[Ntp] Re: NTPv5: Operational use case for server/node identification

Miroslav Lichvar <mlichvar@redhat.com> Wed, 15 July 2026 13:15 UTC

Return-Path: <mlichvar@redhat.com>
X-Original-To: ntp@mail2.ietf.org
Delivered-To: ntp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id C9A73117306E1 for <ntp@mail2.ietf.org>; Wed, 15 Jul 2026 06:15:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784121337; bh=p2f7ryUQxQZ4XbFfwe+TtpXJVZydniNyPJERsyChr9Y=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=R8QLcaNei58+NMSOBFsIRYJGwLzwvMbBF5fikbhMSSfLaQF1Q00iAT4b8PxYsFT7x uIUzREAEPTOWEeJ3WGapeA9klKWd77vK3AIbQ/jV4B3i9kfX6chWFIFU/627vdl7DJ gUr9EpUwPwNXWi9HAmdmmDIf7UclT4CaTkp2JrvA=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=redhat.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id foY9XLelBAXS for <ntp@mail2.ietf.org>; Wed, 15 Jul 2026 06:15:37 -0700 (PDT)
Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id AC19B117306B7 for <ntp@ietf.org>; Wed, 15 Jul 2026 06:15:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1784121316; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=aoWIkoQDDOGXKD91qDxz4QPK7qXrdWnBu5rPFjmdMXk=; b=fFgHxz38YrSn40w1ONZfRU5vo6ijMn4RkBOpD1kO4Vme10+udxIGPiemFoTKrEmZz7XE8c 51Wog4/EvTW0TmaU8L7XSsSplc6qRC+nURAjBHj8vOEOqFD7UOJ/mF78bgk3YuNbEwMAt2 TRsQD8O/J7+QKYuLp8Ccfwlz8pNgZYU=
Received: from mx-prod-mc-08.mail-002.prod.us-west-2.aws.redhat.com (ec2-35-165-154-97.us-west-2.compute.amazonaws.com [35.165.154.97]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-43-3pJ1AVg7Otemm5JH5hJy3A-1; Wed, 15 Jul 2026 09:15:14 -0400
X-MC-Unique: 3pJ1AVg7Otemm5JH5hJy3A-1
X-Mimecast-MFC-AGG-ID: 3pJ1AVg7Otemm5JH5hJy3A_1784121313
Received: from mx-prod-int-01.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-01.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 9F3EB180065A; Wed, 15 Jul 2026 13:15:13 +0000 (UTC)
Received: from localhost (unknown [10.43.135.229]) by mx-prod-int-01.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 688B830001A4; Wed, 15 Jul 2026 13:15:12 +0000 (UTC)
Date: Wed, 15 Jul 2026 15:15:10 +0200
From: Miroslav Lichvar <mlichvar@redhat.com>
To: "Giovane C. M. Moura" <giovane.moura=40sidn.nl@dmarc.ietf.org>
Message-ID: <aleH3kY8gf0_P6ZY@localhost>
References: <a5115529-0e8e-4609-bed1-964566a4356b@sidn.nl> <CAJm83bD_T3wKE9DksG2d4nWD+6h4uZYr_pe-dmMk1fF1okg6fQ@mail.gmail.com> <05213a22-5b99-4355-b93a-e43311d0f281@sidn.nl> <CAD4huA5zh2Q4PVbShA3GhUZrMPyDbd=BvbOZJYVAAnnHrcr1ig@mail.gmail.com> <6203b440-8445-4b56-98a8-e468ec9bb50c@sidn.nl> <CAD4huA75cY+HCHNeYP621QCvpRdXy97Rms+sHBbmu_pjHfVfFA@mail.gmail.com> <7b30d0e9-40a9-40a9-83d7-47428a313279@sidn.nl>
MIME-Version: 1.0
In-Reply-To: <7b30d0e9-40a9-40a9-83d7-47428a313279@sidn.nl>
X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.4
X-Mimecast-Spam-Score: 0
X-Mimecast-MFC-PROC-ID: xSki14mDWOFZq4E896UeVjXHsvynf6PWOD_gfm0ahV0_1784121313
X-Mimecast-Originator: redhat.com
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
Message-ID-Hash: UDEPQX7P4YNA2VAUQZQDJWUVQHVAXVWU
X-Message-ID-Hash: UDEPQX7P4YNA2VAUQZQDJWUVQHVAXVWU
X-MailFrom: mlichvar@redhat.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ntp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Steven Sommars <stevesommarsntp@gmail.com>, marco.davids+ietf@sidn.nl, ntp@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Ntp] Re: NTPv5: Operational use case for server/node identification
List-Id: Network Time Protocol <ntp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/jfXLhdaJj5gSgoFIIjSCi30VoZk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Owner: <mailto:ntp-owner@ietf.org>
List-Post: <mailto:ntp@ietf.org>
List-Subscribe: <mailto:ntp-join@ietf.org>
List-Unsubscribe: <mailto:ntp-leave@ietf.org>

On Wed, Jul 15, 2026 at 11:08:29AM +0200, Giovane C. M. Moura wrote:
> I don't think this should be an issue for real clients -- I assume chrony
> and ntpd-rs, and others, bind one source port per association and keep it,
> so the hash is constant and a real client stays pinned.

chrony by default changes source port with each request. That should
be ok per RFC 9109. The filtering algorithm prefers measurements from
the closest server.

As for the server identification, I'd be ok with a new optional
extension field to provide a server ID as a string, something along
the lines of the current draft ID.

-- 
Miroslav Lichvar