{"id":1789,"date":"2017-09-06T20:41:11","date_gmt":"2017-09-06T20:41:11","guid":{"rendered":"http:\/\/www.mtin.net\/blog\/?p=1789"},"modified":"2017-09-06T20:41:11","modified_gmt":"2017-09-06T20:41:11","slug":"everything-you-wanted-to-know-about-ntp","status":"publish","type":"post","link":"http:\/\/www.mtin.net\/blog\/everything-you-wanted-to-know-about-ntp\/","title":{"rendered":"Everything you wanted to know about NTP"},"content":{"rendered":"<p>Network Time Protocol (NTP) is a service that can be used to synchronize\u00a0time on network connected devices. \u00a0 Before we dive into what NTP is, we need to understand why we need accurate time.<\/p>\n<p>The obvious thing is network devices need an accurate clock. \u00a0Things like log files with the proper time stamp are important in troubleshooting. \u00a0Accurate timing also helps with security\u00a0prevention measures. \u00a0Some attacks use vulnerabilities in time stamps to add in bad payloads or manipulate data. Some companies require accurate time stamps on files and transactions as well for compliance purposes.<\/p>\n<p><strong>So what are these Stratum levels I hear about?<\/strong><br \/>\nNTP has several levels divided into stratum. All this is the\u00a0distance from the reference clock\u00a0source. \u00a0A clock which relays UTC (Coordinated Universal Time) that has little to no delay (we are talking nanoseconds) are Stratum-0 servers. These are not used on the network. These are usually atomic and GPS clocks. \u00a0A Stratum-0 server is connected to time servers or stratum-1 via GPS or a national time and frequency transmission. \u00a0A Stratum 1 device is a very accurate device and is not connected to a Stratum-0 clock over a network. \u00a0A Stratum-2 clock receives NTP packets from a\u00a0Stratum-1 server, a Stratum-3 receives packets from a Stratum-2 server, and so on. \u00a0It&#8217;s all relative of where the NTP is in relationship to Stratum-1 servers.<\/p>\n<p><strong>Why are there levels?<\/strong><br \/>\nThe further you get away from Stratum-0 the more delay there is. \u00a0Things like jitter and network delays affect accuracy. \u00a0Most of us network engineers are concerned with milliseconds (ms) of latency. \u00a0Time servers are concerned with nanoseconds (ns). Even a server directly connected to a Stratum-0 reference will add 8-10 nanoseconds to UTC time.<\/p>\n<p><strong>My Mikrotik has an NTP server built in? Is that good enough?<\/strong><br \/>\nThis depends on what level of accuracy you want. Do you just need to make sure all of your routers have the same time? then synchronizing with an upstream time server is probably good enough. Having 5000 devices with the same time, AND not having to manually set them or keep them in sync manually is a huge deal.<\/p>\n<p>Do you run a VOIP switch or need to be compliant when it comes to transactions on servers or need to be compliant with various things like Sox compliance you may need a more accurate time source.<\/p>\n<p><strong>What can I do for more accurate time?<\/strong><br \/>\nUsually, a dedicated appliance is what many networks\u00a0use. \u00a0These are purpose built hardware that receives a signal from GPS. the more accurate you need the time, the more expensive it will become. \u00a0Devices that need to be accurate to the nanosecond are usually more expensive than ones accurate to a microsecond.<\/p>\n<p>If you google NTP Appliance you will get a bunch of results. \u00a0If you want to setp\u00a0up from what you are doing currently you can look into these links:<\/p>\n<p><a href=\"http:\/\/www.satsignal.eu\/ntp\/Raspberry-Pi-NTP.html\">http:\/\/www.satsignal.eu\/ntp\/Raspberry-Pi-NTP.html<\/a><\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"tE4Z4JFwuT\"><p><a href=\"https:\/\/developers.redhat.com\/blog\/2017\/02\/22\/how-to-build-a-stratum-1-ntp-server-using-a-raspberry-pi\/\">How to Build a Stratum 1 NTP Server Using A Raspberry Pi<\/a><\/p><\/blockquote>\n<p><iframe class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"&#8220;How to Build a Stratum 1 NTP Server Using A Raspberry Pi&#8221; &#8212; Red Hat Developer\" src=\"https:\/\/developers.redhat.com\/blog\/2017\/02\/22\/how-to-build-a-stratum-1-ntp-server-using-a-raspberry-pi\/embed\/#?secret=tE4Z4JFwuT\" data-secret=\"tE4Z4JFwuT\" width=\"580\" height=\"327\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><\/p>\n<p>&nbsp;<\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"E4N8k7NbHw\"><p><a href=\"https:\/\/xmission.com\/blog\/2014\/05\/28\/building-a-stratum-1-ntp-server-with-a-raspberry-pi\">Building a Stratum 1 NTP Server with a Raspberry Pi<\/a><\/p><\/blockquote>\n<p><iframe class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"&#8220;Building a Stratum 1 NTP Server with a Raspberry Pi&#8221; &#8212; Transmission\" src=\"https:\/\/xmission.com\/blog\/2014\/05\/28\/building-a-stratum-1-ntp-server-with-a-raspberry-pi\/embed#?secret=E4N8k7NbHw\" data-secret=\"E4N8k7NbHw\" width=\"580\" height=\"327\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Network Time Protocol (NTP) is a service that can be used to synchronize\u00a0time on network connected devices. \u00a0 Before we dive into what NTP is, we need to understand why we need accurate time. The obvious thing is network devices need an accurate clock. \u00a0Things like log files with the proper time stamp are important [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1791,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[17,274,86,156,8],"tags":[],"jetpack_publicize_connections":[],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2017\/09\/s_ntp00062.jpg?fit=624%2C470","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6VLMf-sR","jetpack-related-posts":[{"id":2704,"url":"http:\/\/www.mtin.net\/blog\/epmp-beta-3-5-5-rc-8-released\/","url_meta":{"origin":1789,"position":0},"title":"ePMP Beta 3.5.5-RC 8 released","author":"j2sw","date":"December 26, 2018","format":false,"excerpt":"ePMP Beta Release 3.5.5-RC8 is now available for the ePMP and Elevate.