Archive for the ‘NTP Basics’ Category

Synchronizing a Computer Network with a Dedicated Network Time Server

Friday, March 12th, 2010

Synchronization is vital for most computer networks. Timestamps are the only reference a computer can use to analyse when and if processes or applications are completed. Synchronized timestamps are also vital for security, debugging and error logging.

Failure to keep a network adequately synchronized can lead to all sorts of problems. Applications fail to commence, time sensitive transactions will fail and errors and data loss will become commonplace.

However, ensuring synchronization no matter the size of network is straight forward and not costly, thank to the dedicated network time server and the time protocol NTP.

Network Time Protocol (NTP)

NTP has been around even longer than the internet but is the most widely used synchronization protocol available. NTP is free to use and makes synchronization very straight forward. It works by taking a single time source (or multiple ones) and distributes it amongst the network. It will maintain high levels of accuracy even when it loses the original time signal and can make judgements on how accurate each time reference.

NTP Time Server

These come in several forms. Firstly there are a number of virtual time servers across the internet that distributes time free of charge. However, as they are internet based a network is taking a risk leaving a firewall port open for this time communication. Also there is no control over the time signal so if it goes down (or becomes unstable or wholly inaccurate) your network can be left without adequate synchronization.

Dedicated NTP time servers use GPS or radio references to receive the time. This is far more secure and as GPS and radio signals like WWVB (from NIST) are generated by atomic clocks there accuracy is second to none.

Because the NTP protocol is hierarchical it also means that only one dedicated time server needs to be used for a network, no matter the size, as other devices on the network can act as time servers after having rece9ved the time from the primary NTP server.

MSF Downtime on March 11

Sunday, March 7th, 2010

The National Physical Laboratory has announced scheduled maintenance this week (Thursday) meaning the MSF60kHz time and frequency signal will be temporarily turned off to allow the maintenance to be conducted in safety at the Anthorn radio Station in Cumbria.

Normally these scheduled maintenance periods only last a few hours and should not cause any disturbance to anybody relying on the MSF signal for timing applications.
NTP (Network Time Protocol) is well suited to these temporary losses of signal and little if no drift should be experienced by any NTP time server user.

However, there are some high level users of network time servers or may have concerns on the accuracy of their technology during these scheduled periods of no signal. There is another solution for ensuring a continuous, secure and equally accurate time signal is always being used.

GPS, most commonly used for navigation and wayfinding it actually an atomic clock based technology. Each of the GPS satellites broadcasts a signal from their onboard atomic clock which is used by satellite navigation devices that work out the location through triangulation.

These GPS signals can also be received by a GPS NTP time server. Just as MSF or other radio signal time servers receive the external signal from the Anthorn transmitter, GPS time servers can receive this accurate and external signal from the satellites.

Unlike the radio broadcasts, GPS should never go down although it can sometimes be impractical to receive the signal as a GPS antenna needs a clear view of the sky and therefore should preferably be on the roof.

For those wanting to make doubly sure there is never a period when a signal is not being received by the NTP server, a dual time server can be used. These pick up both radio and GPS transmissions and the onboard NTP daemon calculates the most accurate time from them both.

Network Time Protocol and Computer Time Synchronization

Tuesday, February 23rd, 2010

Ask any network administrator or IT engineer and ask them how important network time synchronization is and you’ll normally get the same answer – very.

Time is used in almost all aspects of computing for logging when events have happened. In fact timestamps are the only reference a computer can use to keep tracks of tasks it has done and those that it has yet to do.

When networks are unsynchronized the result can be a real headache for anybody tasked with debugging them. Data can be often lost, applications fail to commence, error logging is next to impossible, not to mention the security vulnerabilities that can result if there is no synchronized network time.

NTP (Network Time Protocol) is the leading time synchronisation application having been around since the 1980’s. It has been constantly developed and is used by virtually every computer network that requires accurate time.

Most operating systems have a version of NTP already installed and using it to synchronise a single computer is relatively straight forward by using the options in the clock settings or task bar.

However, by using the inbuilt NTP application or daemon on a computer will result in the device using a source of internet time as a timing reference. This is all well and good for single desk top machines but on a network a more secure solution is required.

It is vital on any computer network that there are no vulnerabilities in the firewall which can lead to attacks from malicious users. Keeping a port open to communicate with an internet timing source is one method an attacker can use to enter a network.

Fortunately there are alternatives to using the internet as a timing source. Atomic clock time signals can be received using long wave radio or GPS transmissions.

Dedicated NTP time server devices are available that make the process of time synchronisation extremely easy as the NTP servers receives the time (externally to the firewall) and can then distribute to all machines on a network – this is done securely and accurately with most networks synchronised to an NTP server working to within a few milliseconds of each other.

Common Issues in Time Synchronisation

Sunday, January 24th, 2010

Time synchronization is essential in modern computer networking especially with the amount of time sensitive transactions conducted over the internet these days. Without adequate synchronization computer systems will:

  • Be vulnerable to malicious attacks
  • Susceptible to data loss
  • Unable to conduct time sensitive transactions
  • Difficult to debug

Fortunately ensuring a computer network is accurately synchronized is relatively straight forward. There different methods of synchronizing a network to the global timescale UTC (Coordinated Universal Time) but occasionally some common issues do arise.

