Timing & Synchronization Technological...
Transcript of Timing & Synchronization Technological...
Power Matters.TM 1© 2015 Microsemi Corporation. Company Proprietary
Power Matters.TM
Trusted Innovative Market Driven
Timing & Synchronization Technological Seminar Eran GilatOctober 2015
Power Matters.TM 2© 2015 Microsemi Corporation. Company Proprietary
Introducing the new SyncServers
SyncServer S600
SyncServer S650
Power Matters.TM 3© 2015 Microsemi Corporation. Company Proprietary
SyncServer S600 & S650 Views
Front
S600 Rear
S650 Rear,
No Modules
Installed
S650 Rear,
2 modules
Installed
Power Matters.TM 4© 2015 Microsemi Corporation. Company Proprietary
SyncServer Front Panel
Display
Vacuum
fluorescent
Graphical;
Multiple time
formats
LEDs
Sync
Network
Alarm
Keypad
Basic setup:
TIME formats
STATUS
MENU
Space for
future features
Power Matters.TM 5© 2015 Microsemi Corporation. Company Proprietary
SyncServer S600 Rear
Power
Single or Dual
AC power
supplies,
hitless
switching.
Alarm
relay
Network
Four GbE
Ports.
Serial
Console port
for limited CLI
control.
Dedicated
serial
Data/Timing
output port.
GNSS
Antenna
1PPS Output
Power Matters.TM 6© 2015 Microsemi Corporation. Company Proprietary
SyncServer S650 Rear
Two option
module bays
Shown with two
optional Timing I/O
modules installed
Same features
as S600
Power Matters.TM 7© 2015 Microsemi Corporation. Company Proprietary
Advanced & Functional Design
Motherboard
Single or dual
power
supplies;
Hitless
switching
Rubidium and
OCXO upgrades
GNSS ModuleTwo module
slots,
(Timing I/O
Modules
installed)
Power Matters.TM 8© 2015 Microsemi Corporation. Company Proprietary
Web Based User Interface
Live Demonstration
on Day 3
Power Matters.TM 9© 2015 Microsemi Corporation. Company Proprietary
S600/S650 Common Key Features
Security
Accuracy
Flexibility
Power Matters.TM 10© 2015 Microsemi Corporation. Company Proprietary
Four (4) independent GbE ports (not a switch)
All ports equipped with hardware time stamping
Management and Timing on Port 1 only
Ports 2, 3, 4 Timing Only
Port isolation so each port operates as a time
server
IPv4/IPv6
PTP-ready (future software upgrade)
Networking Features
Po
rt
Tim
ing
Man
ag
em
en
t
1
2
3
4
Power Matters.TM 11© 2015 Microsemi Corporation. Company Proprietary
Hardware Clock (1PPS)• 10 ns RMS, +/- 60 ns to UTC while tracking GPS
24 Hour Holdover Accuracy• Standard: 400 microseconds
• OCXO: 25 microseconds (16x better than standard)
• Rubidium: <1 microsecond (25x better than OCXO, 400x better than standard…. <3 us at 3 days)
NTP timestamps hardware based• Input NTPd time stamps (T2) same accuracy as Hardware clock
• Output NTPd time stamps (T3) accuracy very close to Hardware clock as a patented Microsemi NTP egress packet delay algorithm continuously monitors and compensates for egress delays in real time.
Accuracy Features
..... .......
Precise &
Accurate
Specifications are preliminary test results.
Official specifications will be listed in the datasheet
Power Matters.TM 12© 2015 Microsemi Corporation. Company Proprietary
Standard• 4 Independent LAN ports
– Management relegated to only LAN1
• Separate Access Control Lists per port
• SSL/HTTPS Only (no HTTP)
• SSH CLI Only, minimal functions (no telnet)
• NTP MD5 Authentication
• Service termination capability
• CPU Protection against DoS attacks
Security Protocols Upgrade License• NTP Autokey (Server & Client)
• TACACS+, RADIUS, LDAP
• NTP Reflector
No USB ports• Some IT network departments consider USB a point of
vulnerability in network IT operations
Security Features
Power Matters.TM 13© 2015 Microsemi Corporation. Company Proprietary
Security
Accuracy
Flexibility
Introducing the…
Security-Hardened NTP Reflector
Power Matters.TM 14© 2015 Microsemi Corporation. Company Proprietary
NTP Operations 100% in hardware (FPGA)
Virtually hacker proof
• All Non-NTP/non-allowed packets are dropped
Ultra High Capacity
• Operates at 1GbE line speed
• More than 120,000 NTP requests per second
Best possible time stamp accuracy
• Same accuracy as the clock specification
Included only with the Security Protocol License Option
Security-Hardened NTP Reflector
Power Matters.TM 15© 2015 Microsemi Corporation. Company Proprietary
What is an NTP Reflector?
