TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

More Memory Safety for Let's Encrypt: Deploying ntpd-rs

348 pointsby Dunedan11 months ago

10 comments

NelsonMinar11 months ago
I like the idea of NTPD in Rust. Is there anything to read about how well ntpd-rs performs? Would love a new column for chrony&#x27;s comparison: <a href="https:&#x2F;&#x2F;chrony-project.org&#x2F;comparison.html" rel="nofollow">https:&#x2F;&#x2F;chrony-project.org&#x2F;comparison.html</a><p>Particularly interested in the performance stats, how well the daemon keeps time in the face of various network problems. Chrony is very good at this. Some of the other NTP implementations (not on that chart) are so bad they shouldn&#x27;t be used in production.
评论 #40785066 未加载
ComputerGuru11 months ago
Unlike say, coreutils, ntp is something very far from being a solved problem and the memory safety of the solution is unfortunately going to play second fiddle to its efficacy.<p>For example, we only use chrony because it’s so much better than whatever came with your system (especially on virtual machines). ntpd-rs would have to come at least within spitting distance of chrony’s time keeping abilities to even be up for consideration.<p>(And I say this as a massive rust aficionado using it for both work and pleasure.)
评论 #40785328 未加载
评论 #40781355 未加载
评论 #40785088 未加载
评论 #40787444 未加载
cogman1011 months ago
This seems like a weird place to be touting memory safety.<p>It&#x27;s ntpd, it doesn&#x27;t seem like a place for any sort of attack vector and it&#x27;s been running on many VMs without exploding memory for a while now.<p>I&#x27;d think there are far more critical components to rewrite in a memory safe language than the clock synchronizer.
评论 #40781863 未加载
评论 #40781767 未加载
评论 #40781598 未加载
评论 #40782119 未加载
评论 #40785549 未加载
评论 #40790788 未加载
mre11 months ago
I spoke with Folkert, one of the developers on this project, on the &#x27;Rust in Production&#x27; podcast. Some of you might find it interesting: <a href="https:&#x2F;&#x2F;corrode.dev&#x2F;podcast&#x2F;s01e05-tweede-golf&#x2F;" rel="nofollow">https:&#x2F;&#x2F;corrode.dev&#x2F;podcast&#x2F;s01e05-tweede-golf&#x2F;</a>
akira250111 months ago
Why does your ntpd have a json dependency?
评论 #40780845 未加载
评论 #40785191 未加载
评论 #40780953 未加载
hcfman11 months ago
If you want to setup a chrony time server that maintains accuracy to within a microsecond and doesn’t do this with a network connection then you could try my sbts-aru project and just not use the audio recorder parts of it.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;hcfman&#x2F;sbts-aru">https:&#x2F;&#x2F;github.com&#x2F;hcfman&#x2F;sbts-aru</a><p>It installs with a single command on all Raspberry Pi versions and takes care of all the dependencies, configuration and startup order details to install and start working with one command.<p>It’s a sound localizing audio recorder platform and that’s why it also sets up accurate time.<p>It’s using GPS to get its time from.
_joel11 months ago
Reading this reminded me of ntpsec, anyone actually use that?
评论 #40783119 未加载
xvilka11 months ago
BGP probably should be the next.
nubinetwork11 months ago
The problem with ntp isn&#x27;t the client, it&#x27;s the servers having to deal with forged UDP packets. Will ntpd ever become TCP-only? Sadly I&#x27;m not holding my breath. I stopped running a public stratum 3 server ~10 years ago.
评论 #40781775 未加载
评论 #40781881 未加载
hoseja11 months ago
Free pair of knee-high socks with every cert.