My dedicated time server is unable to receive a signal

Dedicated NTP time servers receive the time from either long wave transmissions or GPS networks. If using a GPS NTP server then a GPS antenna needs to be situated on a roof to obtain a clear view of the sky. However, a NTP radio receiver does not need a roof mounted aerial although the signal can be vulnerable to interference and the correct angle toward the transmitter should be attained.

I AM using a public time server across the Internet but my devices are not synchronised.

As public time servers can be used by anyone they can receive high levels of traffic. This can cause problems with bandwidth and mean that your time requests can’t get through. Public NTP servers can also fall victim to DDoS attacks and some high profile incidents of NTP vandalism have occurred.

Internet time servers are also stratum 2 devices, in other words they themselves have to connect to a time server to receive the correct time and because of this some online time references are wildly inaccurate.

*NB – internet time servers are also incapable of being authenticated to allow NTP to establish if the time source is coming from where it claims to be, combined with the problem of ensuring the firewall is open to receive the time requests, can mean that internet time servers present a clear risk to security.

The time on my computer seems to be off by a second to standard UTC time

You need to check if a recent leap second has been added to UTC. Leap seconds are added once or twice a year to ensure UTC and the Earth’s rotation match. Some time servers experience difficulties in making the leap second adjustment.

How to Synchronise a Computer Network using the Time Protocol (NTP)

Saturday, January 16th, 2010

Synchronisation of modern computer networks is vitally important for a multitude of reasons, and thanks to the time protocol NTP (Network Time Protocol) this is relatively straightforward.

NTP is an algorithmic protocol that analyses the time on different computers and compares it to a single time reference and adjusts each clock for drift to ensure synchronisation with the time source. NTP is so capable at this task that a network synchronised using the protocol can realistically obtain millisecond accuracy.

Choosing the time source

When it comes to establishing a time reference there really is no alternative than to find a source of UTC (Coordinated Universal Time). UTC is the global timescale, used throughout the world as a single timescale by computer networks. UTC is kept accurate by a constellation of atomic clocks throughout the world.

Synchronising to UTC

The most basic method of receiving a UTC Time source is to use a stratum 2 internet time server. These are deemed stratum 2 as they distribute the time after first receiving it from a NTP server (stratum 1) that is connected to an atomic clock (stratum 0). Unfortunately this is not the most accurate method of receiving UTC because of the distance the data has to travel from host to the client .

There are also security issues involved in using an internet stratum 2 time source in that the firewall UDP port 123 has to be left open to receive the time code but this firewall opening can, and has been, exploited by malicious users.

Dedicated NTP Servers

Dedicated NTP time servers, often referred to as network time servers, are the most accurate and secure method of synchronising a computer network. They operate externally to the network so there are no firewall issues. These stratum 1 devices receive the UTC time direct from an atomic clock source by either long wave radio transmissions or the GPS network (Global Positioning System). Whilst this does require an antenna, which in the case of GPS has to be placed on a rooftop, the time server itself will automatically synchronise hundreds and indeed thousands of different devices on the network.

Using NTP to Synchronise a Digital Signage System

Sunday, January 10th, 2010

Digital signage is advancing quite rapidly for such a burgeoning new industry. Fantastic new innovations and content styles are being developed all the time and there are some really fantastic campaigns out there and more and more adventurous implementations are springing up all the time.

One of a growing number of trends is the use of complicated, scheduled and synchronised campaigns on multiple machines. These are incredibly eye-catching especially when the content is synchronised to provide passers-by with an almost interactive experience.

Synchronised content can be really challenging to implement and this sort of content is certainly not for the beginner as setting up such a sophisticated campaign can be really difficult.

One of the essential aspects of these types of scheduled digital signage campaigns is to ensure all displays are synchronized together. Synchronization is perhaps the most crucial aspect of these types of sophisticated digital signage campaigns. There are multiple methods of synchronising this type of campaign.

One solution is to a network time server which receives a single time source and distributes it amongst all devices on that network using the time protocol NTP (Network Time Protocol).

NTP servers receive the time from an external source (normally GPS or long wave radio) so there is no need to have the network connected to the internet although it is just as possible to synchronise to an internet time source although this can be problematic if there is any disturbance in the internet connection.

Any large network of digital signage displays also need to be protected, especially if media players or PCs are being used to generate content. The best option for ensuring total security is to place both the screen and media device in a display enclosure, often referred to as an LCD enclosure.

Secrets of Time Synchronization Software

Friday, December 4th, 2009

Time synchronization is a crucial aspect of computer networking. Ensuring all machines on a network are synchronised to the global timescale, UTC (Coordinated Universal Time), otherwise time sensitive transactions with other networks would be impossible.

Time synchronization is made easy thanks to the Network Time Protocol (NTP) which was devised in the early days of the Internet for that very purpose. It works be utilising a single time source (usually UTC) which is then distributed amongst all devices on the NTP network.

