timing & synchronization technological...

Power Matters.TM 1© 2015 Microsemi Corporation. Company Proprietary

Power Matters.TM

Trusted Innovative Market Driven

Timing & Synchronization Technological Seminar Eran GilatOctober 2015


Introducing the new SyncServers

SyncServer S600

SyncServer S650


SyncServer S600 & S650 Views

Front

S600 Rear

S650 Rear,

No Modules

Installed

S650 Rear,

2 modules

Installed


SyncServer Front Panel

Display

Vacuum

fluorescent

Graphical;

Multiple time

formats

LEDs

Sync

Network

Alarm

Keypad

Basic setup:

TIME formats

STATUS

MENU

Space for

future features


SyncServer S600 Rear

Power

Single or Dual

AC power

supplies,

hitless

switching.

Alarm

relay

Network

Four GbE

Ports.

Serial

Console port

for limited CLI

control.

Dedicated

serial

Data/Timing

output port.

GNSS

Antenna

1PPS Output


SyncServer S650 Rear

Two option

module bays

Shown with two

optional Timing I/O

modules installed

Same features

as S600


Advanced & Functional Design

Motherboard

Single or dual

power

supplies;

Hitless

switching

Rubidium and

OCXO upgrades

GNSS ModuleTwo module

slots,

(Timing I/O

Modules

installed)


Web Based User Interface

Live Demonstration

on Day 3


S600/S650 Common Key Features

Security

Accuracy

Flexibility


Four (4) independent GbE ports (not a switch)

All ports equipped with hardware time stamping

Management and Timing on Port 1 only

Ports 2, 3, 4 Timing Only

Port isolation so each port operates as a time

server

IPv4/IPv6

PTP-ready (future software upgrade)

Networking Features

Po

rt

Tim

ing

Man

ag

em

en

t

1

2

3

4


Hardware Clock (1PPS)• 10 ns RMS, +/- 60 ns to UTC while tracking GPS

24 Hour Holdover Accuracy• Standard: 400 microseconds

• OCXO: 25 microseconds (16x better than standard)

• Rubidium: <1 microsecond (25x better than OCXO, 400x better than standard…. <3 us at 3 days)

NTP timestamps hardware based• Input NTPd time stamps (T2) same accuracy as Hardware clock

• Output NTPd time stamps (T3) accuracy very close to Hardware clock as a patented Microsemi NTP egress packet delay algorithm continuously monitors and compensates for egress delays in real time.

Accuracy Features

..... .......

Precise &

Accurate

Specifications are preliminary test results.

Official specifications will be listed in the datasheet


Standard• 4 Independent LAN ports

– Management relegated to only LAN1

• Separate Access Control Lists per port

• SSL/HTTPS Only (no HTTP)

• SSH CLI Only, minimal functions (no telnet)

• NTP MD5 Authentication

• Service termination capability

• CPU Protection against DoS attacks

Security Protocols Upgrade License• NTP Autokey (Server & Client)

• TACACS+, RADIUS, LDAP

• NTP Reflector

No USB ports• Some IT network departments consider USB a point of

vulnerability in network IT operations

Security Features


Security

Accuracy

Flexibility

Introducing the…

Security-Hardened NTP Reflector


NTP Operations 100% in hardware (FPGA)

Virtually hacker proof

• All Non-NTP/non-allowed packets are dropped

Ultra High Capacity

• Operates at 1GbE line speed

• More than 120,000 NTP requests per second

Best possible time stamp accuracy

• Same accuracy as the clock specification

Included only with the Security Protocol License Option

Security-Hardened NTP Reflector


What is an NTP Reflector?

FPGA

NTP Reflector

Bit Bucket

CPU

Inbound NTP Packets

Time-Stamped NTP Packets

Network port

configuration

Messages only.

Bandwidth

Limited.

• Almost 100% of Non-NTP

Traffic is dropped

• Malformed NTP Packets are

dropped

Non-NTP Traffic

N

e

t

w

o

r

k


Security

DDoS* NTP attacks cannot bring the ports down as it operates at line speed

Cannot be disrupted by malformed NTP packets as they will be dropped

Not susceptible to reflection amplification attacks as only small, standard NTP packets are served.

Most non-supported packet types are dropped.

Soft packets passed through are bandwidth limited and restricted only to packets necessary to configure the port on the network (i.e. ARP, Ping, etc.)

Virtually hackerproof

Performance

Can accommodate >100,000 NTP requests per second

Timestamp accuracy is nanoseconds to UTC (same as S600)

NTP packet processing load does not impact other server operations.

No asymmetric delay related timing errors.

Security-Hardened NTP Reflector Benefits

NTP reflector ports are high performance, high accuracy and ultra secure.

