[Ntp] Re: NTPv5: Operational use case for server/node identification

Harlan Stenn <stenn@ntp.org> Tue, 21 July 2026 02:53 UTC

Return-Path: <stenn@ntp.org>
X-Original-To: ntp@mail2.ietf.org
Delivered-To: ntp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 74B9C11AF37ED for <ntp@mail2.ietf.org>; Mon, 20 Jul 2026 19:53:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784602394; bh=MKiQ3lUV5FBa0UcXRDIYNbUaAbDYbFfheAhxa47HO9M=; h=Date:Subject:To:Cc:References:From:In-Reply-To; b=yyrFPBFEeFGCu+03J++FcvtMixQPtnji3bm4gh+UKX/leG/c1jZ6IvFL9dh7lfmAV ELfkc9+hRaLt9isNFEl4AmDLLFO1sD1qL+j+1KA08115KYW0LgpFD+170ajAres7s0 REbZsbTq3aIZcypGsponSl83WHjwREJWHWsgAqk4=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.101
X-Spam-Level:
X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=ntp.org
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lCsrSJiKq7_v for <ntp@mail2.ietf.org>; Mon, 20 Jul 2026 19:53:13 -0700 (PDT)
Received: from tom.everett.org (tom.everett.org [IPv6:2001:470:1:205::237]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 5402511AF37E3 for <ntp@ietf.org>; Mon, 20 Jul 2026 19:53:12 -0700 (PDT)
Received: from [192.168.8.129] (nat0.srs1.ntfo.org [209.148.110.245]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by tom.everett.org (Postfix) with ESMTPSA id C0C732C62F; Mon, 20 Jul 2026 19:53:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ntp.org; s=tom20260501; t=1784602390; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=s4FfuCInY4jUWHp/lU8DPv+OrYZpfK4/oE3Hl2wHxmw=; b=s5Xh10u5jATY7Ff0C26LChCdRvtU4dKhrAn3KbC7W7NjWfrVJt4i7RPUGyPRhjOczK7wbe 57s1J7ufhj8vOfoYdcXo97hkWNznliM1i6VZxqIvm6Rs5tBtwsnTQznVb2yndoQAyjqI7z YTNKk46UuZCSpQoTvGpwkZhJ7Iehf1g=
Message-ID: <b9298b6a-4f6c-42b3-a685-65bc0d66e15e@ntp.org>
Date: Mon, 20 Jul 2026 19:52:59 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: Miroslav Lichvar <mlichvar=40redhat.com@dmarc.ietf.org>, Hal Murray <halmurray@sonic.net>
References: <sarah.grant.ietf@gmail.com> <CAATxVg6ypG75dRXMySEs1JFSCjRZ_3wQ985U-7P3WRjBnBEgNw@mail.gmail.com> <20260720113007.9E45662003D@107-137-68-211.lightspeed.sntcca.sbcglobal.net> <al4OJLpJCgUZX5wD@localhost>
Content-Language: en-US
From: Harlan Stenn <stenn@ntp.org>
In-Reply-To: <al4OJLpJCgUZX5wD@localhost>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Message-ID-Hash: 62B5HFZ334ISQJOLA67GXYEHA6X3D5YS
X-Message-ID-Hash: 62B5HFZ334ISQJOLA67GXYEHA6X3D5YS
X-MailFrom: stenn@ntp.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ntp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Sarah Grant <sarah.grant.ietf@gmail.com>, ntp@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Ntp] Re: NTPv5: Operational use case for server/node identification
List-Id: Network Time Protocol <ntp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/2rNd1SH0VTmn70s5g2x02lNb3Us>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Owner: <mailto:ntp-owner@ietf.org>
List-Post: <mailto:ntp@ietf.org>
List-Subscribe: <mailto:ntp-join@ietf.org>
List-Unsubscribe: <mailto:ntp-leave@ietf.org>

On 7/20/2026 5:01 AM, Miroslav Lichvar wrote:
> On Mon, Jul 20, 2026 at 04:30:07AM -0700, Hal Murray wrote:
>> I think we should continue the no-amplification in size policy.
> 
> +1

No-amplification should be a SHOULD, not a MUST.

H
--
> The document says the request EF length is 0, which is not a valid
> length in NTPv4/v5 as it must cover also the EF header.
> 
>> One way to do that is for the client's request to have unused space.
>>
>> Next, we need to know how much space the server needs and/or if the answer
>> fit in the space allocated.
>>
>> How about using the first byte of the answer as a size?  0 on the client
>> size means empty.  n on the server size tells you the actual length if it
>> is <= than the size of the field, or the actual size if the answer has
>> been truncated to fit.
> 
> If it needs to work in both NTPv4 and NTPv5, yes, that would make
> sense to me, assuming 255 bytes as the maximum length is sufficient.
> 
> If it was only for NTPv5 (which allows EF lengths not divisible by 4)
> the additional length field wouldn't be necessary. The client would
> know it got everything when the EF in the response is shorter than in
> the request.
> 
>> I think we should keep the overall packet size the same even if that
>> leaves empty space in the answer slot.  The idea is to avoid timing
>> asymmetry due to different packet lengths on the wire between request and
>> response..
> 
> In NTPv5 the padding EF could be used instead, but for NTPv4 with its
> special restrictions on EF lengths that wouldn't work.
> 

-- 
Harlan Stenn <stenn@ntp.org>
NTP Project Lead.  The NTP Project is part of:
https://www.nwtime.org/ - be a member!