\u00a0 The software downloaded at our Software Download Site, ePMP Beta:\u00a0\u00a0https:\/\/support.cambiumnetworks.com\/files\/epmp\/beta New Features Force 190 FCC region support (including DFS functionality) Improvements Multiple improvements to IPv6 operation with cnMaestro and DHCPv6 Fixed Defects [Elevate] NBE-M5-16 produces errors on Ethernet\u2026","rel":"","context":"In &quot;Cambium&quot;","block_context":{"text":"Cambium","link":"http:\/\/www.mtin.net\/blog\/category\/cambium\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1320,"url":"http:\/\/www.mtin.net\/blog\/lepa-second-to-be-added-in-2016\/","url_meta":{"origin":1789,"position":1},"title":"Leap second to be added in 2016","author":"j2sw","date":"July 7, 2016","format":false,"excerpt":"http:\/\/www.space.com\/33361-leap-second-2016-atomic-clocks.html A \"leap second\" will be added to the world's official clocks on Dec. 31 at 23 hours, 59 minutes and 59 seconds Coordinated Universal Time (UTC), which corresponds to 6:59:59 p.m. EST; the clocks will read 23:59:60 before ticking over to midnight. The goal is to keep two different\u2026","rel":"","context":"In &quot;Networking&quot;","block_context":{"text":"Networking","link":"http:\/\/www.mtin.net\/blog\/category\/networking\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":225,"url":"http:\/\/www.mtin.net\/blog\/mikrotik-router-os-6-25-released\/","url_meta":{"origin":1789,"position":2},"title":"Mikrotik Router OS 6.25 released","author":"j2sw","date":"January 19, 2015","format":false,"excerpt":"What's new in 6.25 (2015-Jan-19 10:11): *) certificates - fix SCEP RA operation and SCEP client when operating with RA; *) ppp - report authentication failure cause like in v6.6; *) ovpn server - added support for address lists; *) improved boot times; *) api - fixed missing return values\u2026","rel":"","context":"In &quot;Mikrotik&quot;","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":99,"url":"http:\/\/www.mtin.net\/blog\/router-os-6-18-released\/","url_meta":{"origin":1789,"position":3},"title":"Router OS 6.18 released","author":"j2sw","date":"August 8, 2014","format":false,"excerpt":"From The ChangeLog What's new in 6.18 (2014-Aug-01 10:47): *) sstp - report TLS encryption as well; *) safe mode - do not allow user with less permissions to disrupt active safe mode; *) console - print command does not try to reuse item numbers assigned by previous invocations of\u2026","rel":"","context":"In &quot;Mikrotik&quot;","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1187,"url":"http:\/\/www.mtin.net\/blog\/wisps-growing-up-in-the-tower-industry-part-1\/","url_meta":{"origin":1789,"position":4},"title":"WISPS growing up in the tower industry Part 1","author":"j2sw","date":"May 10, 2016","format":false,"excerpt":"As more and more Wireless ISPs (WISPS) get into licensed microwaves, bigger antennas, and fiber up the tower (FUTT) they are getting into an arena typically reserved just for the Cellular and broadcast folks. \u00a0This can result in an overwhelming amount of things to deal with. If you are renting\u2026","rel":"","context":"In &quot;Tower&quot;","block_context":{"text":"Tower","link":"http:\/\/www.mtin.net\/blog\/category\/tower\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2016\/05\/IMG_9712-e1462901128152-225x300.jpeg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":1373,"url":"http:\/\/www.mtin.net\/blog\/homeland-security-us-cert-e-mail-on-network-infrastructure\/","url_meta":{"origin":1789,"position":5},"title":"Homeland Security US-Cert e-mail on Network infrastructure","author":"j2sw","date":"September 7, 2016","format":false,"excerpt":"A few days ago Homeland Security published an e-mail on threats to network devices and securing them. \u00a0Rather than cut and paste I exported the e-mail to a PDF. Some good best practices in here. TA16250A The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations","rel":"","context":"In &quot;Data Center&quot;","block_context":{"text":"Data Center","link":"http:\/\/www.mtin.net\/blog\/category\/data-center\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/1789"}],"collection":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/comments?post=1789"}],"version-history":[{"count":1,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/1789\/revisions"}],"predecessor-version":[{"id":1792,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/1789\/revisions\/1792"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/media\/1791"}],"wp:attachment":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/media?parent=1789"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/categories?post=1789"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/tags?post=1789"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}