NTP Servers and the Different Time Sources

  |   By

NTP servers are essential devices for computer network time synchronisation. Ensuring a network coincides with UTC (Coordinated Universal Time) is vital in modern communications such as the Internet and is the primary function of the network time server (NTP server).

As their name suggests, these time servers use the protocol NTP (Network Time Protocol) to handle the synchronisation requests. NTP is already installed in many operating systems and synchronisation is possible without an NTP server by utilising an Internet time source, this can be unsecure and inaccurate for many network needs.

Network time servers receive a far more accurate and secure time signal. There are two methods of receiving the time using a time server: utilising the GPS network or receiving long wave radio transmissions.

Both these methods of receiving a time source are secure as they are external to any network firewall. They are also accurate as both sources of time are generated directly by atomic clocks rather than an Internet time service that are normally NTP devices connected to a third party atomic clock.

The GPS network provides an ideal source of time for NTP servers as the signals are available anywhere. The only downside of using the GPS network is that a view of the sky is required to lock-on to a satellite.

Radio referenced time sources are more flexible in that the long wave signal can be received indoors. They are limited in strength and not every country has a time signal although some signals such as the German DCF and the USA WVBB are available in neighbouring states.

Auditable Time Synchronization with an NTP Server

  |   By








Benefits of Accurate Network Time Synchronization

  |   By

Your computer probably does hundreds and thousands of tasks a day. If that is part of a network then the number of tasks could be millions. From sending emails to saving data, and everything else your computer is tasked to do, they are all logged by the computer or server.

Computers use timestamps to logo processes and indeed, timestamps are used as the only method a computer has to indicate when and if a task or application has been conducted. Timestamps are normally a 16 or 32 bit integer (one long number) that counts back the seconds from a prime epoch – normally 01 January 1970.

So for every task you computer does it will be stamped with the number of seconds from 1970 that the transaction was conducted. These timestamps are the only piece of information a computer system has to ascertain what tasks have been completed and what tasks have yet to be instigated.

The problem with computer networks of more than one machine is that the clocks on individual devices are not accurate enough for many modern time sensitive applications. Computer clocks are prone to drift they are typically based on inexpensive crystal oscillator circuits and can often drift by over a second a day.

This may not seem much but in today’s time sensitive world a second can be a long time indeed especially when you take into account the needs of industries like the stock exchange where a second can be the difference in price of several percent or online seat reservation, where a second can make the difference between an available seat and one that is sold.

This drift is also accumulative so within only a few months the computer systems could be over a minute out of sync and this can have dramatic effects on time sensitive transactions and can result in all sorts of unexpected problems from emails not arriving as a computer thinks they have arrived before they have been sent to data not being backed up or lost completely.

A NTP time server or network time server are increasingly becoming crucial pieces of equipment for the modern computer network. They receive an accurate source of time from an atomic clock and distribute it to all devices on the network. As atomic clocks are incredibly accurate (they won’t drift by a second even in a 100,000 years) and the protocol NTP (Network Time Protocol) continually checks the devices time against the master atomic clock time – it means the computer network will be able to run perfectly synchronised with each device within a few milliseconds of the atomic clock.

Reasons for Atomic Clock Timing

  |   By







Using Atomic Clocks to Synchronize a Network

  |   By

Most computer networks have to be synchronized to some degree. Allowing the clocks on computers across a network to all be telling different times is really asking for trouble. All sorts of errors can occur such as emails not arriving, data getting lost, and errors get unnoticed as the machines struggle to makes sense of the paradoxes that unsynchronized time can cause.

The problem is computers use time in the form of timestamps as the only point of reference between different events. If these don’t match then computers struggle to establish not only the order of events but also if the events took place at all.

Synchronizing a computer network
together is extremely simple, thanks largely to the protocol NTP (Network Time Protocol). NTP is installed on most computer operating systems including Windows and most versions of Linux.

NTP uses a single time source and ensures that every device on the network is synchronized to that time. For many networks this single time source can be anything from the IT manager’s wrist watch to the clock on one of the desktop machines.

However, for networks that have to communicate with other networks, have to deal with time sensitive transactions or where high levels of security are required then synchronization to a UTC source is a must.

Coordinated Universal Time (UTC) is a global timescale used by industry all over the world. It is governed by a constellation of atomic clocks making it highly accurate (modern atomic clocks can keep time for 100 million years without losing a second).

For secure synchronization to UTC there is really only one method and that is to use a dedicated NTP time server. Online NTP servers are used by some network administrators but they are taking a risk not only with the accuracy of the synchronization but also with security as malicious users can imitate the NTP time signal and penetrate the firewall.

As dedicated NTP servers are external to the firewall, relying instead on the GPS satellite signal or specialist radio transmissions they are far more secure.

Choosing a Time Source what to do and what not to do

  |   By

Time synchronization is crucial for many of the applications that we do across the internet these days; internet banking, online reservation and even online auctions all require network time synchronization.

Failing to ensure their servers are adequately synchronized would mean many of these applications would be impossible to achieve; seat reservations could be sold more than once, lower bids could win internet auctions and it would be possible to withdraw you life savings from the bank twice if they didn’t have adequate synchronization (good for you not for the bank).

Even computer networks that on the face of it do not rely on time sensitive transactions also need to be adequately synchronized as it could be near impossible to track down errors or protect the system from malicious attacks if the timestamps on differ on various machines on the network.

