Re: [Ntp] ntp-over-ptp concerns

Miroslav Lichvar <mlichvar@redhat.com> Wed, 13 March 2024 14:32 UTC

Return-Path: <mlichvar@redhat.com>
X-Original-To: ntp@ietfa.amsl.com
Delivered-To: ntp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F599C14F6FD for <ntp@ietfa.amsl.com>; Wed, 13 Mar 2024 07:32:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.103
X-Spam-Level:
X-Spam-Status: No, score=-7.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhat.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id smXtWV7JEL9d for <ntp@ietfa.amsl.com>; Wed, 13 Mar 2024 07:32:13 -0700 (PDT)
Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9BE34C14F6A9 for <ntp@ietf.org>; Wed, 13 Mar 2024 07:32:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1710340332; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=dmg2JVGA1rTMExaLoWLEJ9hege7B7bPQzeE0rhL5fBU=; b=DtQvUSnqv93STyE3hhWUxvxHiKWdXRO2e3Yg/8kX9mAaxPeKBbjULfkOO6gQO5z1o9qLFW jH80fZiRoqH4QsRyV0+Xvmy4ruAQJlW9L5blLf9UGP4bWkxo5VyGXgQQsgzSqrJsBCI42g Cy6PIRzsp09m2cTw8mqNVH/aCBWBpos=
Received: from mimecast-mx02.redhat.com (mx-ext.redhat.com [66.187.233.73]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-652-ooNK0SzLNpWRpCRAHBJa0g-1; Wed, 13 Mar 2024 10:32:10 -0400
X-MC-Unique: ooNK0SzLNpWRpCRAHBJa0g-1
Received: from smtp.corp.redhat.com (int-mx03.intmail.prod.int.rdu2.redhat.com [10.11.54.3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id E4A60282477D; Wed, 13 Mar 2024 14:32:09 +0000 (UTC)
Received: from localhost (unknown [10.43.135.229]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 37C031121306; Wed, 13 Mar 2024 14:32:09 +0000 (UTC)
Date: Wed, 13 Mar 2024 15:32:08 +0100
From: Miroslav Lichvar <mlichvar@redhat.com>
To: Rodney Cummings <rodney.cummings=40keysight.com@dmarc.ietf.org>
Cc: NTP WG <ntp@ietf.org>, Doug Arnold <doug.arnold@meinberg-usa.com>
Message-ID: <ZfG46DseQnstP42z@localhost>
References: <DM6PR17MB3484BA12E5E0214094779270832B2@DM6PR17MB3484.namprd17.prod.outlook.com>
MIME-Version: 1.0
In-Reply-To: <DM6PR17MB3484BA12E5E0214094779270832B2@DM6PR17MB3484.namprd17.prod.outlook.com>
X-Scanned-By: MIMEDefang 3.4.1 on 10.11.54.3
X-Mimecast-Spam-Score: 0
X-Mimecast-Originator: redhat.com
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/r3eSu0qOvoZQuLt7zaZQDFvoL6U>
Subject: Re: [Ntp] ntp-over-ptp concerns
X-BeenThere: ntp@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Network Time Protocol <ntp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ntp>, <mailto:ntp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp/>
List-Post: <mailto:ntp@ietf.org>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ntp>, <mailto:ntp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Mar 2024 14:32:17 -0000

On Tue, Mar 12, 2024 at 11:42:18PM +0000, Rodney Cummings wrote:
> 1. The draft violates the IETF NTP WG charter. The draft does not enhance NTP. The draft specifies a TLV to enhance PTP. Therefore, the project should have been proposed in the IEEE 1588 Working Group.

I'm not sure if I can agree with that statement. I'd say NTP over PTP
enhances NTP by giving it a new transport. It's not useful for PTP in
any way. PTP already has multiple transports specified and more can
be specified by anyone who needs it. It could use NTP as a transport
if someone thought that was useful. NTP currently has just one
transport (UDP) and this would be the second one.

I think that would be like saying that DNS over HTTPS enhances HTTPS.
No, it's just an additional transport to carry DNS messages that has
some useful properties that the original transport doesn't have (e.g.
encryption).

> 2. The protocol specified in the draft uses two IEEE 1588 message formats, and therefore the protocol advertises itself as conformant to the IEEE 1588 standard. The protocol is not conformant to IEEE 1588, in that it ignores most requirements of that standard. This sort of disregard for IEEE conformance has never been published in the past by IETF. In the past, cooperation between IETF WGs and IEEE WGs has been excellent, and it is important that this cooperation continue.

NTP over PTP uses unicast delay requests conforming to IEEE 1588. If
such a message reaches a PTP implementation conforming to one of the
specific PTP profiles, the PTP clock will either ignore it (e.g. due
to unexpected domain number) or respond with a valid delay response,
which will be ignored by the NTP-over-PTP host. The NTP-over-PTP host
doesn't send announce messages, so it cannot be selected as the master
clock. If it received multicast delay requests from other hosts, it
would ignore them due to missing the NTP TLV.

> 3. If objection #1 and #2 are ignored, there is the problem that the draft's protocol breaks other conformant PTP Profiles that are running on the same network. Apparently, the draft is attempting to use domainNumber of 123 to isolate itself from other conformant PTP Profiles. This attempt is technically insufficient, because any other conformant PTP Profile is allowed to also use domainNumber 123.

Ok, that's a fair point. I think we can change it to allow a range of
domain numbers, so admins can avoid conflicts with future PTP
profiles if they need to be used alongside NTP over PTP.

> If IETF wishes to specify an isolated protocol, IETF must register to obtain an IEEE 1588 sdoId for that purpose, as described in:
>    https://standards.ieee.org/products-programs/regauth/sdoid/

Thanks, I think we can look into that.

> I would like to suggest a solution to all three of these problems.
> 
> The IEEE 1588 Working Group has recently submitted an IEEE Project Authorization Request (PAR) for IEEE P1588.1, Client Server Precision Time Protocol (CSPTP). The goals for the CSPTP project are to formally specify a simple client/server message exchange, similar to the message exchange described in draft-ietf-ntp-over-ptp-02. CSPTP will meet IEEE conformance and compatibility requirements, including use of sdoId.
> 
> IEEE approval of the new PAR for CSPTP is scheduled for May 2024, after which proposals will begin, leading to draft text. If the IEEE 1588 WG and IETF NTP WG cooperate to propose a TLV for CSPTP that encapsulates NTP, the result will effectively be NTP-over-CSPTP. In my view, that sort of IEEE/IETF cooperation is the best approach.

I couldn't find any information about this online. The "Client Server"
part indicates a new PTP exchange will be defined, perhaps using new
message types? But I'm not sure what difference it makes if we use
CSPTP instead of PTP for transporting NTP. If CSPTP can be made to
conform to the existing IEEE requirement, NTP-over-PTP can be changed
to do that too, right?

If you are only starting now, how long will it take to be finalized?
NTP over PTP started 3 years ago. We already have experimental
implementations, confirmed to be working with existing hardware. If
you are interested in IEEE/IETF cooperation, why don't you help us
finish it? The development would need to be public either way.

If there are other protocols interested in this, I think we can change
it from NTP to a more general UDP or IP transport.

-- 
Miroslav Lichvar