Niels, You’re the first person to mention neutral collocation facilities as a requirement. The OP only talked about servers generally. Obviously, building your own GPS-based NTP network requires you have visibility to the sky. However, that need not be rooftop access. We routinely locate GPS antennae for time synch at CLEC colos in an available window, behind the glass. Nobody has yet charged us anything more than a one-time cabling fee for that. But most carrier-neutral colos already have their own GPS-derived, non-Internet time source to which you can subscribe. There is thus no reason to build your own airgapped network, as one is already available from the facility. If you don’t need PTP 50-μs-precise timing for SONET and whatnot, ordinary NTP is very cost effective. For example: <https://docs.equinix.com/en-us/Content/Edge-Services/EPT/EPT.htm> About Equinix Precision Time<https://docs.equinix.com/en-us/Content/Edge-Services/EPT/EPT.htm> docs.equinix.com<https://docs.equinix.com/en-us/Content/Edge-Services/EPT/EPT.htm> [favicon-16x16.png]<https://docs.equinix.com/en-us/Content/Edge-Services/EPT/EPT.htm> Most colos also offer their own Stratum-1 public NTP servers for free. For example, Hurricane Electric (https://www.he.net/adm/ntp.html). Being you’re already on-net in the colo, that would still give you NTP that doesn’t transit the Internet. Still way better than pool.ntp.org! -mel On Aug 6, 2023, at 4:53 AM, Niels Bakker <niels=nanog@bakker.net> wrote: * mel@beckman.org (Mel Beckman) [Sun 06 Aug 2023, 04:26 CEST]: if you can eliminate such security problems for $400, I say it’s cheap at twice the price. You must be unfamiliar with the prices neutral colocation facilities charge for roof access. -- Niels.