple of months now.
                                      I'm not a Starlink user myself, so I don't know much about them.

                                      Not this morning.

                                      StarLink as source for NTP

                                      By definition, a starlink 'disk' points to the open sky.
                                      So, it should be able / must 'see' many satellites ... 😊
                                      For me, that means is also sees GPS satellites.

                                      Knowing that every two digit dollar hand hold device has a GPS receiver built in today, I asked myself : why doesn't the starlink disk include a sub one dollar GPS receiver chip ??
                                      It would make the starlink disk a stratum 2 (1 ?) GSP device right out of the box - no more NTP traffic needed.
                                      Afaik, these starlink satellites all have an atomic clock(or comparable) build in, needed for their exact positing and all that, so that would be a second totally free source of time.

                                      Anyway, that's how I see the title "StarLink as source for NTP".
                                      It could be "Starlink == real time" thus a very accurate time source.

                                      edit : this thread is pretty long. Maybe this was already suggested.

                                      No "help me" PM's please. Use the forum, the community will thank you.

                                      M dennypageD R 3 Replies Last reply Reply Quote 0
                                      • M Offline
                                        Mission-Ghost @Gertjan
                                        last edited by

                                        @Gertjan Starlink dishes do have gps receivers in them, and they do serve GPS time to the network.

                                        The issue is the NTP client in pfsense doesn’t work properly to read that time. Chronyd does work but it’s an unsupported add-on at this point. I’m getting my network time from my Starlink dish gps receiver right now and it’s very accurate as expected.

                                        1 Reply Last reply Reply Quote 1
                                        • dennypageD Offline
                                          dennypage @Gertjan
                                          last edited by

                                          @Gertjan The StarLink receiver being a stratum 1 NTP time server is in the first post of the thread.

                                          1 Reply Last reply Reply Quote 1
                                          • R Offline
                                            Ramosel @Gertjan
                                            last edited by

                                            @Gertjan

                                            The Starlink dish itself a Stratum 1 time source. But it's operating in "the new world of GPS time" and pfSense is yet to catch up. I'm sure they will. The gent from NTP posted the issue if you read enough of this thread.

                                            Here is the output when using the local dish through the Galleon utility.

                                            84169ab8-1feb-4b52-a4fc-f051ee34c9f4-Galleon10-03-2026.jpg

                                            dennypageD 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.
                                            Privacy Policy · Cookie Policy