Slashdot Mirror


The NTP Pool Needs More Servers — Yours, If Available

Do you have a static IP or two? If so, you might be able to spread some Internet infrastructure well-being with very little effort. An anonymous reader writes "The NTP Pool project is turning 10 soon, and needs more servers to continue serving reasonably accurate time to anyone in the world."

29 of 160 comments (clear)

  1. I would but I just don't have the time... by Anonymous Coward · · Score: 5, Funny

    //puts on sunglasses//

    1. Re:I would but I just don't have the time... by K.+S.+Kyosuke · · Score: 3, Funny
      --
      Ezekiel 23:20
    2. Re:I would but I just don't have the time... by Anonymous Coward · · Score: 4, Funny

      That joke feels a little out of date.

  2. Do you need a clock? by Hatta · · Score: 3, Insightful

    Are we talking about about stratum 1 servers here?

    --
    Give me Classic Slashdot or give me death!
    1. Re:Do you need a clock? by GuruBuckaroo · · Score: 4, Informative

      Nope. Anyone with a stable time server is encouraged to join. The operative word being "stable". It's more about providing something that will be reliably *there* when it's needed. The protocol itself will take care of accuracy.

      --
      Poor means hoping the toothache goes away.
    2. Re:Do you need a clock? by GuruBuckaroo · · Score: 5, Informative

      Minimal. NTP packets are about 128 bytes. Individual clients will (if up to spec) contact no more than every 64 seconds, but up to 17 minutes once synchronized (or longer if using SNTP). I'm in the pool and I never notice the traffic.

      --
      Poor means hoping the toothache goes away.
    3. Re:Do you need a clock? by mitgib · · Score: 4, Informative

      Any idea how much bandwidth this would involve?

      About 1kbit on average, so nothing really. I've provided a pool server for a couple of years now, you have to run ntpd anyway, might as well join it to the pool if it is not going anywhere (IPwise) any time soon.

      --
      Being a spelling & grammar Nazi is a sign you do not poses the intelligence to contribute to the conversation
    4. Re:Do you need a clock? by Anonymous Coward · · Score: 5, Interesting

      Until somebody hard codes your server into their commercial firmware and screws up the NTP implementation.

      http://pages.cs.wisc.edu/~plonka/netgear-sntp/

  3. What is NTP? by cpu6502 · · Score: 4, Informative

    "The NTP pool is a dynamic collection of networked computers that volunteer to provide highly accurate time via the Network Time Protocol to clients worldwide." "Network Time Protocol (NTP) is a networking protocol for synchronizing the clocks of computer systems over packet-switched, variable-latency data networks. In operation since before 1985, NTP is one of the oldest Internet protocols in use." - wikipedia.

    --
    My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
    1. Re:What is NTP? by SJHillman · · Score: 4, Funny

      What Wikipedia doesn't tell you is that Skynet had humble beginnings as a network clock...

    2. Re:What is NTP? by Anonymous Coward · · Score: 3, Funny

      "The NTP pool is a dynamic collection of networked computers that volunteer to provide highly accurate time via the Network Time Protocol to clients worldwide." "Network Time Protocol (NTP) is a networking protocol for synchronizing the clocks of computer systems over packet-switched, variable-latency data networks. In operation since before 1985, NTP is one of the oldest Internet protocols in use." - wikipedia.

      Thanks for that informative post.

      Also, anyone reading Slashdot who needed such a post, your geek card has been downgraded to "minion" level. Minion level cards do not get access to the second-floor gym or the breakroom, but can still use the reference library. Take advantage of it!

    3. Re:What is NTP? by Mr.+Slippery · · Score: 3, Interesting

      NTP could mean anything. It could be "Novell transfer protocol"...

      In the same sense that HTTP could be "Highly Technical TARDIS Protocol", yes. But anyone who needs HTTP expanded is a n00b (no offense, we were all n00bs once);it's a universally-used protocol.

      NTP is also a universally-used protocol. Every server (every properly-managed server, at least) uses it, and many if not most PCs use it.

      OTOH, the number one meaning for "LSEQ" seems to be "Leeds Sleep Evaluation Questionnaire", according to the duck. Not universal.