The UTC time source is often taken from the Internet on networks where security is not a great issue but as this involves leaving an open port in a network firewall for many networks the vulnerability this can leave isn’t worth the risk.

Dedicated network time servers (often referred to as NTP servers) are used by many networks as a secure and even more accurate method of receiving UTC. These devices receive the UTC time direct from an atomic clock source.

Furthermore, these dedicated time servers operate external to the firewall and network and use sources such as GPS or radio frequencies to pick up the time codes.

For ease of synchronisation there are various time synchronisation software packages that run hand-in-hand with NTP and allow, through browser interfaces, easy configuration of the time synchronization throughout the network.

Whilst these time synchronisation software packages aren’t essential in using most NTP servers, the standard software installed in operating systems is often lacking or quite complicated.

Most specialist producers of dedicated network time servers will produce a times service client to allow configuration and these are probably best suited for the device from that suppler. However, there are many freeware and open source time synchronisation software packages that are mostly compatible with many NTP servers.

Common Time Synchronization Pitfalls – Finding UTC

Wednesday, November 25th, 2009

Time synchronization can be a headache for many network administrators attempting to synchronize a network for the first time. There are many pitfalls that an unaware network administrator can fall into when attempting to get every machine on a network to synchronize to the same time.

The first problem many network administrators make is the selection of the time source. UTC (Coordinated Universal Time) is a global timescale and is used throughout the world as a basis for time synchronization as it doesn’t rely on time zones enabling the global community to base itself on one timescale.

UTC is also controlled by a constellation of atomic clocks which ensures its accuracy; however, it is regularly adjusted to ensure that it matches mean solar time by the addition of leap seconds which are added to counter the natural slowing of the Earth’s rotation.

UTC is readily available as a time reference from a number of sources. The Internet is a popular location to receive a UTC time source. However, an Internet time source is located through the network firewall and security issues can arise from having to leave the UDP port open to receive the time requests.

Internet time sources can also be inaccurate and as NTP’s own security system known as NTP authentication cannot work across the Internet further security issues can arise.

A far better solution for getting a source of UTC is to use either the Global Positioning System (GPS) or the long wave radio transmissions broadcast by several national physics laboratories such as NIST in the USA and the UK’s NPL.

Dedicated NTP time servers can receive these secure and authenticated signals and then distribute them amongst all devices on a network.

Setting up Windows XP as an NTP Server

Friday, November 20th, 2009

A network time server or NTP server (Network Time Protocol), is a central computer or server on a network that controls the time and synchronises all machines on that network to it.

Windows XP can be set up to operate as an NTP server to synchronise the rest of the computers and devices on a network. Setting up a Windows XP machine to act as a NTP server involves editing the registry, however, editing an operating system registry can lead to potential problems and should only be conducted by somebody with experience of registry editing.

To configure Windows XP as an NTP server the first thing to do is to open the registry editor in Windows. This is done by clicking the Start button and selecting “Run” from the menu. Enter “regedit” in the run menu and press return. This should open the Windows registry editor.

Select the: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer\ folder in the left hand pane. This folder holds the values for the NTP server.

Right-click the “Enabled” key in the right window pane and select “Properties”. This should open a dialog box where you can alter the value of the registry key. Enter “1″ in the window, setting the value to “True” which turns the XP computer into a time server.

Close the registry and open the DOS command prompt by clicking the Windows Start button, selecting “Run”. Then type “cmd” in the text box and press return.

Type “Net stop w32time” into the command prompt and press “Enter.” Now type “net start w32time” this will restart the time server for Windows XP.

However, the XP machine, which is now set as a NTP server, will merely distribute the time it currently holds. If this time is inaccurate then it will inaccurate time that is distributed amongst the network.

To ensure an accurate and secure source of time is used then a dedicated NTP time server that receives the time from an atomic clock source should be used.

Auditable Time Synchronization with an NTP Server

Saturday, November 14th, 2009

Time synchronization is crucial for many modern applications. Whilst computer networks all have to be running in perfect time to prevent errors and ensure security other systems require time synchronization for legal reasons.

Average speed cameras, traffic light cameras, CCTV, parking meters and alarm systems to name but a few, all require accurate time synchronization not just to ensure the correct operation of the systems but also to provide an auditable and legal trail for use in prosecutions.

Failure to do so can lead to the system being completely useless as any legal case based around the technology would need to be provable.

For instance, a CCTV network that is not synchronized would not be admissible in court, a defendant could easily claim that an image of them on a camera could not be them as they were not in the vicinity at the time and unless the camera system can be audited and proved to be accurate then reasonable doubt would see any case against the suspect dropped.

For this reason, systems like those mentioned above require complete auditable time synchronisation that can be proven beyond reasonable doubt in a court system.

An auditable system of time synchronization is only possible by using a dedicated NTP time server (Network Time Protocol). NTP servers not only provide an accurate method of synchronization being accurate to a few milliseconds they also provide a full audit trail that can’t be disputed.

NTP server systems use the GPS network or specialist radio transmissions to receive the atomic clock time which is so accurate the chance of it being even a second out from UTC time (Universal Coordinated Time) is over 3 billion to one which is even greater than the accuracy of other legal evidences such as DNA.