Re: [Ntp] NTP over PTP

Doug Arnold <doug.arnold@meinberg-usa.com> Wed, 30 June 2021 16:00 UTC

Return-Path: <doug.arnold@meinberg-usa.com>
X-Original-To: ntp@ietfa.amsl.com
Delivered-To: ntp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 853033A2135 for <ntp@ietfa.amsl.com>; Wed, 30 Jun 2021 09:00:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=meinberg-usa.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rYgSUOtlWy8U for <ntp@ietfa.amsl.com>; Wed, 30 Jun 2021 09:00:07 -0700 (PDT)
Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2040.outbound.protection.outlook.com [40.107.22.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E36A33A2196 for <ntp@ietf.org>; Wed, 30 Jun 2021 09:00:05 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=chuLluv/BZ3GBTSpUUpw1xL3TSGws0u/iorWTAv5GBKBvbQmsJV9WX3e160QEB++VQHqNu+5ci9KuoqPEqD1aIUwXJ1n364cI5KbE3XvWuWFq2hZZyw3bzmuggEsDX8iVHEZNlnEuiEghx1WG/G+nfUKdBh0hgRpmKLIfDuC/+r3kqk7rnnTRrIzcQLcXduT9LGYckAKRwd0za6x1oSAVeiHodPYFR3JcKuxJwFrHOHAXKfarhz7kPFe4EZ49sNy1bcDTxMC8gjtrv/S4NqHzQ2eAncBu6Uz5RGifE8Mjvzi1BG/a2viDVYiS6XYPnPo+UL5ddhbQn4CfGtcyen/Mw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pPuZFibXYCjrNXl1cJavMr/XnT0eQ+lEMle1cW/nwUc=; b=HewLEtDqwu+AYGUVwPdDUQGPMa9gpQL+w0oGzBPlKQftDS5G5K8znvNmPb567/uNCH0N3cwBWJcbJ2JhF4OZcb0tb4vM73A0bVxIU8muKMEQ0YStYSR+9F4r6JnBYwlobdF8TCDy02seOp6Q2WHjudsCer7CmBcDtrXvokBfk8EDsQzdPSwPMEL6DHNceKB4YyD/UkvCx2LFfeJ6a8DzEiJQBa748vvQ/D11mnPZlWOIGaE/UfbLPxeAAzzF8uBJIP1sk0C/2c31Z01u675z6K4jC7NscEdJp2t+uAkkXHBQThfpB4zhjkJ3osRLz/IWuJ3DKoOD/6C8SOkZMAe3Jg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=meinberg-usa.com; dmarc=pass action=none header.from=meinberg-usa.com; dkim=pass header.d=meinberg-usa.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=meinberg-usa.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pPuZFibXYCjrNXl1cJavMr/XnT0eQ+lEMle1cW/nwUc=; b=k5saGBdalKesv3eb4BoOCAJZLWyxYJ3IeAsR2tVWL+KbFne3sr8pH4FiTjmIQwwA0GG+3ueq1k9AvTPZNeTG64s6/kJM3rYtb+laaYdOGP3xrG1YWvkTHipQoMQCivBJkBqLtjPQe2Rr7xCBvghrBCInoS5rvIEWaOwLdjDUaqjmiPfwblGNfyJOLk3/WtTpxxlmzXRTLqvLC+8mdGah8mCfAo3hKFLn97dgiiWSy07J42mirr+sjBtgCWyW3Qk4pgCWPqNh+fFXn5RbPKfb5EnFXSKNc9WZs8lQDHH62hao5v1m5oMHKbqzP68cP0tqaJbFjimYD/zIqQ5UkTFVCQ==
Received: from AM7PR02MB5765.eurprd02.prod.outlook.com (2603:10a6:20b:102::15) by AM6PR02MB4849.eurprd02.prod.outlook.com (2603:10a6:20b:32::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.23; Wed, 30 Jun 2021 16:00:03 +0000
Received: from AM7PR02MB5765.eurprd02.prod.outlook.com ([fe80::7021:78f3:a3bd:4cd9]) by AM7PR02MB5765.eurprd02.prod.outlook.com ([fe80::7021:78f3:a3bd:4cd9%7]) with mapi id 15.20.4242.023; Wed, 30 Jun 2021 16:00:03 +0000
From: Doug Arnold <doug.arnold@meinberg-usa.com>
To: Miroslav Lichvar <mlichvar@redhat.com>
CC: Heiko Gerstung <heiko.gerstung=40meinberg.de@dmarc.ietf.org>, "ntp@ietf.org" <ntp@ietf.org>
Thread-Topic: [Ntp] NTP over PTP