      If you not only don't know what NTP is, but after looking it up think it's mysterious to the average /.er, you deserve a little teasing. ;-)

      --
      Tom Swiss | the infamous tms | my blog
      You cannot wash away blood with blood
  4. Re:No Gov. help? by SJHillman · · Score: 3, Informative

    http://tf.nist.gov/tf-cgi/servers.cgi

    Step 1: Open Browser
    Step 2: Put "nist ntp" in browser/search bar
    Step 3: Click Enter
    Step 4: Click on first link
    Step 5: Copy link to Slashdot
    Step 6: Use the remaining 8 seconds of your 10 second break to highlight what steps you took to get that link

  5. More than just a static IP by MetalliQaZ · · Score: 5, Informative

    Anyone considering this should carefully read the NTP pool's page on the matter. In addition to having a static IP, you need to have fairly good availability over a long period of time, and more importantly you need to be able to handle a lot of traffic. Even though the traffic is fairly low most of the time, you could experience spikes that would be difficult to handle for small businesses or amateurs. Also, anyone with metered bandwidth on their server/colo would almost certainly be unable to handle the cost.

    The NTP pool is something that you have to consider carefully. You can't help out for 18 months and then decide to quit. You can expect to receive traffic for up to YEARS after you leave the pool.

    -d

    --
    "Here Lies Philip J. Fry, named for his uncle, to carry on his spirit"
  6. Why not use EC2? by paulschreiber · · Score: 3, Interesting

    Can Google/Apple/Amazon not just throw some money at this?

    1. Re:Why not use EC2? by TooMuchToDo · · Score: 5, Informative

      Virtual machines cannot be used for NTP:

      http://support.ntp.org/bin/view/Support/KnownOsIssues#Section_9.2.2.

      NTP was not designed to run inside of a virtual machine. It requires a high resolution system clock, with response times to clock interrupts that are serviced with a high level of accuracy. No known virtual machine is capable of meeting these requirements.
      Run NTP on the base OS of the machine, and then have your various guest OSes take advantage of the good clock that is created on the system. Even that may not be enough, as there may be additional tools or kernel options that you need to enable so that virtual machine clients can adequately synchronize their virtual clocks to the physical system clock.

  7. Re:How do we help ??? by Dog-Cow · · Score: 3

    It is easy and they do provide documentation. I added my server and it took about 10 minutes. Stop being a lazy shit.

  8. $25 Raspberry Pi + $27 GPS reciever? by bill_mcgonigle · · Score: 5, Interesting

    Some quick searching shows one can get a USB GPS receiver for $27 and the comments say it works with linux/gpsd, showing up as /dev/ttyUSB0.

    Somebody could make a simple OS image that would narrow the scope of the problem to the availability of ~$60 and an available public IP address.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  9. Re:$25 Raspberry Pi + $27 GPS reciever? by MyFirstNameIsPaul · · Score: 3, Funny

    Perhaps you could also point out a source for a Raspberry Pi.

    --

    I once took an excursion to Reddit, and later HN. Unlimited up/down voting sucks when dealing with a hive-mind.

  10. Woo-hoo! First post! by PPH · · Score: 4, Funny

    They can use my system if they don't mind pretty crappy latency.

    --
    Have gnu, will travel.
  11. Re:In the mean time.... by fuzzyfuzzyfungus · · Score: 4, Informative

    The 'default' is what it is because it is the setting that provides the best chance of working right out of the box. Hitting a known public NTP source qualifies as a pretty sane default.

    Now, if you are going to be running a bunch of systems, it certainly is polite, as well as efficient, to run your own NTP server for your internal systems, just as you likely run your own DNS server for them. However, that isn't really something you can sensibly set as the default; because every organization's internal server will have a different address and smaller sites/single users/laptops frequently off the LAN simply won't have one.

    Not all that dissimilar from the fact that most distro's package managers default to pointing directly to the public package mirrors. That is obviously nuts from the perspective of anybody running more than a few machines, you'll waste enormous amounts of time and bandwidth if you aren't caching packages and updates; but your default can't really assume the existence of a local cache...

  12. Okay, NOW I'm confused by RulerOf · · Score: 3, Funny

    "no to pizza"

    Why would you make up an acronym for a concept that doesn't exist for words that cannot be spoken?

    --
    Boot Windows, Linux, and ESX over the network for free.
  13. Re:US Navy Master Clock by Just+Some+Guy · · Score: 5, Insightful

    These three are the US master clock's stratum-1 servers. They most likely will not run out of bandwidth.

    Don't do that, though; it's anti-social. The NTP ecosystem is much better off scaling horizontally than vertically.

