From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-yw0-f43.google.com (mail-yw0-f43.google.com [209.85.213.43]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id AD68F20019F for ; Tue, 21 Aug 2012 15:03:45 -0700 (PDT) Received: by yhl10 with SMTP id 10so581338yhl.16 for ; Tue, 21 Aug 2012 15:03:44 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-originating-ip:in-reply-to:references:date :message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=J6xyqwaHRqxooqyKTAOY4rV+l1h9j4TbsKAwEGRgn90=; b=Y+oAff9HVuklhB0NEzmwy25a0ifiSP6bWWiJL3o6bMCa/gMjZZnmXl/6neycI/j5Ya i3rasOv/UucBUvAzYuZBgRf4W5kz8rP1q+Vv2+2aWbdoadK3/BA4RDkSEdkuE53KIc9G 3W/iTUceqNGY8YbnzumMGZUyiDroGekafcmV1qNVaUI6e31ZJcSrAPfdBM+pnI4G98V9 FJpir5qGUvcdvXK8jB0ZQNaGoM3lhDvBxdKOaG9rDLQERjBK1wjcOsUbauxJKdoqtSwD Gu/wbt+qXj3JLp0dSrCm/QR35n7kmT1lvNxa5X0iF/p+H7G3g81Ujpd847tz2bfihX/Y 5qtg== MIME-Version: 1.0 Received: by 10.50.95.228 with SMTP id dn4mr71421igb.25.1345586623994; Tue, 21 Aug 2012 15:03:43 -0700 (PDT) Received: by 10.64.77.198 with HTTP; Tue, 21 Aug 2012 15:03:42 -0700 (PDT) X-Originating-IP: [2001:470:71:c8:5c63:8808:db2f:4919] In-Reply-To: <19070.1345504767@sandelman.ca> References: <502E064C.50305@etorok.net> <502E9609.5040800@etorok.net> <9246.1345321014@sandelman.ca> <19070.1345504767@sandelman.ca> Date: Wed, 22 Aug 2012 00:03:42 +0200 Message-ID: From: Maciej Soltysiak To: Michael Richardson Content-Type: text/plain; charset=UTF-8 X-Gm-Message-State: ALoCoQkA2DW3pr3v/V2E+Aq71hRi37q15R1n30Jft/4DoqJiVntcVmb/XqfDJuKKn1bSHFWz38E6 Cc: cerowrt-devel@lists.bufferbloat.net Subject: Re: [Cerowrt-devel] cerowrt 3.3.8-17: nice latency improvements, some issues with bind X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Aug 2012 22:03:46 -0000 > Good idea, but you need DNS to find that server, and you need > time to do DNSSEC. How about this: 1) do a 1 time `host time.nist.gov 8.8.8.8` and feed that to NTP config file 2) make NTP get time from the IP of time.nist.gov resolved from step 1 3) start bind with dnssec p.s. you could change 8.8.8.8 to DNS server you got from ISP DHCP if you have it, if not, fall back this one time to 8.8.8.8 Regards, Maciej