See https://github.com/siderolabs/talos/issues/7080#issuecomment-1696105986 The NTP spike detector code was refactored out of the main NTP code so that it can be unit-tested. I dropped one check which I think is causing false-positives in the spike detector (when NTP offset is higher than the RTT of the best packet received so far). The overall flow resembles the one in systemd-timesync, the current implementation has this check:6639ac474e/src/timesync/timesyncd-manager.c (L357-L360)
This check was introduced in the initial release, after some refactoring:3dbc762003 (diff-4aa9995f07bb31b9884d40a7634f5f6d30245dfd26ac27b89cd5fd3bd4eef56aR429-R431)
There is no equivalent of it in the RFC: https://datatracker.ietf.org/doc/html/rfc5905#appendix-A.5.2 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>