Thread-Index: AQHXaOy2RanQBIDiAE2pVM3dA2BOcKskskeAgATDsICAABV6gIABCUeAgAAGegCAAChPAIAAG2qAgABL+umAATXuAIAAPcDI
Date: Wed, 30 Jun 2021 16:00:02 +0000
Message-ID: <AM7PR02MB576555169C653527B299C2C2CF019@AM7PR02MB5765.eurprd02.prod.outlook.com>
References: <YNRtXhduDjU4/0T9@localhost> <36AAC858-BFED-40CE-A7F7-8C49C7E6782C@meinberg.de> <YNnSj8eXSyJ89Hwv@localhost> <D32FAF20-F529-496C-B673-354C0D60A5AF@meinberg.de> <YNrDGy2M2hpLz9zc@localhost> <C5D99A22-84B8-4D27-BE74-D8267FB1DCB0@meinberg.de> <YNrqWjHPtC7ToAL8@localhost> <125F908E-F80D-4873-A164-A460D96316E5@meinberg.de> <AM7PR02MB576508DB03AF7D49E0624227CF029@AM7PR02MB5765.eurprd02.prod.outlook.com>, <YNxFEhgivRMpQo1K@localhost>
In-Reply-To: <YNxFEhgivRMpQo1K@localhost>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: redhat.com; dkim=none (message not signed) header.d=none;redhat.com; dmarc=none action=none header.from=meinberg-usa.com;
x-originating-ip: [64.30.82.72]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 85006ab6-a5e1-4dd5-7023-08d93be01f1c
x-ms-traffictypediagnostic: AM6PR02MB4849:
x-microsoft-antispam-prvs: <AM6PR02MB4849A89623B90010CDFF03BFCF019@AM6PR02MB4849.eurprd02.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR02MB5765.eurprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(376002)(39830400003)(346002)(136003)(396003)(366004)(66556008)(66476007)(64756008)(71200400001)(66946007)(66446008)(52536014)(26005)(478600001)(316002)(2906002)(5660300002)(53546011)(6506007)(83380400001)(4326008)(44832011)(76116006)(86362001)(9686003)(186003)(54906003)(122000001)(38100700002)(55016002)(91956017)(33656002)(6916009)(7696005)(8676002)(8936002); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_AM7PR02MB576555169C653527B299C2C2CF019AM7PR02MB5765eurp_"
MIME-Version: 1.0
X-OriginatorOrg: meinberg-usa.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM7PR02MB5765.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 85006ab6-a5e1-4dd5-7023-08d93be01f1c
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jun 2021 16:00:02.9201 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d59904cd-769f-4368-8bd0-f5f435893a38
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: t15N0r8ISM1sS1BrK5PLGvZ4RGE6dTN1D1urerxZ2+660DKaWJ63BgbiWOOzy0MJhaYtVyBlGoTw2QHYk1Xy1GNfmNbk1K1HqRciCV+GOxM=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR02MB4849
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/EWUmYvA8FR05-VLCmxdlXlso7Rs>
Subject: Re: [Ntp] NTP over PTP
X-BeenThere: ntp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Network Time Protocol <ntp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ntp>, <mailto:ntp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp/>
List-Post: <mailto:ntp@ietf.org>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ntp>, <mailto:ntp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Jun 2021 16:00:18 -0000