    --
    Dewey, what part of this looks like authorities should be involved?
  14. Too many idiots are pissing in the pool. by jcochran · · Score: 4, Interesting

    I used to have a computer in the pool, but removed it due to disgust with the NTP abusers out there. When I looked at the logs, I would see that the vast majority of incoming traffic was from a relatively small handful of IP address. For normal well behaved users, you would see them hit you every 64 seconds and over a period of a few hours slowly back off until they do a query only once every 1024 seconds. Reasonable and well behaved. Even a relatively low bandwidth DSL line could handle a lot of users like that.

    Unfortunately, not all the users are reasonable and well behaved. There were a few addresses that were hitting me with a query per second. And you can't blacklist these anti-social idiots because if you do, they're still consuming inbound bandwidth. After a period of time where 1% of the users were consuming 99% of my donated resources, I left the pool out of disgust. Was still getting hits from the idiot users a year later.

    To make their idiocy even more evident, the SHORTEST interval that NTPD will hit a server is once per 16 seconds. So those once a second idiots were using software that itself was written by idiots.

    Would I donate to the pool again? Nope. Not at long as there are invalid NTP clients that hit that often. If I could be assured that the idiots are gone, then I'd donate. Until then, I don't need the headaches.

    1. Re:Too many idiots are pissing in the pool. by profplump · · Score: 4, Interesting

      I've got one better -- I actually had a pool user call my ISP and get me disconnected (temporarily) because I was "hacking" them on UDP port 123.

    2. Re:Too many idiots are pissing in the pool. by jafo · · Score: 3, Insightful

      This is similar to the reason I ended up leaving the pool 7 years ago... The week I left the pool I had two different people call me telling me that one of my machines was hacked because it was attacking their network. "Hmm, what port are you seeing the attacks on?" "123." "You know what 123 is, right? NTP... Those packets your intrusion detection system is complaining about are in response to packets you sent that server."

      It was actually the guy that hung up on me while I was telling him that his machines were causing this, that caused me to leave the pool. I'm sorry, but I just can't be providing individual phone support to everyone who uses the NTP pool, that's kind of how I was feeling...

      I haven't been in the pool for 7 years, and I'm still getting around 8,000 packets per second on NTP, around a megabit per second. There's one DSL line in Italy that sends an average of 15 packets/sec.

      Here's a blog post I wrote in relation to this: http://www.tummy.com/journals/entries/jafo_20050412_123522

      Sean

  15. Re:$25 Raspberry Pi + $27 GPS reciever? by kwark · · Score: 3, Interesting

    An USB GPS means no Pulse Per Second (actually 1000ms). The PPS fires an interrupt on the serial port, which should result in an interrupt every 1000ms accurate within 100us.

    The lack of PPS will result in a ntpd with lots of jitter, my experience is about +/- 150ms but this depends heavily on actual USB usage and the GPS device itself. This is unsuitable for a low stratum ntpserver IMHO, so don't use it as the only timesource if you want to participate in the pool unless you advertise it as some high stratum source (I would guess 5-10).

  16. Geographic distribution by tepples · · Score: 3, Informative

    As I understand it, an NTP server closer to you on the Internet will provide more accurate time. Fewer hops away generally means a shorter ping and less jitter. Adding more servers in underserved countries adds more servers closer to users in those countries.

  17. Re:In the mean time.... by heypete · · Score: 3, Interesting

    I've always wondered about the defaults to have every RH/Debian/Suse/Ubuntu/etc. box talk directly to the pool. I know that for years, the pool has been considered fully sufficient to meet these needs, but it just always struck me as more efficient for an organization to run its own NTP server--one machine talking to the pool--and have other machines in the organization talk to that, rather than having all the machines in the organization talk to the pool.

    They actually talk to a "vendor" subdomain of the pool: 0.rhel.pool.ntp.org, 1.rhel.pool.ntp.org, 2.rhel.pool.ntp.org, etc.

    They provide vendor-specific subdomains and encourage vendors to provide NTP servers to the pool. Thus, if there's some abuse or misconfiguration that results in excessive traffic they can change the vendor-specific subdomain to prevent that traffic from flooding NTP servers without inconveniencing clients that use the general pool.

    Anyway, yes: it's better for an organization to have one or two local time servers communicate with the pool (or other sources of time) and then provide time service to the local network. Still, talking to the pool is a reasonably sane "general purpose" default.