* DDoS = Distributed Denial of Service: is a type of DOS attack

where multiple compromised systems, which are often infected

with a Trojan, are used to target a single system causing a Denial

of Service (DoS) attack.


NTP Operations

Part of the Security Protocol License option

Ports 2, 3, 4 Only

NTPd or NTP Reflector per port

Operates at line speed, approximately 120,000 NTP packets/second (all ports combined)

NTP reflection can be simultaneous on all enabled ports.

NTP MD5, Autokey, peering, etc. are not supported with NTP Reflector

Protection/Notification Operations

NTP uses vulnerable UDP protocol• UDP is connectionless, “fire-and-forget”

sending of packets from clients

• No TCP connection

• Easy to spoof an NTP client

NTP reflector monitors running average NTP request load

DDoS detection• NTP DDoS notification if load dramatically

exceeds the running average

• Set an SNMP trap

• Trap on excessive malformed NTP packets.

Security-Hardened NTP Reflector Features

VERY NTP Reflector will be available shortly after product release.

IMPORTANT Will appear with a software release planned for Q2-2016.

Must have the Security Protocol License.


Standard and Optional Security

Key Features Hardening Authentication Access

Sta

nd

ard

NTP MD5 Client server

authentication

Access Control

List/Port

IP address

filtering in

software

IP address

filtering in

software

Packet Limiting Protect CPU

from DoS

attack

Se

cu

rity

Up

gra

de NTP Reflector Packet type

filtering in

hardware

Packet type

filtering in

hardware

NTP Autokey Client server

authentication

TACACS+

RADIUS

LDAP

Remote user authentication

for Management access


Timing

• Standard NTP capacity 10,000 NTP requests per second

• Upgraded capacity 120,000 NTP requests per second

• OCXO & Rubidium Upgrades

• NTPd for time crosschecking

• External frequency references (S650)

• GLONASS/SBAS Ready (future software upgrade)

Design

• Dual power supply option (locking cable connections)

• Active Thermal Compensation technology

• Upgraded components to support a wide -20C to 65C temperature specification (non-rubidium product)

• Vibration tested per MIL-STD-810G; Altitude tested 13,000 ft. (3900 m)

• Earthquake/Seismic tested to ETSI ETS 300 019 2-3/ NEBS GR-63 CORE 4.4

• Highly Accelerated Life Tested (HALT)

User Notification

• SNMP, emails, customizable alarms

Reliability Features

MIL-STD

810G


Modern web interface

• Desktop, laptop, tablet browsers supported

Keypad/display

Automatic software release availability

notification

New SyncServer Service Plan

Multiport GbE

IPv4/IPv6 compatible

Ease-of-Use


Software Upgrades (purchase anytime)• Security Protocols License

– Includes Security-Hardened NTP Reflector

Hardware Upgrades • OCXO

• Rubidium

• Second power supply

SyncServer S600 Options


Component Clocks on S6x0


Surviving Temporary Outages

Rubidium MAC is an ideal solution for GPS and PTP holdover

Provides long term frequency and time holdover stability

• Performance is significantly better than high-end Quartz

• ~5µsec/5 days holdover

Microsemi Engineering Data


Competitively superior:• Size – ¾ the volume of the nearest competitor; only 20% of the

volume of the main competitor!

• Power – half the power of the competition.

• Footprint – same as many standard OCXO’s

– Small enough and low-power enough to be mounted directly on PCBA in many applications.

• Widest operating temperature range

• Best temperature coefficient

• ONLY Rb clock with laser-based (not lamp-based) source; so no frequency “hops & pops” associated with lamp-based clocks

• Highly reliable – MTBF based on field data ~3 million hours

The MAC Value Proposition


Making Time A Trusted Service

#1

#2

Rubidium

Holdover

GPS

MAC Rubidium serves the needs of the Enterprise

customer applications with a

robust holdover


Security Protocol License Option

Features & Benefits

Security

Accuracy

Flexibility


Standard and Optional Security

Key Features Hardening Authentication Access

Sta

nd

ard

NTP MD5 Client server

authentication

Access Control

List/Port

IP address

filtering in

software

IP address

filtering in

software

Packet Limiting Protect CPU

from DoS

attack

Se

cu

rity

Up

gra

de NTP Reflector Packet type

filtering in

hardware

Packet type

filtering in

hardware

NTP Autokey Client server

authentication

TACACS+

RADIUS

LDAP

Remote user authentication

for Management access


S650 Key Features & Options

Security

Accuracy

Flexibility


Two option module slots

One module choice at initial release*

Modules are factory installed

Timing I/O Module• 2 Input BNCs

• 6 Output BNCs

• Standard Signal I/O Configuration

• FlexPort License Upgrade (software enabled)

S650 can be sold without modules

S650 Option Slots & Optional Timing I/O Module

Slot A Slot B

* More planned, wait until Day 3!