Hello Miroslav

RE: acceptance of NTP over PTP
Obviously I do not speak for everyone, and I could be mistaken. But I talk to a lot of vendors and network operators and this is my take on where they are coming from.  I also believe that I have a good sense of the PTP standards world and doubt that anyone will include NTP over PTP in a PTP Profile.  NTP over PTP is a clever hack, and might be done quickly, but I think people will want something cleaner with fewer redundant message fields.  People in standards meetings frequently talk about the importance of keeping PTP messages small.

RE: use of unicast PTP in telecom:
Yes, telecom will use full on path support as soon as they can, and switch to G.8275.1 with SyncE.  But that is probably a decade out for some carriers.  Telecom grade switches are just too expensive to replace because they don’t support PTP. They replace them on a schedule that is planned for years in advance.  An active area of discussion in the ITU these days in defining the “interworking function.”  This is basically a boundary clock that translates between two PTP profiles, mainly to facilitate the gradual transition from G.8275.2 to G.8275.1.

RE: History of the ITU, NTP WG and IEEE 1588
About twenty years ago, after the telecom industry changed to Ethernet and packet switched networks, they knew that they needed packet based time transfer.  All of the telecom equipment vendors started presenting lab research papers at the annual T1 X1 workshops (now called WSTS) on what they called “carrier grade NTP”.  By this they meant NTP packets, but with high message rates, and different algorithms for clock steering and server selection.  Some people in the NTP WG proposed separating the over the wire protocol from the algorithms, just as you have done in your draft NTPv5.  Others in the working group wanted to keep NTP as a coherent complete solution for general IT use cases, as it traditionally had been.  The complete solution camp prevailed.  I can understand that.  NTP is spectacularly successful at meeting the general IT needs.

I went to an IEEE 1588 meeting in the early days of version two.  We were surprised when twice as many people showed up as had attended previously.  All of the new people worked for telecom equipment vendors, and were members of the ITU-T.  They explained to us that they had given up on carrier grade NTP and hoped that IEEE 1588 would help them.  That was about 2005.  After a few fierce arguments we agreed to make changes to PTP that they wanted.  Among the concessions was unicast PTP.  So the telecom folks got their carrier grade NTP after all.

If you want another take on this ask anyone who was in these groups 15 years ago: the NTP WG, IEEE 1588, ITU-T Q13/15.

RE: NTPv5 and protocol algorithm split
Some people in the finance industry have recently reinvented carrier grade NTP and prefer it to PTP.  They like that clients getting time from multiple servers is the norm, and the clients figure out which servers to believe, rather than running a BMCA as in PTP.

That is why I actively support the separating of protocol and algorithms in NTPv5, including supporting your proposal.  I may be the chair of IEEE 1588, but I’m not interested in turf wars.  I want the network operators to have everything they need, including a more flexible NTP, and a more secure PTP.

Doug

From: Miroslav Lichvar <mlichvar@redhat.com>
Date: Wednesday, June 30, 2021 at 6:19 AM
To: Doug Arnold <doug.arnold@meinberg-usa.com>
Cc: Heiko Gerstung <heiko.gerstung=40meinberg.de@dmarc.ietf.org>, ntp@ietf.org <ntp@ietf.org>
Subject: Re: [Ntp] NTP over PTP
On Tue, Jun 29, 2021 at 05:10:02PM +0000, Doug Arnold wrote:
> PTP with embedded NTP messages would not be accepted by the equipment vendors who make PTP capable devices, and not be accepted by network operators who deploy PTP.

Do you speak for all vendors and operators?

> Even when the PTP ATHENTICATION TLV was defined people were concerned about making PTP messages longer.  The NTP messages would be redundant information that adds no value, accept for the attached ICV.  So why not just add the ICV and skip the NTP message.

Yes, you can do that, but you will not get all of the security of
NTS4NTP, which some people here seem to be interested in. You can
think of the NTP TLV as an authentication TLV that provides you with
that. It has to be longer as it contains the keys.

> However some industries are wedded to unicast PTP.  Telecom is heavily invested in PTP for wireless back haul timing.  The investment is in their standards, in product development and network deployment.

I'm somewhat familiar with the ongoing efforts in the telecom
industry. From what I understand, they are not going to use unicast
PTP in the new-generation networks. It's only for the older
generations as it cannot meet the new requirements. They need full
on-path support (i.e. G.8275.1) and in some cases even SyncE. Please
correct me if I'm wrong.

> Their contributions to the definition of NTPv4 were rejected,

This is the interesting part for me. Is the discussion archived
anywhere?

--
Miroslav Lichvar