>That's why you normally configure four, five, or seven servers.  These 
>"magic numbers" protect you against the failure of one, two, or three 
>servers respectively.  "Failure" can mean anything from not responding 
>to responding with the wrong year!

That's missing the point I was trying to make.  Let me try again.

If you have a system with redundancy, you also need a layer of
monitoring to see if it is working correctly.  Otherwise, when
something breaks, the system will take advantage of the redundancy
and keep working.  If nobody knows about the problem, it won't get
fixed.  After a while something else breaks.  Eventually you run
out of working redundancy and the system stops working.

There are all sorts of reasons why NTP servers might stop working.

The RAID example was a good one.

-- 
These are my opinions, not necessarily my employer's.  I hate spam.

_______________________________________________
questions mailing list
[email protected]
https://lists.ntp.org/mailman/listinfo/questions

Reply via email to