FPGA
NTP Reflector
Bit Bucket
CPU
Inbound NTP Packets
Time-Stamped NTP Packets
Network port
configuration
Messages only.
Bandwidth
Limited.
• Almost 100% of Non-NTP
Traffic is dropped
• Malformed NTP Packets are
dropped
Non-NTP Traffic
N
e
t
w
o
r
k
Power Matters.TM 16© 2015 Microsemi Corporation. Company Proprietary
Security
DDoS* NTP attacks cannot bring the ports down as it operates at line speed
Cannot be disrupted by malformed NTP packets as they will be dropped
Not susceptible to reflection amplification attacks as only small, standard NTP packets are served.
Most non-supported packet types are dropped.
Soft packets passed through are bandwidth limited and restricted only to packets necessary to configure the port on the network (i.e. ARP, Ping, etc.)
Virtually hackerproof
Performance
Can accommodate >100,000 NTP requests per second
Timestamp accuracy is nanoseconds to UTC (same as S600)
NTP packet processing load does not impact other server operations.
No asymmetric delay related timing errors.
Security-Hardened NTP Reflector Benefits
NTP reflector ports are high performance, high accuracy and ultra secure.
* DDoS = Distributed Denial of Service: is a type of DOS attack
where multiple compromised systems, which are often infected
with a Trojan, are used to target a single system causing a Denial
of Service (DoS) attack.
Power Matters.TM 17© 2015 Microsemi Corporation. Company Proprietary
NTP Operations
Part of the Security Protocol License option
Ports 2, 3, 4 Only
NTPd or NTP Reflector per port
Operates at line speed, approximately 120,000 NTP packets/second (all ports combined)
NTP reflection can be simultaneous on all enabled ports.
NTP MD5, Autokey, peering, etc. are not supported with NTP Reflector
Protection/Notification Operations
NTP uses vulnerable UDP protocol• UDP is connectionless, “fire-and-forget”
sending of packets from clients
• No TCP connection
• Easy to spoof an NTP client
NTP reflector monitors running average NTP request load
DDoS detection• NTP DDoS notification if load dramatically
exceeds the running average
• Set an SNMP trap
• Trap on excessive malformed NTP packets.
Security-Hardened NTP Reflector Features
VERY NTP Reflector will be available shortly after product release.
IMPORTANT Will appear with a software release planned for Q2-2016.
Must have the Security Protocol License.
Power Matters.TM 18© 2015 Microsemi Corporation. Company Proprietary
Standard and Optional Security
Key Features Hardening Authentication Access
Sta
nd
ard
NTP MD5 Client server
authentication
Access Control
List/Port
IP address
filtering in
software
IP address
filtering in
software
Packet Limiting Protect CPU
from DoS
attack
Se
cu
rity
Up
gra
de NTP Reflector Packet type
filtering in
hardware
Packet type
filtering in
hardware
NTP Autokey Client server
authentication
TACACS+
RADIUS
LDAP
Remote user authentication
for Management access
Power Matters.TM 19© 2015 Microsemi Corporation. Company Proprietary
Timing
• Standard NTP capacity 10,000 NTP requests per second
• Upgraded capacity 120,000 NTP requests per second
• OCXO & Rubidium Upgrades
• NTPd for time crosschecking
• External frequency references (S650)
• GLONASS/SBAS Ready (future software upgrade)
Design
• Dual power supply option (locking cable connections)
• Active Thermal Compensation technology
• Upgraded components to support a wide -20C to 65C temperature specification (non-rubidium product)
