You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Tree:
aff57f6d18
OPENBSD_2_0
OPENBSD_2_1
OPENBSD_2_2
OPENBSD_2_3
OPENBSD_2_4
OPENBSD_2_5
OPENBSD_2_6
OPENBSD_2_7
OPENBSD_2_8
OPENBSD_2_9
OPENBSD_3_0
OPENBSD_3_1
OPENBSD_3_2
OPENBSD_3_3
OPENBSD_3_4
OPENBSD_3_5
OPENBSD_3_6
OPENBSD_3_7
OPENBSD_3_8
OPENBSD_3_9
OPENBSD_4_0
OPENBSD_4_1
OPENBSD_4_2
OPENBSD_4_3
OPENBSD_4_4
OPENBSD_4_5
OPENBSD_4_6
OPENBSD_4_7
OPENBSD_4_8
OPENBSD_4_9
OPENBSD_5_0
OPENBSD_5_1
OPENBSD_5_2
OPENBSD_5_3
OPENBSD_5_4
OPENBSD_5_5
OPENBSD_5_6
OPENBSD_5_7
OPENBSD_5_8
OPENBSD_5_9
OPENBSD_6_0
OPENBSD_6_1
OPENBSD_6_2
OPENBSD_6_3
OPENBSD_6_4
OPENBSD_6_5
OPENBSD_6_6
OPENBSD_6_7
master
startup100
openntpd-6.2p3
openntpd-6.2p2
openntpd-6.2p1
openntpd-6.1p1
openntpd-6.0p1
openntpd-5.9p1
openntpd-5.7p4
openntpd-5.7p3
openntpd-5.7p2
openntpd-5.7p1
PPP1_5
PEFO960729
OPENBSD_6_7_BASE
OPENBSD_6_6_BASE
OPENBSD_6_5_BASE
OPENBSD_6_4_BASE
OPENBSD_6_3_BASE
OPENBSD_6_2_BASE
OPENBSD_6_1_BASE
OPENBSD_6_0_BASE
OPENBSD_5_9_BASE
OPENBSD_5_8_BASE
OPENBSD_5_7_BASE
OPENBSD_5_6_BASE
OPENBSD_5_5_BASE
OPENBSD_5_4_BASE
OPENBSD_5_3_BASE
OPENBSD_5_2_BASE
OPENBSD_5_1_BASE
OPENBSD_5_0_BASE
OPENBSD_4_9_BASE
OPENBSD_4_8_BASE
OPENBSD_4_7_BASE
OPENBSD_4_6_BASE
OPENBSD_4_5_BASE
OPENBSD_4_4_BASE
OPENBSD_4_3_BASE
OPENBSD_4_2_BASE
OPENBSD_4_1_BASE
OPENBSD_4_0_BASE
OPENBSD_3_9_BASE
OPENBSD_3_8_BASE
OPENBSD_3_7_BASE
OPENBSD_3_6_BASE
OPENBSD_3_5_BASE
OPENBSD_3_4_BASE
OPENBSD_3_3_BASE
OPENBSD_3_2_BASE
OPENBSD_3_1_BASE
OPENBSD_3_0_BASE
OPENBSD_2_9_BASE
OPENBSD_2_8_BASE
OPENBSD_2_7_BASE
OPENBSD_2_6_BASE
OPENBSD_2_5_BASE
OPENBSD_2_4_BASE
OPENBSD_2_3_BASE
OPENBSD_2_2_BASE
OPENBSD_2_1_BASE
OPENBSD_2_0_BASE
reyk
aff57f6d18
Currently, after 4 failed constraint checks, we suspect the constraint
of being wrong, not the NTP responses, reset it and query it from all the constraint servers all over again. This is turned out to be a bit aggressive because it could get triggered with just a few bad NTP peers in a larger pool. To avoid constant reconnections, scale the error margin with the number of resolved NTP peers using peer_cnt * 4. This way a single or a few outliers in a NTP pool cannot trigger reconnecting to the constraint servers immediately. More NTP peers, less reason to mistrust the constraint. Found by dtucker@ OK deraadt@ |
9 years ago | |
|---|---|---|
| src | Currently, after 4 failed constraint checks, we suspect the constraint | 9 years ago |