Optional

Timing I/O

module


Timing I/O Module Signal Assignments

Timing I/O Standard Configuration (Fixed)

Input Output

IRIG B AM

or 1PPS

IRIG B

AM

IRIG B

DCLS

off

10 MHz 10 MHz 1PPS off

Standard

Configuration

Very similar to

S250/S350/

XL-GPS/XLi

standard I/O


Security

Accuracy

Flexibility

Introducing…

FlexPort Technology


Legacy Rate Gen. Hardware----Rates

----Rates----Rates

FlexPort License TechnologyB

ack P

lane

Legacy Sine Wave Hardware~~~~Sine Waves

~~~~Sine Waves~~~~Sine Waves

Legacy Time Code Hardware----Time Codes

----Time Codes----Time Codes

Time CodesSine WavesRates



FlexPort Flexible Signal

Generation Hardware

New Technology… Any Signal Any Port


Timing I/O Module Signal Assignments

Timing I/O Standard Configuration (Fixed)

Input Output

IRIG B AM

or 1PPS

IRIG B

AM

IRIG B

DCLS

off

10 MHz 10 MHz 1PPS off

Timing I/O FlexPort Configuration (Optional)

Input Output

Flex Time

Code/ RateFlex Flex Flex

Flex Sine Flex Flex Flex

FlexPort

Software

Upgrade

Option

Flex

Any Time Code*

Any Fixed Rate*

Programmable rates

Any Sine Wave*

*See datasheet for supported Time Codes, Rates and Sine Waves

Standard

Configuration

Very similar to

S250/S350/

XL-GPS/XLi

standard I/O


Software Upgrades (purchase anytime)• Security Protocols License

– Includes Security-Hardened NTP Reflector

• FlexPort for Timing I/O modules

– if Timing I/O module(s) installed

Hardware Upgrades • OCXO

• Rubidium

• Second power supply

• Timing I/O Modules (1 or 2)

SyncServer S650 Options


Merging the best of Network and Timing in a single chassis• High accuracy & excellent holdover

• 4x GbE ports

– (all hardware time stamped enabled)

• Robust environmental specifications

• Leverage software option upgrades

Innovative Features• Security-Hardened NTP Reflector

• FlexPort Technology

• NTP hardware time stamping

New configuration choices

Best in class Time Server/GPS Instrument!

Session Key Points

Security

Accuracy

Flexibility


Microsemi Corporation (Nasdaq: MSCC) offers a comprehensive portfolio of semiconductor and system

solutions for communications, defense & security, aerospace and industrial markets. Products include high-

performance and radiation-hardened analog mixed-signal integrated circuits, FPGAs, SoCs and ASICs; power

management products; timing and synchronization devices and precise time solutions, setting the world’s

standard for time; voice processing devices; RF solutions; discrete components; security technologies and

scalable anti-tamper products; Power-over-Ethernet ICs and midspans; as well as custom design capabilities

and services. Microsemi is headquartered in Aliso Viejo, Calif., and has approximately 3,400 employees globally.

Learn more at www.microsemi.com.

©2015 Microsemi Corporation. All rights reserved. Microsemi and the Microsemi logo are registered trademarks of Microsemi Corporation. All other

trademarks and service marks are the property of their respective owners.

Microsemi makes no warranty, representation, or guarantee regarding the information contained herein or the suitability of its products and services for

any particular purpose, nor does Microsemi assume any liability whatsoever arising out of the application or use of any product or circuit. The products

sold hereunder and any other products sold by Microsemi have been subject to limited testing and should not be used in conjunction with mission-critical

equipment or applications. Any performance specifications are believed to be reliable but are not verified, and Buyer must conduct and complete all

performance and other testing of the products, alone and together with, or installed in, any end-products. Buyer shall not rely on any data and

performance specifications or parameters provided by Microsemi. It is the Buyer’s responsibility to independently determine suitability of any products and

to test and verify the same. The information provided by Microsemi hereunder is provided “as is, where is” and with all faults, and the entire risk

associated with such information is entirely with the Buyer. Microsemi does not grant, explicitly or implicitly, to any party any patent rights, licenses, or any

other IP rights, whether with regard to such information itself or anything described by such information. Information provided in this document is

proprietary to Microsemi, and Microsemi reserves the right to make any changes to the information in this document or to any products and services at

any time without notice.

Microsemi Corporate Headquarters

One Enterprise, Aliso Viejo, CA 92656 USA

Within the USA: +1 (800) 713-4113

Outside the USA: +1 (949) 380-6100

Sales: +1 (949) 380-6136

Fax: +1 (949) 215-4996

email: [email protected]

Thank You!

timing & synchronization technological...

Documents