• Vibration tested per MIL-STD-810G; Altitude tested 13,000 ft. (3900 m)
• Earthquake/Seismic tested to ETSI ETS 300 019 2-3/ NEBS GR-63 CORE 4.4
• Highly Accelerated Life Tested (HALT)
User Notification
• SNMP, emails, customizable alarms
Reliability Features
MIL-STD
810G
Power Matters.TM 20© 2015 Microsemi Corporation. Company Proprietary
Modern web interface
• Desktop, laptop, tablet browsers supported
Keypad/display
Automatic software release availability
notification
New SyncServer Service Plan
Multiport GbE
IPv4/IPv6 compatible
Ease-of-Use
Power Matters.TM 21© 2015 Microsemi Corporation. Company Proprietary
Software Upgrades (purchase anytime)• Security Protocols License
– Includes Security-Hardened NTP Reflector
Hardware Upgrades • OCXO
• Rubidium
• Second power supply
SyncServer S600 Options
Power Matters.TM 22© 2015 Microsemi Corporation. Company Proprietary
Component Clocks on S6x0
Power Matters.TM 23© 2015 Microsemi Corporation. Company Proprietary
Surviving Temporary Outages
Rubidium MAC is an ideal solution for GPS and PTP holdover
Provides long term frequency and time holdover stability
• Performance is significantly better than high-end Quartz
• ~5µsec/5 days holdover
Microsemi Engineering Data
Power Matters.TM 24© 2015 Microsemi Corporation. Company Proprietary
Competitively superior:• Size – ¾ the volume of the nearest competitor; only 20% of the
volume of the main competitor!
• Power – half the power of the competition.
• Footprint – same as many standard OCXO’s
– Small enough and low-power enough to be mounted directly on PCBA in many applications.
• Widest operating temperature range
• Best temperature coefficient
• ONLY Rb clock with laser-based (not lamp-based) source; so no frequency “hops & pops” associated with lamp-based clocks
• Highly reliable – MTBF based on field data ~3 million hours
The MAC Value Proposition
Power Matters.TM 25© 2015 Microsemi Corporation. Company Proprietary
Making Time A Trusted Service
#1
#2
Rubidium
Holdover
GPS
MAC Rubidium serves the needs of the Enterprise
customer applications with a
robust holdover
Power Matters.TM 26© 2015 Microsemi Corporation. Company Proprietary
Security Protocol License Option
Features & Benefits
Security
Accuracy
Flexibility
Power Matters.TM 27© 2015 Microsemi Corporation. Company Proprietary
Standard and Optional Security
Key Features Hardening Authentication Access
Sta
nd
ard
NTP MD5 Client server
authentication
Access Control
List/Port
IP address
filtering in
software
IP address
filtering in
software
Packet Limiting Protect CPU
from DoS
attack
Se
cu
rity
Up
gra
de NTP Reflector Packet type
filtering in
hardware
Packet type
filtering in
hardware
NTP Autokey Client server
authentication
TACACS+
RADIUS
LDAP
Remote user authentication
for Management access
Power Matters.TM 28© 2015 Microsemi Corporation. Company Proprietary
S650 Key Features & Options
Security
Accuracy
Flexibility
Power Matters.TM 29© 2015 Microsemi Corporation. Company Proprietary
Two option module slots
One module choice at initial release*
Modules are factory installed
Timing I/O Module• 2 Input BNCs
• 6 Output BNCs
• Standard Signal I/O Configuration
• FlexPort License Upgrade (software enabled)
S650 can be sold without modules
S650 Option Slots & Optional Timing I/O Module
Slot A Slot B
* More planned, wait until Day 3!