Many organisations opt to use internet time servers as a source of UTC (Coordinated Universal Time) – the atomic clock controlled global timescale. Although there are many security issues in doing so such as leaving a hole in the firewall to communicate with the time server and not having any authentication for the time synchronization protocol NTP (Network Time Protocol).

However, in saying that many network administrators still opt to use online time servers as a UTC source regardless of the security implications although there are other issues that administrators should be aware of. On the internet there are two types of time server – stratum 1 and stratum 2. Stratum 1 servers receive a time signal direct from an atomic clock while stratum 2 servers receive a time signal from a stratum 1 server. Most internet stratum 1 servers are closed – unavailable to most administrators and there can be some shortfall in accuracy in using a stratum 2 server.

For the most accurate, secure and precise timing information external NTP time servers are the best option as these are stratum 1 devices that can synchronize hundreds of machines on a network to the exact same UTC time.

The NTP Time Server Essential Network Protection

  |   By

There are a myriad of hardware and software methods of protecting computers. Anti-virus software, firewalls, spyware and routers to name but a few yet perhaps the most important tools for keeping a network safe is often the most overlooked.

One of the reasons for this is that the network time server’s often referred to as the NTP time server (after the protocol Network Time Protocol) primary task is time synchronisation and not security.

The NTP server’s primary task is to retrieve a time signal from a UTC source (Coordinated Universal Time) which it then distributes it amongst the network, checking the clock on each system device and ensuring its running in synchronisation with UTC.

Here is where many network administrators fall down. They know that time synchronisation is vital for computer security. Without it, errors can not be logged (or even spotted) network attacks can’t be countered, data can be lost and if a malicious user does get into the system it is near impossible to discover what they were up to without all machines on a network corresponding to the same time.

However, the NTP server is where many network administrators think they can save a little money. ‘Why bother?’ ‘They say, ‘when you can log on to an Internet NTP server for free.’

Well, as the old saying goes there is no such thing as a free lunch or as it goes a free source of UTC time. Using internet time providers may be free but this is where many computer networks leave themselves open to abuse.

To utilise an internet source of time such as Microsoft’s, NIST or one of those on the NTP pool project may be free but they are also outside a networks firewall and these is where many network administrators come unstuck.

Why the Need for NTP

  |   By

Network Time Protocol is an Internet protocol used to synchronize computer clocks to a stable and precise time reference. NTP was originally developed by Professor David L. Mills at the University of Delaware in 1985 and is an Internet standard protocol and is used in most network time servers, hence the name NTP server.

NTP was developed to solve the problem of multiple computers working together and having the different time. Whilst, time usually just advances, if programs are running on different computers time should advance even if you switch from one computer to another. However, if one system is ahead of the other, switching between these systems would cause time to jump forward and back.

As a consequence, networks may run their own time, but as soon as you connect to the Internet, effects become visible. Just Email messages arrive before they were sent, and are even replied to before they were mailed!

Whilst this sort of problem may seem innocuous when it comes to receiving email, however, in some environments a lack of synchronisation can have disastrous results this is why air traffic control was one of the first applications for NTP.

NTP uses a single time source and distributes it amongst all devices on a network it does this by using an algorithm that works out how much to adjust a system clock to ensure synchronisation.

NTP works on a hierarchical basis to ensure there are no network traffic and bandwidth problems. It uses a single time source, normally UTC (coordinated universal time) and receives time requests from the machines on the top of the hierarch which then pass the time on further down the chain.

Most networks that utilise NTP will use a dedicated NTP time server to receive their UTC time signal. These can receive the time from the GPS network or radio transmissions broadcast by national physics laboratories. These dedicated NTP time servers are ideal as they receive time direct from an atomic clock source they are also secure as they are situated externally and therefore do not require interruptions in the network firewall.

NTP has been an astronomical success and is now used in nearly 99 per cent of time synchronisation devices and a version of it is included in most operating system packages.

NTP owes much of its success to the development and support it continues to receives nearly three decades after its inception which is why t is now used throughout the world in NTP servers.

Security and Synchronisation

  |   By








How to Synchronise a Computer to an Atomic Clock

  |   By

Time synchronisation is often a much underrated aspect of computer management. Generally time synchronisation is only crucial for networks or for computers that a take in time sensitive transactions across the internet.

Time synchronisation with modern operating systems such as Windows Vista, XP or the different versions of Linux is relatively easy as most contain the time synchronisation protocol NTP (Network Time Protocol) or a simplified version at least (SNTP).

NTP is an algorithm based program and works by using a single time source that can be distributed amongst the network (or a single computer) and is constantly checked to ensure the network’s clocks is running accurately.

For single computer users, or networks where security and precision are not primary concerns (although for any network security should be a main issue) then the simplest method of synchronising a computer is to use an internet time standard.

With a Windows operating system this can easily be done on a single computer by double clicking the clock icon and then configuring the internet time tab. However, it must be noted that in using an internet based time source such as nist.gov or windows.time, a port will have to be left open in the firewall which could be taken advantage of by malicious users.

For network users and those not wanting to leave vulnerabilities in their firewall then the most suitable solution is to use a dedicated network time server. Most of these devices also use the protocol NTP but as they receive a time reference externally to the network (usually by way of GPS or long wave radio) the leave no vulnerabilities in the firewall.

These NTP server devices are also far more reliable and accurate than internet time sources as they communicate directly with the signal from an atomic clock rather than being several tiers (in NTP terms known as strata) from the reference clock as most internet time sources are.