Optional
Timing I/O
module
Power Matters.TM 30© 2015 Microsemi Corporation. Company Proprietary
Timing I/O Module Signal Assignments
Timing I/O Standard Configuration (Fixed)
Input Output
IRIG B AM
or 1PPS
IRIG B
AM
IRIG B
DCLS
off
10 MHz 10 MHz 1PPS off
Standard
Configuration
Very similar to
S250/S350/
XL-GPS/XLi
standard I/O
Power Matters.TM 31© 2015 Microsemi Corporation. Company Proprietary
Security
Accuracy
Flexibility
Introducing…
FlexPort Technology
Power Matters.TM 32© 2015 Microsemi Corporation. Company Proprietary
Legacy Rate Gen. Hardware----Rates
----Rates----Rates
FlexPort License TechnologyB
ack P
lane
Legacy Sine Wave Hardware~~~~Sine Waves
~~~~Sine Waves~~~~Sine Waves
Legacy Time Code Hardware----Time Codes
----Time Codes----Time Codes
Time CodesSine WavesRates
Time CodesSine WavesRates
Time CodesSine WavesRates
FlexPort Flexible Signal
Generation Hardware
New Technology… Any Signal Any Port
Power Matters.TM 33© 2015 Microsemi Corporation. Company Proprietary
Timing I/O Module Signal Assignments
Timing I/O Standard Configuration (Fixed)
Input Output
IRIG B AM
or 1PPS
IRIG B
AM
IRIG B
DCLS
off
10 MHz 10 MHz 1PPS off
Timing I/O FlexPort Configuration (Optional)
Input Output
Flex Time
Code/ RateFlex Flex Flex
Flex Sine Flex Flex Flex
FlexPort
Software
Upgrade
Option
Flex
Any Time Code*
Any Fixed Rate*
Programmable rates
Any Sine Wave*
*See datasheet for supported Time Codes, Rates and Sine Waves
Standard
Configuration
Very similar to
S250/S350/
XL-GPS/XLi
standard I/O
Power Matters.TM 34© 2015 Microsemi Corporation. Company Proprietary
Software Upgrades (purchase anytime)• Security Protocols License
– Includes Security-Hardened NTP Reflector
• FlexPort for Timing I/O modules
– if Timing I/O module(s) installed
Hardware Upgrades • OCXO
• Rubidium
• Second power supply
• Timing I/O Modules (1 or 2)
SyncServer S650 Options
Power Matters.TM 35© 2015 Microsemi Corporation. Company Proprietary
Merging the best of Network and Timing in a single chassis• High accuracy & excellent holdover
• 4x GbE ports
– (all hardware time stamped enabled)
• Robust environmental specifications
• Leverage software option upgrades
Innovative Features• Security-Hardened NTP Reflector
• FlexPort Technology
• NTP hardware time stamping
New configuration choices
Best in class Time Server/GPS Instrument!
Session Key Points
Security
Accuracy
Flexibility
Power Matters.TM 36© 2015 Microsemi Corporation. Company Proprietary
Microsemi Corporation (Nasdaq: MSCC) offers a comprehensive portfolio of semiconductor and system
solutions for communications, defense & security, aerospace and industrial markets. Products include high-
performance and radiation-hardened analog mixed-signal integrated circuits, FPGAs, SoCs and ASICs; power
management products; timing and synchronization devices and precise time solutions, setting the world’s
standard for time; voice processing devices; RF solutions; discrete components; security technologies and
scalable anti-tamper products; Power-over-Ethernet ICs and midspans; as well as custom design capabilities
and services. Microsemi is headquartered in Aliso Viejo, Calif., and has approximately 3,400 employees globally.
Learn more at www.microsemi.com.
©2015 Microsemi Corporation. All rights reserved. Microsemi and the Microsemi logo are registered trademarks of Microsemi Corporation. All other
trademarks and service marks are the property of their respective owners.
Microsemi makes no warranty, representation, or guarantee regarding the information contained herein or the suitability of its products and services for
any particular purpose, nor does Microsemi assume any liability whatsoever arising out of the application or use of any product or circuit. The products
sold hereunder and any other products sold by Microsemi have been subject to limited testing and should not be used in conjunction with mission-critical
equipment or applications. Any performance specifications are believed to be reliable but are not verified, and Buyer must conduct and complete all
performance and other testing of the products, alone and together with, or installed in, any end-products. Buyer shall not rely on any data and
performance specifications or parameters provided by Microsemi. It is the Buyer’s responsibility to independently determine suitability of any products and
to test and verify the same. The information provided by Microsemi hereunder is provided “as is, where is” and with all faults, and the entire risk
associated with such information is entirely with the Buyer. Microsemi does not grant, explicitly or implicitly, to any party any patent rights, licenses, or any
other IP rights, whether with regard to such information itself or anything described by such information. Information provided in this document is
proprietary to Microsemi, and Microsemi reserves the right to make any changes to the information in this document or to any products and services at
any time without notice.
Microsemi Corporate Headquarters
One Enterprise, Aliso Viejo, CA 92656 USA
Within the USA: +1 (800) 713-4113
Outside the USA: +1 (949) 380-6100
Sales: +1 (949) 380-6136
Fax: +1 (949) 215-4996
email: [email protected]
Thank You!